The main web interface port.

Cible

3000

Défaut

3001

Valeur

3001

Critical: Run 'openssl rand -hex 64' in your Unraid terminal and paste the randomized hash here.

Cible

SECRET_KEY_BASE

Internal wrapper flag required for Sure self-hosted mode. Leave unchanged.

Cible

SELF_HOSTED

Défaut

true

Valeur

true

Legacy upstream alias for self-hosted mode. Usually leave blank because SELF_HOSTED=true is already set by this wrapper.

Cible

SELF_HOSTING_ENABLED

Alpha-only Sure import NDJSON upload limit in megabytes. Lower it if this test instance has constrained storage or memory.

Cible

SURE_IMPORT_MAX_NDJSON_SIZE_MB

Défaut

250

Valeur

250

Alpha-only Sure import row limit used by web, API, and preflight paths.

Cible

SURE_IMPORT_MAX_ROWS

Défaut

1000000

Valeur

1000000

Internal rails file storage.

Cible

/rails/storage

Défaut

/mnt/user/appdata/sure-aio-alpha/system

Valeur

/mnt/user/appdata/sure-aio-alpha/system

Internal PostgreSQL database storage mapped externally so you don't lose data.

Cible

/var/lib/postgresql/data

Défaut

/mnt/user/appdata/sure-aio-alpha/postgres

Valeur

/mnt/user/appdata/sure-aio-alpha/postgres

Internal Redis memory cache.

Cible

/var/lib/redis

Défaut

/mnt/user/appdata/sure-aio-alpha/redis

Valeur

/mnt/user/appdata/sure-aio-alpha/redis

Optional host path to a PEM CA certificate file for trusting self-signed or internal HTTPS services. Leave blank unless you need private CA support.

Cible

/certs/custom-ca.pem

The domain your Sure instance is hosted at (used for email links).

Cible

APP_DOMAIN

Optional full external base URL including scheme, such as 'https://finance.example.com'. Useful for advanced SSO flows that need an absolute callback or issuer URL.

Cible

APP_URL

Controls user registration. Use 'open', 'closed', or 'invite_only'.

Cible

ONBOARDING_STATE

Défaut

open

Valeur

open

Optional global gate for account registration. Set to 'true' to require invite codes for sign-up.

Cible

REQUIRE_INVITE_CODE

Set to 'false' if you explicitly want to skip email confirmation for new accounts. Leave enabled for the safer default.

Cible

REQUIRE_EMAIL_CONFIRMATION

Défaut

true

Valeur

true

Leave 'false' for direct LAN access. Set to 'true' only when Sure sits behind a SSL-terminating reverse proxy.

Cible

RAILS_ASSUME_SSL

Défaut

false

Valeur

false

Leave 'false' for the default Unraid install over plain HTTP. Set to 'true' only if you want direct HTTP requests redirected to HTTPS.

Cible

RAILS_FORCE_SSL

Défaut

false

Valeur

false

Optional in-container path to a PEM CA certificate file. If you use the provided mount above, set this to '/certs/custom-ca.pem'.

Cible

SSL_CA_FILE

Optional full CA bundle path for advanced Ruby/OpenSSL trust overrides. Usually leave blank and use SSL_CA_FILE instead.

Cible

SSL_CERT_FILE

Leave 'true' for production. Set to 'false' only for temporary testing against broken or self-signed HTTPS endpoints.

Cible

SSL_VERIFY

Défaut

true

Valeur

true

Set to 'true' to log detailed outbound SSL trust and certificate diagnostics.

Cible

SSL_DEBUG

Défaut

false

Valeur

false

Optional external privacy-policy URL shown by the app when provided.

Cible

LEGAL_PRIVACY_URL

Optional external terms-of-service URL shown by the app when provided.

Cible

LEGAL_TERMS_URL

Optional external PostgreSQL host or container name. Example: '192.168.1.50' or 'postgres-shared' on a custom Docker network.

Cible

DB_HOST

Optional external PostgreSQL port. Example: '5432'.

