The main web interface port.

Objetivo

3000

Por defecto

3001

Valor

3001

Critical: Run 'openssl rand -hex 64' in your Unraid terminal and paste the randomized hash here.

Objetivo

SECRET_KEY_BASE

Internal wrapper flag required for Sure self-hosted mode. Leave unchanged.

Objetivo

SELF_HOSTED

Por defecto

true

Valor

true

Legacy upstream alias for self-hosted mode. Usually leave blank because SELF_HOSTED=true is already set by this wrapper.

Objetivo

SELF_HOSTING_ENABLED

Alpha-only Sure import NDJSON upload limit in megabytes. Lower it if this test instance has constrained storage or memory.

Objetivo

SURE_IMPORT_MAX_NDJSON_SIZE_MB

Por defecto

250

Valor

250

Alpha-only Sure import row limit used by web, API, and preflight paths.

Objetivo

SURE_IMPORT_MAX_ROWS

Por defecto

1000000

Valor

1000000

Internal rails file storage.

Objetivo

/rails/storage

Por defecto

/mnt/user/appdata/sure-aio-alpha/system

Valor

/mnt/user/appdata/sure-aio-alpha/system

Internal PostgreSQL database storage mapped externally so you don't lose data.

Objetivo

/var/lib/postgresql/data

Por defecto

/mnt/user/appdata/sure-aio-alpha/postgres

Valor

/mnt/user/appdata/sure-aio-alpha/postgres

Internal Redis memory cache.

Objetivo

/var/lib/redis

Por defecto

/mnt/user/appdata/sure-aio-alpha/redis

Valor

/mnt/user/appdata/sure-aio-alpha/redis

Optional host path to a PEM CA certificate file for trusting self-signed or internal HTTPS services. Leave blank unless you need private CA support.

Objetivo

/certs/custom-ca.pem

The domain your Sure instance is hosted at (used for email links).

Objetivo

APP_DOMAIN

Optional full external base URL including scheme, such as 'https://finance.example.com'. Useful for advanced SSO flows that need an absolute callback or issuer URL.

Objetivo

APP_URL

Controls user registration. Use 'open', 'closed', or 'invite_only'.

Objetivo

ONBOARDING_STATE

Por defecto

open

Valor

open

Optional global gate for account registration. Set to 'true' to require invite codes for sign-up.

Objetivo

REQUIRE_INVITE_CODE

Set to 'false' if you explicitly want to skip email confirmation for new accounts. Leave enabled for the safer default.

Objetivo

REQUIRE_EMAIL_CONFIRMATION

Por defecto

true

Valor

true

Leave 'false' for direct LAN access. Set to 'true' only when Sure sits behind a SSL-terminating reverse proxy.

Objetivo

RAILS_ASSUME_SSL

Por defecto

false

Valor

false

Leave 'false' for the default Unraid install over plain HTTP. Set to 'true' only if you want direct HTTP requests redirected to HTTPS.

Objetivo

RAILS_FORCE_SSL

Por defecto

false

Valor

false

Optional in-container path to a PEM CA certificate file. If you use the provided mount above, set this to '/certs/custom-ca.pem'.

Objetivo

SSL_CA_FILE

Optional full CA bundle path for advanced Ruby/OpenSSL trust overrides. Usually leave blank and use SSL_CA_FILE instead.

Objetivo

SSL_CERT_FILE

Leave 'true' for production. Set to 'false' only for temporary testing against broken or self-signed HTTPS endpoints.

Objetivo

SSL_VERIFY

Por defecto

true

Valor

true

Set to 'true' to log detailed outbound SSL trust and certificate diagnostics.

Objetivo

SSL_DEBUG

Por defecto

false

Valor

false

Optional external privacy-policy URL shown by the app when provided.

Objetivo

LEGAL_PRIVACY_URL

Optional external terms-of-service URL shown by the app when provided.

Objetivo

LEGAL_TERMS_URL

Optional external PostgreSQL host or container name. Example: '192.168.1.50' or 'postgres-shared' on a custom Docker network.

Objetivo

DB_HOST

Optional external PostgreSQL port. Example: '5432'.

Objetivo

DB_PORT

Optional external PostgreSQL database name. Leave blank to keep Sure's normal default database name.

Objetivo

POSTGRES_DB

Optional external PostgreSQL username. This user must already exist on your external database.

Objetivo

POSTGRES_USER

Optional password for the external PostgreSQL user above.

Objetivo

POSTGRES_PASSWORD

Optional external Redis URL. Example: 'redis://192.168.1.50:6379/1' or 'redis://:password@redis-host:6379/1'.

Objetivo

REDIS_URL

Optional Redis Sentinel hosts, comma-separated like 'host1:26379,host2:26379'. Takes precedence over REDIS_URL when set.

Objetivo

REDIS_SENTINEL_HOSTS

Redis Sentinel master name.

Objetivo

REDIS_SENTINEL_MASTER

Por defecto

mymaster

Valor

mymaster

Redis Sentinel username if your Sentinel deployment requires authentication.

Objetivo

REDIS_SENTINEL_USERNAME

Por defecto

default

Valor

default

Redis password used for Sentinel-backed Redis deployments.

Objetivo

REDIS_PASSWORD

Custom product name in UI.

Objetivo

PRODUCT_NAME

Custom brand name in UI.

Objetivo

BRAND_NAME

Choose the initial layout for new sessions. Use 'dashboard' for the standard app or 'intro' for the intro-first experience.

Objetivo

DEFAULT_UI_LAYOUT

Por defecto

dashboard

Valor

dashboard

Optional explicit Rails encryption primary key. Leave blank unless you deliberately manage separate Active Record encryption keys outside SECRET_KEY_BASE.

Objetivo

ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY

Optional deterministic encryption key paired with the primary key above. Leave blank unless you already know your Rails encryption key material.

Objetivo

ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY

Optional key-derivation salt for Rails encryption. Leave blank unless you manage custom encryption keys yourself.

Objetivo

ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT

OpenAI-compatible API key. Get OpenAI keys from platform.openai.com/api-keys. If using local Ollama, enter any non-empty placeholder such as 'ollama-local'.

Objetivo

OPENAI_ACCESS_TOKEN

Leave blank for official OpenAI. For local LLMs, enter your endpoint (e.g., 'http://ollama:11434/v1').

Objetivo

OPENAI_URI_BASE

If using Ollama, you MUST define the model here (e.g., 'llama3.1:13b' or 'gemma2:7b').

Objetivo

OPENAI_MODEL

Optional provider override used only for transaction categorization. Example: 'openai' or 'ollama'. If blank, Sure uses its normal AI provider behavior.

Objetivo

CATEGORIZATION_PROVIDER

Optional model override used only for categorization, such as 'gemma2:7b'.

Objetivo

CATEGORIZATION_MODEL

Optional provider override used only for chat-assistant requests. Example: 'openai' or 'ollama'.

Objetivo

CHAT_PROVIDER

Optional model override used only for chat-assistant requests, such as 'gpt-4.1' or a local Ollama model.

Objetivo

CHAT_MODEL

OpenAI-compatible request timeout in seconds. Raise this only if your provider or local LLM is slow to respond.

Objetivo

OPENAI_REQUEST_TIMEOUT

Por defecto

60

Valor

60

Optional structured-output override. Valid values are '', 'strict', 'none', or 'json_object'. Set this only if you need to force Sure's OpenAI JSON behavior globally.

Objetivo

LLM_JSON_MODE

Set to 'true' to enable verbose AI chat debugging in logs.

Objetivo

AI_DEBUG_MODE

Por defecto

false

Valor

false

Leave 'true' for OpenAI or vision-capable providers. Set to 'false' only for OpenAI-compatible endpoints that do not support PDF or vision input.

Objetivo

OPENAI_SUPPORTS_PDF_PROCESSING

Por defecto

true

Valor

true

Optional override for OpenAI-compatible endpoints. Use 'true' to force the Responses API or 'false' to force chat completions. Leave blank for upstream auto-detection.

Objetivo

OPENAI_SUPPORTS_RESPONSES_ENDPOINT

Optional total LLM context window in tokens. Lower this for small local models or raise it for larger cloud models.