Cible

DB_PORT

Optional external PostgreSQL database name. Leave blank to keep Sure's normal default database name.

Cible

POSTGRES_DB

Optional external PostgreSQL username. This user must already exist on your external database.

Cible

POSTGRES_USER

Optional password for the external PostgreSQL user above.

Cible

POSTGRES_PASSWORD

Optional external Redis URL. Example: 'redis://192.168.1.50:6379/1' or 'redis://:password@redis-host:6379/1'.

Cible

REDIS_URL

Optional Redis Sentinel hosts, comma-separated like 'host1:26379,host2:26379'. Takes precedence over REDIS_URL when set.

Cible

REDIS_SENTINEL_HOSTS

Redis Sentinel master name.

Cible

REDIS_SENTINEL_MASTER

Défaut

mymaster

Valeur

mymaster

Redis Sentinel username if your Sentinel deployment requires authentication.

Cible

REDIS_SENTINEL_USERNAME

Défaut

default

Valeur

default

Redis password used for Sentinel-backed Redis deployments.

Cible

REDIS_PASSWORD

Custom product name in UI.

Cible

PRODUCT_NAME

Custom brand name in UI.

Cible

BRAND_NAME

Choose the initial layout for new sessions. Use 'dashboard' for the standard app or 'intro' for the intro-first experience.

Cible

DEFAULT_UI_LAYOUT

Défaut

dashboard

Valeur

dashboard

Optional explicit Rails encryption primary key. Leave blank unless you deliberately manage separate Active Record encryption keys outside SECRET_KEY_BASE.

Cible

ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY

Optional deterministic encryption key paired with the primary key above. Leave blank unless you already know your Rails encryption key material.

Cible

ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY

Optional key-derivation salt for Rails encryption. Leave blank unless you manage custom encryption keys yourself.

Cible

ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT

OpenAI-compatible API key. Get OpenAI keys from platform.openai.com/api-keys. If using local Ollama, enter any non-empty placeholder such as 'ollama-local'.

Cible

OPENAI_ACCESS_TOKEN

Leave blank for official OpenAI. For local LLMs, enter your endpoint (e.g., 'http://ollama:11434/v1').

Cible

OPENAI_URI_BASE

If using Ollama, you MUST define the model here (e.g., 'llama3.1:13b' or 'gemma2:7b').

Cible

OPENAI_MODEL

Optional provider override used only for transaction categorization. Example: 'openai' or 'ollama'. If blank, Sure uses its normal AI provider behavior.

Cible

CATEGORIZATION_PROVIDER

Optional model override used only for categorization, such as 'gemma2:7b'.

Cible

CATEGORIZATION_MODEL

Optional provider override used only for chat-assistant requests. Example: 'openai' or 'ollama'.

Cible

CHAT_PROVIDER

Optional model override used only for chat-assistant requests, such as 'gpt-4.1' or a local Ollama model.

Cible

CHAT_MODEL

OpenAI-compatible request timeout in seconds. Raise this only if your provider or local LLM is slow to respond.

Cible

OPENAI_REQUEST_TIMEOUT

Défaut

60

Valeur

60

Optional structured-output override. Valid values are '', 'strict', 'none', or 'json_object'. Set this only if you need to force Sure's OpenAI JSON behavior globally.

Cible

LLM_JSON_MODE

Set to 'true' to enable verbose AI chat debugging in logs.

Cible

AI_DEBUG_MODE

Défaut

false

Valeur

false

Leave 'true' for OpenAI or vision-capable providers. Set to 'false' only for OpenAI-compatible endpoints that do not support PDF or vision input.

Cible

OPENAI_SUPPORTS_PDF_PROCESSING

Défaut

true

Valeur

true

Optional override for OpenAI-compatible endpoints. Use 'true' to force the Responses API or 'false' to force chat completions. Leave blank for upstream auto-detection.

Cible

OPENAI_SUPPORTS_RESPONSES_ENDPOINT

Optional total LLM context window in tokens. Lower this for small local models or raise it for larger cloud models.