Objetivo

LLM_CONTEXT_WINDOW

Optional tokens reserved for each model response. Leave blank for upstream defaults.

Objetivo

LLM_MAX_RESPONSE_TOKENS

Optional explicit chat history token budget. Leave blank so Sure derives it from context, response, and system-prompt reserves.

Objetivo

LLM_MAX_HISTORY_TOKENS

Optional tokens reserved for Sure's system prompt and instructions. Leave blank for upstream defaults.

Objetivo

LLM_SYSTEM_PROMPT_RESERVE

Optional maximum batch size for AI categorization and merchant-detection calls. Lower this for small local models.

Objetivo

LLM_MAX_ITEMS_PER_CALL

Optional document-search backend. Leave blank for the default path. Set to 'pgvector' to use PostgreSQL-based vectors or 'qdrant' for an external Qdrant server.

Objetivo

VECTOR_STORE_PROVIDER

Embedding model name used for document search. Example: 'nomic-embed-text'. This is required when you enable pgvector or qdrant-backed document search.

Objetivo

EMBEDDING_MODEL

Embedding width for the selected model. Must match the provider output.

Objetivo

EMBEDDING_DIMENSIONS

Por defecto

1024

Valor

1024

Optional dedicated embeddings endpoint. Example: 'http://ollama:11434/v1'. If blank, Sure falls back to OPENAI_URI_BASE.

Objetivo

EMBEDDING_URI_BASE

Optional dedicated embeddings token. If blank, Sure falls back to OPENAI_ACCESS_TOKEN.

Objetivo

EMBEDDING_ACCESS_TOKEN

Optional external Qdrant endpoint for vector storage. Example: 'http://192.168.1.50:6333'.

Objetivo

QDRANT_URL

Optional Qdrant API key from your Qdrant Cloud or self-hosted auth configuration.

Objetivo

QDRANT_API_KEY

Set to 'external' to route all chat to an external agent via MCP.

Objetivo

ASSISTANT_TYPE

URL for the external agent (e.g. https://your-openclaw/v1/chat/completions).

Objetivo

EXTERNAL_ASSISTANT_URL

Auth token expected by your external agent or gateway. Copy it from that service's dashboard or config.

Objetivo

EXTERNAL_ASSISTANT_TOKEN

Optional Agent ID for OpenClaw routing.

Objetivo

EXTERNAL_ASSISTANT_AGENT_ID

Optional shared session key for remote agent conversation persistence. Leave blank so Sure-AIO derives isolated per-chat remote state.

Objetivo

EXTERNAL_ASSISTANT_SESSION_KEY

Optional comma-separated allowlist of users permitted to use the external assistant.

Objetivo

EXTERNAL_ASSISTANT_ALLOWED_EMAILS

Required if using Ext. AI: Email of an existing Sure user.

Objetivo

MCP_USER_EMAIL

Required if using Ext. AI: Bearer token for agent callbacks to /mcp. Generate one with 'openssl rand -hex 32' in the Unraid terminal.

Objetivo

MCP_API_TOKEN

PostHog project API key from your PostHog project settings.

Objetivo

POSTHOG_KEY

PostHog host URL. Example: 'https://us.i.posthog.com' or your self-hosted PostHog URL.

Objetivo

POSTHOG_HOST

Langfuse base URL for LLM observability. Example: 'https://cloud.langfuse.com' or your self-hosted Langfuse URL.

Objetivo

LANGFUSE_HOST

Optional Langfuse region shortcut like 'us' or 'eu'. Use this only if you are not setting a custom Langfuse Host URL.

Objetivo

LANGFUSE_REGION

Langfuse public key from your project settings.

Objetivo

LANGFUSE_PUBLIC_KEY

Langfuse secret key from your project settings.

Objetivo

LANGFUSE_SECRET_KEY

Optional Sentry DSN if you want upstream exception reporting enabled for this instance.

Objetivo

SENTRY_DSN

Set to 'true' only if you intentionally use Skylight's hosted APM service. Default is 'false' for AIO installs so no external Skylight setup is required.