Cible

LLM_CONTEXT_WINDOW

Optional tokens reserved for each model response. Leave blank for upstream defaults.

Cible

LLM_MAX_RESPONSE_TOKENS

Optional explicit chat history token budget. Leave blank so Sure derives it from context, response, and system-prompt reserves.

Cible

LLM_MAX_HISTORY_TOKENS

Optional tokens reserved for Sure's system prompt and instructions. Leave blank for upstream defaults.

Cible

LLM_SYSTEM_PROMPT_RESERVE

Optional maximum batch size for AI categorization and merchant-detection calls. Lower this for small local models.

Cible

LLM_MAX_ITEMS_PER_CALL

Optional document-search backend. Leave blank for the default path. Set to 'pgvector' to use PostgreSQL-based vectors or 'qdrant' for an external Qdrant server.

Cible

VECTOR_STORE_PROVIDER

Embedding model name used for document search. Example: 'nomic-embed-text'. This is required when you enable pgvector or qdrant-backed document search.

Cible

EMBEDDING_MODEL

Embedding width for the selected model. Must match the provider output.

Cible

EMBEDDING_DIMENSIONS

Défaut

1024

Valeur

1024

Optional dedicated embeddings endpoint. Example: 'http://ollama:11434/v1'. If blank, Sure falls back to OPENAI_URI_BASE.

Cible

EMBEDDING_URI_BASE

Optional dedicated embeddings token. If blank, Sure falls back to OPENAI_ACCESS_TOKEN.

Cible

EMBEDDING_ACCESS_TOKEN

Optional external Qdrant endpoint for vector storage. Example: 'http://192.168.1.50:6333'.

Cible

QDRANT_URL

Optional Qdrant API key from your Qdrant Cloud or self-hosted auth configuration.

Cible

QDRANT_API_KEY

Set to 'external' to route all chat to an external agent via MCP.

Cible

ASSISTANT_TYPE

URL for the external agent (e.g. https://your-openclaw/v1/chat/completions).

Cible

EXTERNAL_ASSISTANT_URL

Auth token expected by your external agent or gateway. Copy it from that service's dashboard or config.

Cible

EXTERNAL_ASSISTANT_TOKEN

Optional Agent ID for OpenClaw routing.

Cible

EXTERNAL_ASSISTANT_AGENT_ID

Optional shared session key for remote agent conversation persistence. Leave blank so Sure-AIO derives isolated per-chat remote state.

Cible

EXTERNAL_ASSISTANT_SESSION_KEY

Optional comma-separated allowlist of users permitted to use the external assistant.

Cible

EXTERNAL_ASSISTANT_ALLOWED_EMAILS

Required if using Ext. AI: Email of an existing Sure user.

Cible

MCP_USER_EMAIL

Required if using Ext. AI: Bearer token for agent callbacks to /mcp. Generate one with 'openssl rand -hex 32' in the Unraid terminal.

Cible

MCP_API_TOKEN

PostHog project API key from your PostHog project settings.

Cible

POSTHOG_KEY

PostHog host URL. Example: 'https://us.i.posthog.com' or your self-hosted PostHog URL.

Cible

POSTHOG_HOST

Langfuse base URL for LLM observability. Example: 'https://cloud.langfuse.com' or your self-hosted Langfuse URL.

Cible

LANGFUSE_HOST

Optional Langfuse region shortcut like 'us' or 'eu'. Use this only if you are not setting a custom Langfuse Host URL.

Cible

LANGFUSE_REGION

Langfuse public key from your project settings.

Cible

LANGFUSE_PUBLIC_KEY

Langfuse secret key from your project settings.

Cible

LANGFUSE_SECRET_KEY

Optional Sentry DSN if you want upstream exception reporting enabled for this instance.

Cible

SENTRY_DSN

Set to 'true' only if you intentionally use Skylight's hosted APM service. Default is 'false' for AIO installs so no external Skylight setup is required.

Cible

SKYLIGHT_ENABLED

Défaut

false

Valeur

false

Optional Skylight app authentication token. Only used when SKYLIGHT_ENABLED is true and you want to send APM data to your Skylight account.

Cible

SKYLIGHT_AUTHENTICATION

Optional Better Stack / Logtail source token from your log source settings.

Cible

LOGTAIL_API_KEY

Optional Logtail ingest host used with LOGTAIL_API_KEY.

Cible

LOGTAIL_INGESTING_HOST

Application log verbosity. Use 'info' for normal operation or 'debug' for deeper troubleshooting.

Cible

RAILS_LOG_LEVEL

Défaut

info

Valeur

info

Optional worker thread count used by Puma, Sidekiq, and DB pool sizing. Leave blank for upstream default (3).

Cible

RAILS_MAX_THREADS

Optional Puma process count for the web service. Leave blank for upstream default (1).

Cible

WEB_CONCURRENCY

Optional username for /sidekiq dashboard basic auth. Leave blank to keep upstream default username ('sure').

Cible

SIDEKIQ_WEB_USERNAME

Optional password for /sidekiq dashboard basic auth. Leave blank to keep upstream default password ('sure').

Cible

SIDEKIQ_WEB_PASSWORD

Optional outbound HTTPS proxy URL (for advanced egress controls like Pipelock). Leave blank for normal direct outbound traffic.

Cible

HTTPS_PROXY

Optional outbound HTTP proxy URL. Leave blank unless your network requires a proxy.

Cible

HTTP_PROXY

Optional comma-separated hosts/domains that should bypass HTTP(S) proxy routing.

Cible

NO_PROXY

Optional exchange-rate provider override. If left blank, Sure uses its normal default and UI selection behavior.

Cible

EXCHANGE_RATE_PROVIDER

Optional securities provider override. If left blank, Sure uses its normal default and UI selection behavior.

Cible

SECURITIES_PROVIDER

Optional comma-separated securities provider list. Example: 'yahoo_finance,binance_public,twelve_data'. Takes precedence over the single Securities Provider field when set.

Cible

SECURITIES_PROVIDERS

Brandfetch client ID from your Brandfetch application or dashboard if you want merchant and bank logos.

Cible

BRAND_FETCH_CLIENT_ID

Optional env override for 120x120 Brandfetch logos. Set to 'true' to force high-res logos, 'false' to force standard size. Leave blank to keep the in-app toggle enabled.

Cible

BRAND_FETCH_HIGH_RES_LOGOS

Optional global API token used by the Indexa Capital provider when account-level credentials are not configured.

Cible

INDEXA_API_TOKEN

Optional Twelve Data API key from twelvedata.com if you want exchange rates or securities from Twelve Data instead of Yahoo Finance.

Cible

TWELVE_DATA_API_KEY

Optional custom Twelve Data API base URL. Leave blank unless you are routing Twelve Data through a proxy or alternate endpoint.

Cible

TWELVE_DATA_URL

Optional minimum spacing between Twelve Data requests in seconds. Leave blank for upstream pacing.

Cible

TWELVE_DATA_MIN_REQUEST_INTERVAL

Optional Twelve Data per-minute credit limit. Lower this if your plan is more restrictive than upstream defaults.

Cible

TWELVE_DATA_MAX_REQUESTS_PER_MINUTE

Optional Tiingo API key for securities pricing. Configure provider selection separately if you want Sure to use Tiingo.

Cible

TIINGO_API_KEY

Optional custom Tiingo API base URL. Leave blank for normal public Tiingo access.

Cible

TIINGO_URL

Optional Tiingo hourly request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Cible

TIINGO_MAX_REQUESTS_PER_HOUR

Optional EODHD API key for securities pricing, especially international ETF coverage. Configure provider selection separately if you want Sure to use EODHD.

Cible

EODHD_API_KEY

Optional custom EODHD API base URL. Leave blank for normal public EODHD access.