Objetivo

SKYLIGHT_ENABLED

Por defecto

false

Valor

false

Optional Skylight app authentication token. Only used when SKYLIGHT_ENABLED is true and you want to send APM data to your Skylight account.

Objetivo

SKYLIGHT_AUTHENTICATION

Optional Better Stack / Logtail source token from your log source settings.

Objetivo

LOGTAIL_API_KEY

Optional Logtail ingest host used with LOGTAIL_API_KEY.

Objetivo

LOGTAIL_INGESTING_HOST

Application log verbosity. Use 'info' for normal operation or 'debug' for deeper troubleshooting.

Objetivo

RAILS_LOG_LEVEL

Por defecto

info

Valor

info

Optional worker thread count used by Puma, Sidekiq, and DB pool sizing. Leave blank for upstream default (3).

Objetivo

RAILS_MAX_THREADS

Optional Puma process count for the web service. Leave blank for upstream default (1).

Objetivo

WEB_CONCURRENCY

Optional username for /sidekiq dashboard basic auth. Leave blank to keep upstream default username ('sure').

Objetivo

SIDEKIQ_WEB_USERNAME

Optional password for /sidekiq dashboard basic auth. Leave blank to keep upstream default password ('sure').

Objetivo

SIDEKIQ_WEB_PASSWORD

Optional outbound HTTPS proxy URL (for advanced egress controls like Pipelock). Leave blank for normal direct outbound traffic.

Objetivo

HTTPS_PROXY

Optional outbound HTTP proxy URL. Leave blank unless your network requires a proxy.

Objetivo

HTTP_PROXY

Optional comma-separated hosts/domains that should bypass HTTP(S) proxy routing.

Objetivo

NO_PROXY

Optional exchange-rate provider override. If left blank, Sure uses its normal default and UI selection behavior.

Objetivo

EXCHANGE_RATE_PROVIDER

Optional securities provider override. If left blank, Sure uses its normal default and UI selection behavior.

Objetivo

SECURITIES_PROVIDER

Optional comma-separated securities provider list. Example: 'yahoo_finance,binance_public,twelve_data'. Takes precedence over the single Securities Provider field when set.

Objetivo

SECURITIES_PROVIDERS

Brandfetch client ID from your Brandfetch application or dashboard if you want merchant and bank logos.

Objetivo

BRAND_FETCH_CLIENT_ID

Optional env override for 120x120 Brandfetch logos. Set to 'true' to force high-res logos, 'false' to force standard size. Leave blank to keep the in-app toggle enabled.

Objetivo

BRAND_FETCH_HIGH_RES_LOGOS

Optional global API token used by the Indexa Capital provider when account-level credentials are not configured.

Objetivo

INDEXA_API_TOKEN

Optional Twelve Data API key from twelvedata.com if you want exchange rates or securities from Twelve Data instead of Yahoo Finance.

Objetivo

TWELVE_DATA_API_KEY

Optional custom Twelve Data API base URL. Leave blank unless you are routing Twelve Data through a proxy or alternate endpoint.

Objetivo

TWELVE_DATA_URL

Optional minimum spacing between Twelve Data requests in seconds. Leave blank for upstream pacing.

Objetivo

TWELVE_DATA_MIN_REQUEST_INTERVAL

Optional Twelve Data per-minute credit limit. Lower this if your plan is more restrictive than upstream defaults.

Objetivo

TWELVE_DATA_MAX_REQUESTS_PER_MINUTE

Optional Tiingo API key for securities pricing. Configure provider selection separately if you want Sure to use Tiingo.

Objetivo

TIINGO_API_KEY

Optional custom Tiingo API base URL. Leave blank for normal public Tiingo access.

Objetivo

TIINGO_URL

Optional Tiingo hourly request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Objetivo

TIINGO_MAX_REQUESTS_PER_HOUR

Optional EODHD API key for securities pricing, especially international ETF coverage. Configure provider selection separately if you want Sure to use EODHD.

Objetivo

EODHD_API_KEY

Optional custom EODHD API base URL. Leave blank for normal public EODHD access.

Objetivo

EODHD_URL

Optional EODHD daily request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Objetivo

EODHD_MAX_REQUESTS_PER_DAY

Optional Alpha Vantage API key for securities pricing. Configure provider selection separately if you want Sure to use Alpha Vantage.

Objetivo

ALPHA_VANTAGE_API_KEY

Optional custom Alpha Vantage API base URL. Leave blank for normal public Alpha Vantage access.

Objetivo

ALPHA_VANTAGE_URL

Optional Alpha Vantage daily request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Objetivo

ALPHA_VANTAGE_MAX_REQUESTS_PER_DAY

Optional custom MFAPI base URL for mutual-fund data. Leave blank for upstream defaults.

Objetivo

MFAPI_URL

Optional custom Binance public market-data base URL. Leave blank for upstream defaults.

Objetivo

BINANCE_PUBLIC_URL

Optional public egress IP shown in the Binance setup UI so users know which IP to allowlist.

Objetivo

BINANCE_EGRESS_IP

Optional custom Yahoo Finance API base URL. Leave blank for normal public Yahoo Finance access.

Objetivo

YAHOO_FINANCE_URL

Maximum retry attempts for Yahoo Finance requests before Sure gives up.

Objetivo

YAHOO_FINANCE_MAX_RETRIES

Por defecto

5

Valor

5

Seconds to wait between Yahoo Finance retry attempts.

Objetivo

YAHOO_FINANCE_RETRY_INTERVAL

Por defecto

1.0

Valor

1.0

Optional minimum spacing between Yahoo Finance requests in seconds. Leave blank to keep upstream defaults.

Objetivo

YAHOO_FINANCE_MIN_REQUEST_INTERVAL

Container-level override for Sure's scheduled sync job. Use '1' to keep it enabled or '0' to disable automatic syncs globally.

Objetivo

AUTO_SYNC_ENABLED

Por defecto

1

Valor

1

Daily auto-sync time in 24-hour HH:MM format.

Objetivo

AUTO_SYNC_TIME

Por defecto

02:22

Valor

02:22

Timezone used with AUTO_SYNC_TIME. Example: 'America/Denver'.

Objetivo

AUTO_SYNC_TIMEZONE

Por defecto

UTC

Valor

UTC

Set to '0' to exclude pending SimpleFIN transactions. If set here, upstream disables the corresponding Sync setting in the Sure UI.

Objetivo

SIMPLEFIN_INCLUDE_PENDING

Por defecto

1

Valor

1

Set to 'true' to log raw SimpleFIN payloads for debugging. This can expose sensitive data and create noisy logs.

Objetivo

SIMPLEFIN_DEBUG_RAW

Optional override for SimpleFIN liability overpayment detection. Set to 'false' to disable the heuristic globally.

Objetivo

SIMPLEFIN_CC_OVERPAYMENT_HEURISTIC

Set to '0' to exclude pending Plaid transactions. If set here, upstream disables the corresponding Sync setting in the Sure UI.

Objetivo

PLAID_INCLUDE_PENDING

Por defecto

1

Valor

1

Set to 'true' to include pending transactions in Lunchflow sync requests.

Objetivo

LUNCHFLOW_INCLUDE_PENDING

Set to 'true' to log raw Lunchflow payloads for debugging. This can expose sensitive data and create noisy logs.

Objetivo

LUNCHFLOW_DEBUG_RAW

Set to 'false' to disable local email/password login and move users toward SSO-only auth.

Objetivo

AUTH_LOCAL_LOGIN_ENABLED

Por defecto

true

Valor

true

If local login is disabled, set to 'true' to let super admins keep local login as an emergency backdoor.

Objetivo

AUTH_LOCAL_ADMIN_OVERRIDE_ENABLED

Por defecto

false

Valor

false

SSO behavior for first-time users: 'create_and_link' creates accounts automatically, 'link_only' requires an existing user.

Objetivo

AUTH_JIT_MODE

Por defecto

create_and_link

Valor

create_and_link

Optional comma-separated email domains allowed for JIT SSO account creation.