Cible

EODHD_URL

Optional EODHD daily request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Cible

EODHD_MAX_REQUESTS_PER_DAY

Optional Alpha Vantage API key for securities pricing. Configure provider selection separately if you want Sure to use Alpha Vantage.

Cible

ALPHA_VANTAGE_API_KEY

Optional custom Alpha Vantage API base URL. Leave blank for normal public Alpha Vantage access.

Cible

ALPHA_VANTAGE_URL

Optional Alpha Vantage daily request cap used by Sure's rate limiter. Leave blank for upstream defaults.

Cible

ALPHA_VANTAGE_MAX_REQUESTS_PER_DAY

Optional custom MFAPI base URL for mutual-fund data. Leave blank for upstream defaults.

Cible

MFAPI_URL

Optional custom Binance public market-data base URL. Leave blank for upstream defaults.

Cible

BINANCE_PUBLIC_URL

Optional public egress IP shown in the Binance setup UI so users know which IP to allowlist.

Cible

BINANCE_EGRESS_IP

Optional custom Yahoo Finance API base URL. Leave blank for normal public Yahoo Finance access.

Cible

YAHOO_FINANCE_URL

Maximum retry attempts for Yahoo Finance requests before Sure gives up.

Cible

YAHOO_FINANCE_MAX_RETRIES

Défaut

5

Valeur

5

Seconds to wait between Yahoo Finance retry attempts.

Cible

YAHOO_FINANCE_RETRY_INTERVAL

Défaut

1.0

Valeur

1.0

Optional minimum spacing between Yahoo Finance requests in seconds. Leave blank to keep upstream defaults.

Cible

YAHOO_FINANCE_MIN_REQUEST_INTERVAL

Container-level override for Sure's scheduled sync job. Use '1' to keep it enabled or '0' to disable automatic syncs globally.

Cible

AUTO_SYNC_ENABLED

Défaut

1

Valeur

1

Daily auto-sync time in 24-hour HH:MM format.

Cible

AUTO_SYNC_TIME

Défaut

02:22

Valeur

02:22

Timezone used with AUTO_SYNC_TIME. Example: 'America/Denver'.

Cible

AUTO_SYNC_TIMEZONE

Défaut

UTC

Valeur

UTC

Set to '0' to exclude pending SimpleFIN transactions. If set here, upstream disables the corresponding Sync setting in the Sure UI.

Cible

SIMPLEFIN_INCLUDE_PENDING

Défaut

1

Valeur

1

Set to 'true' to log raw SimpleFIN payloads for debugging. This can expose sensitive data and create noisy logs.

Cible

SIMPLEFIN_DEBUG_RAW

Optional override for SimpleFIN liability overpayment detection. Set to 'false' to disable the heuristic globally.

Cible

SIMPLEFIN_CC_OVERPAYMENT_HEURISTIC

Set to '0' to exclude pending Plaid transactions. If set here, upstream disables the corresponding Sync setting in the Sure UI.

Cible

PLAID_INCLUDE_PENDING

Défaut

1

Valeur

1

Set to 'true' to include pending transactions in Lunchflow sync requests.

Cible

LUNCHFLOW_INCLUDE_PENDING

Set to 'true' to log raw Lunchflow payloads for debugging. This can expose sensitive data and create noisy logs.

Cible

LUNCHFLOW_DEBUG_RAW

Set to 'false' to disable local email/password login and move users toward SSO-only auth.

Cible

AUTH_LOCAL_LOGIN_ENABLED

Défaut

true

Valeur

true

If local login is disabled, set to 'true' to let super admins keep local login as an emergency backdoor.

Cible

AUTH_LOCAL_ADMIN_OVERRIDE_ENABLED

Défaut

false

Valeur

false

SSO behavior for first-time users: 'create_and_link' creates accounts automatically, 'link_only' requires an existing user.

Cible

AUTH_JIT_MODE

Défaut

create_and_link

Valeur

create_and_link

Optional comma-separated email domains allowed for JIT SSO account creation.