Objetivo

ALLOWED_OIDC_DOMAINS

Alpha-only passkey/WebAuthn relying party ID. Usually your registrable domain, such as 'example.com'. This only configures browser trust; add passkeys inside Sure from Settings > Security after enabling authenticator-app 2FA. Changing this after registering credentials can make existing passkeys unusable.

Objetivo

WEBAUTHN_RP_ID

Alpha-only comma-separated WebAuthn origins including scheme and host, such as 'https://finance.example.com'. This only configures browser trust; add passkeys inside Sure from Settings > Security after enabling authenticator-app 2FA.

Objetivo

WEBAUTHN_ALLOWED_ORIGINS

Leave blank for normal YAML/env-backed provider loading. Set to 'db' if you want upstream's database-backed SSO provider admin UI.

Objetivo

AUTH_PROVIDERS_SOURCE

OIDC client ID from your identity provider app registration, such as Authentik, Authelia, Keycloak, or Zitadel.

Objetivo

OIDC_CLIENT_ID

OIDC client secret from the same identity provider app registration.

Objetivo

OIDC_CLIENT_SECRET

OIDC issuer URL. Example: 'https://auth.example.com/application/o/sure/' or your provider's issuer endpoint.

Objetivo

OIDC_ISSUER

OIDC redirect URI registered with your provider. Example: 'https://finance.example.com/auth/openid_connect/callback'.

Objetivo

OIDC_REDIRECT_URI

Optional custom sign-in button label for the default OIDC provider.

Objetivo

OIDC_BUTTON_LABEL

Optional icon slug for the default OIDC sign-in button.

Objetivo

OIDC_BUTTON_ICON

Por defecto

key

Valor

key

Optional Google OAuth client ID from console.cloud.google.com if you want a dedicated Google sign-in provider.

Objetivo

GOOGLE_OAUTH_CLIENT_ID

Optional Google OAuth client secret from the same Google OAuth app.

Objetivo

GOOGLE_OAUTH_CLIENT_SECRET

Optional custom label for the Google sign-in button.

Objetivo

GOOGLE_BUTTON_LABEL

Por defecto

Sign in with Google

Valor

Sign in with Google

Optional icon slug for the Google sign-in button.

Objetivo

GOOGLE_BUTTON_ICON

Por defecto

google

Valor

google

Optional GitHub OAuth client ID from your GitHub OAuth App settings if you want a dedicated GitHub sign-in provider.

Objetivo

GITHUB_CLIENT_ID

Optional GitHub OAuth client secret from the same GitHub OAuth App.

Objetivo

GITHUB_CLIENT_SECRET

Optional custom label for the GitHub sign-in button.

Objetivo

GITHUB_BUTTON_LABEL

Por defecto

Sign in with GitHub

Valor

Sign in with GitHub

Optional icon slug for the GitHub sign-in button.

Objetivo

GITHUB_BUTTON_ICON

Por defecto

github

Valor

github

Optional named Keycloak OIDC provider client ID for upstream multi-provider auth.yml mode.

Objetivo

OIDC_KEYCLOAK_CLIENT_ID

Optional named Keycloak OIDC provider client secret for upstream multi-provider auth.yml mode.

Objetivo

OIDC_KEYCLOAK_CLIENT_SECRET

Optional named Keycloak OIDC issuer URL for upstream multi-provider auth.yml mode.

Objetivo

OIDC_KEYCLOAK_ISSUER

Optional named Keycloak OIDC redirect URI for upstream multi-provider auth.yml mode.

Objetivo

OIDC_KEYCLOAK_REDIRECT_URI

Optional named Authentik OIDC provider client ID for upstream multi-provider auth.yml mode.

Objetivo

OIDC_AUTHENTIK_CLIENT_ID

Optional named Authentik OIDC provider client secret for upstream multi-provider auth.yml mode.

Objetivo

OIDC_AUTHENTIK_CLIENT_SECRET

Optional named Authentik OIDC issuer URL for upstream multi-provider auth.yml mode.

Objetivo

OIDC_AUTHENTIK_ISSUER

Optional named Authentik OIDC redirect URI for upstream multi-provider auth.yml mode.

Objetivo

OIDC_AUTHENTIK_REDIRECT_URI

Leave blank for internal disk storage. Change to 'amazon', 'cloudflare', 'generic_s3', or 'google' to move uploads out of the container.

Objetivo

ACTIVE_STORAGE_SERVICE

Amazon S3 access key ID from your AWS IAM user or access-key pair.

Objetivo

S3_ACCESS_KEY_ID

Amazon S3 secret access key paired with the access key ID above.

Objetivo

S3_SECRET_ACCESS_KEY

Amazon S3 region. Defaults to us-east-1 if left blank.

Objetivo

S3_REGION

Amazon S3 bucket name.

Objetivo

S3_BUCKET

Cloudflare account ID used to construct the R2 endpoint URL.

Objetivo

CLOUDFLARE_ACCOUNT_ID

Cloudflare R2 access key ID from your R2 API token pair.

Objetivo

CLOUDFLARE_ACCESS_KEY_ID

Cloudflare R2 secret access key paired with the R2 access key ID above.

Objetivo

CLOUDFLARE_SECRET_ACCESS_KEY

Cloudflare R2 bucket name.

Objetivo

CLOUDFLARE_BUCKET

Generic S3 or MinIO access key ID from your object-storage service.

Objetivo

GENERIC_S3_ACCESS_KEY_ID

Generic S3 or MinIO secret access key paired with the access key ID above.

Objetivo

GENERIC_S3_SECRET_ACCESS_KEY

Generic S3 region value expected by your provider.

Objetivo

GENERIC_S3_REGION

Generic S3 or MinIO bucket name.

Objetivo

GENERIC_S3_BUCKET

Custom MinIO or S3-compatible endpoint URL.

Objetivo

GENERIC_S3_ENDPOINT

Set to 'true' for providers that require path-style S3 requests.

Objetivo

GENERIC_S3_FORCE_PATH_STYLE

Por defecto

false

Valor

false

Google Cloud project ID used by Active Storage when Provider Strategy is set to 'google'.

Objetivo

GCS_PROJECT

Google Cloud Storage bucket name used when Provider Strategy is set to 'google'.

Objetivo

GCS_BUCKET

Raw Google service-account JSON content. Preferred over a keyfile path when using GCS storage.

Objetivo

GCS_KEYFILE_JSON

In-container path to a Google service-account JSON keyfile. Use only if you mount the file separately.

Objetivo

GCS_KEYFILE

Hostname for your SMTP server. Example: 'smtp.mailgun.org', 'smtp.sendgrid.net', or your mail relay host.

Objetivo

SMTP_ADDRESS

Port for your SMTP server. Common values: '465' for implicit TLS or '587' for STARTTLS.

Objetivo

SMTP_PORT

Por defecto

465

SMTP username from your mail provider or relay.

Objetivo

SMTP_USERNAME

SMTP password or app password from your mail provider.

Objetivo

SMTP_PASSWORD

Leave 'true' for normal secure SMTP. Set to 'false' only if your mail relay expects plain SMTP without TLS.

Objetivo

SMTP_TLS_ENABLED

Por defecto

true

Valor

true

Leave 'false' for normal certificate validation. Set to 'true' only for a trusted private SMTP relay with broken TLS certificates.

Objetivo

SMTP_TLS_SKIP_VERIFY

Por defecto

false

Valor

false

The email address your app will send mail from (e.g., finance@mydomain.com).

Objetivo

EMAIL_SENDER

Optional Plaid client ID if you want upstream Plaid account linking enabled.

Objetivo

PLAID_CLIENT_ID

Optional Plaid secret paired with the client ID above.

Objetivo

PLAID_SECRET

Optional Plaid environment such as 'sandbox' or 'production'.

Objetivo

PLAID_ENV

Optional Plaid Europe client ID if you use the Plaid EU adapter.

Objetivo

PLAID_EU_CLIENT_ID

Optional Plaid Europe secret paired with the Plaid EU client ID above.

Objetivo

PLAID_EU_SECRET

Optional Plaid Europe environment such as 'sandbox' or 'production'.

Objetivo

PLAID_EU_ENV