Cible

ALLOWED_OIDC_DOMAINS

Alpha-only passkey/WebAuthn relying party ID. Usually your registrable domain, such as 'example.com'. This only configures browser trust; add passkeys inside Sure from Settings > Security after enabling authenticator-app 2FA. Changing this after registering credentials can make existing passkeys unusable.

Cible

WEBAUTHN_RP_ID

Alpha-only comma-separated WebAuthn origins including scheme and host, such as 'https://finance.example.com'. This only configures browser trust; add passkeys inside Sure from Settings > Security after enabling authenticator-app 2FA.

Cible

WEBAUTHN_ALLOWED_ORIGINS

Leave blank for normal YAML/env-backed provider loading. Set to 'db' if you want upstream's database-backed SSO provider admin UI.

Cible

AUTH_PROVIDERS_SOURCE

OIDC client ID from your identity provider app registration, such as Authentik, Authelia, Keycloak, or Zitadel.

Cible

OIDC_CLIENT_ID

OIDC client secret from the same identity provider app registration.

Cible

OIDC_CLIENT_SECRET

OIDC issuer URL. Example: 'https://auth.example.com/application/o/sure/' or your provider's issuer endpoint.

Cible

OIDC_ISSUER

OIDC redirect URI registered with your provider. Example: 'https://finance.example.com/auth/openid_connect/callback'.

Cible

OIDC_REDIRECT_URI

Optional custom sign-in button label for the default OIDC provider.

Cible

OIDC_BUTTON_LABEL

Optional icon slug for the default OIDC sign-in button.

Cible

OIDC_BUTTON_ICON

Défaut

key

Valeur

key

Optional Google OAuth client ID from console.cloud.google.com if you want a dedicated Google sign-in provider.

Cible

GOOGLE_OAUTH_CLIENT_ID

Optional Google OAuth client secret from the same Google OAuth app.

Cible

GOOGLE_OAUTH_CLIENT_SECRET

Optional custom label for the Google sign-in button.

Cible

GOOGLE_BUTTON_LABEL

Défaut

Sign in with Google

Valeur

Sign in with Google

Optional icon slug for the Google sign-in button.

Cible

GOOGLE_BUTTON_ICON

Défaut

google

Valeur

google

Optional GitHub OAuth client ID from your GitHub OAuth App settings if you want a dedicated GitHub sign-in provider.

Cible

GITHUB_CLIENT_ID

Optional GitHub OAuth client secret from the same GitHub OAuth App.

Cible

GITHUB_CLIENT_SECRET

Optional custom label for the GitHub sign-in button.

Cible

GITHUB_BUTTON_LABEL

Défaut

Sign in with GitHub

Valeur

Sign in with GitHub

Optional icon slug for the GitHub sign-in button.

Cible

GITHUB_BUTTON_ICON

Défaut

github

Valeur

github

Optional named Keycloak OIDC provider client ID for upstream multi-provider auth.yml mode.

Cible

OIDC_KEYCLOAK_CLIENT_ID

Optional named Keycloak OIDC provider client secret for upstream multi-provider auth.yml mode.

Cible

OIDC_KEYCLOAK_CLIENT_SECRET

Optional named Keycloak OIDC issuer URL for upstream multi-provider auth.yml mode.

Cible

OIDC_KEYCLOAK_ISSUER

Optional named Keycloak OIDC redirect URI for upstream multi-provider auth.yml mode.

Cible

OIDC_KEYCLOAK_REDIRECT_URI

Optional named Authentik OIDC provider client ID for upstream multi-provider auth.yml mode.

Cible

OIDC_AUTHENTIK_CLIENT_ID

Optional named Authentik OIDC provider client secret for upstream multi-provider auth.yml mode.

Cible

OIDC_AUTHENTIK_CLIENT_SECRET

Optional named Authentik OIDC issuer URL for upstream multi-provider auth.yml mode.

Cible

OIDC_AUTHENTIK_ISSUER

Optional named Authentik OIDC redirect URI for upstream multi-provider auth.yml mode.

Cible

OIDC_AUTHENTIK_REDIRECT_URI

Leave blank for internal disk storage. Change to 'amazon', 'cloudflare', 'generic_s3', or 'google' to move uploads out of the container.

Cible

ACTIVE_STORAGE_SERVICE

Amazon S3 access key ID from your AWS IAM user or access-key pair.

Cible

S3_ACCESS_KEY_ID

Amazon S3 secret access key paired with the access key ID above.

Cible

S3_SECRET_ACCESS_KEY

Amazon S3 region. Defaults to us-east-1 if left blank.

Cible

S3_REGION

Amazon S3 bucket name.

Cible

S3_BUCKET

Cloudflare account ID used to construct the R2 endpoint URL.

Cible

CLOUDFLARE_ACCOUNT_ID

Cloudflare R2 access key ID from your R2 API token pair.

Cible

CLOUDFLARE_ACCESS_KEY_ID

Cloudflare R2 secret access key paired with the R2 access key ID above.

Cible

CLOUDFLARE_SECRET_ACCESS_KEY

Cloudflare R2 bucket name.

Cible

CLOUDFLARE_BUCKET

Generic S3 or MinIO access key ID from your object-storage service.

Cible

GENERIC_S3_ACCESS_KEY_ID

Generic S3 or MinIO secret access key paired with the access key ID above.

Cible

GENERIC_S3_SECRET_ACCESS_KEY

Generic S3 region value expected by your provider.

Cible

GENERIC_S3_REGION

Generic S3 or MinIO bucket name.

Cible

GENERIC_S3_BUCKET

Custom MinIO or S3-compatible endpoint URL.

Cible

GENERIC_S3_ENDPOINT

Set to 'true' for providers that require path-style S3 requests.

Cible

GENERIC_S3_FORCE_PATH_STYLE

Défaut

false

Valeur

false

Google Cloud project ID used by Active Storage when Provider Strategy is set to 'google'.

Cible

GCS_PROJECT

Google Cloud Storage bucket name used when Provider Strategy is set to 'google'.

Cible

GCS_BUCKET

Raw Google service-account JSON content. Preferred over a keyfile path when using GCS storage.

Cible

GCS_KEYFILE_JSON

In-container path to a Google service-account JSON keyfile. Use only if you mount the file separately.

Cible

GCS_KEYFILE

Hostname for your SMTP server. Example: 'smtp.mailgun.org', 'smtp.sendgrid.net', or your mail relay host.

Cible

SMTP_ADDRESS

Port for your SMTP server. Common values: '465' for implicit TLS or '587' for STARTTLS.

Cible

SMTP_PORT

Défaut

465

SMTP username from your mail provider or relay.

Cible

SMTP_USERNAME

SMTP password or app password from your mail provider.

Cible

SMTP_PASSWORD

Leave 'true' for normal secure SMTP. Set to 'false' only if your mail relay expects plain SMTP without TLS.

Cible

SMTP_TLS_ENABLED

Défaut

true

Valeur

true

Leave 'false' for normal certificate validation. Set to 'true' only for a trusted private SMTP relay with broken TLS certificates.

Cible

SMTP_TLS_SKIP_VERIFY

Défaut

false

Valeur

false

The email address your app will send mail from (e.g., finance@mydomain.com).

Cible

EMAIL_SENDER

Optional Plaid client ID if you want upstream Plaid account linking enabled.

Cible

PLAID_CLIENT_ID

Optional Plaid secret paired with the client ID above.

Cible

PLAID_SECRET

Optional Plaid environment such as 'sandbox' or 'production'.

Cible

PLAID_ENV

Optional Plaid Europe client ID if you use the Plaid EU adapter.

Cible

PLAID_EU_CLIENT_ID

Optional Plaid Europe secret paired with the Plaid EU client ID above.

Cible

PLAID_EU_SECRET

Optional Plaid Europe environment such as 'sandbox' or 'production'.

Cible

PLAID_EU_ENV