Skip to main content

​
Environment variables

Environment variables configure the production stack. Secrets must not be committed to Git.

​
Platform

Platform needs variables for:
  • Database connection.
  • Redis connection.
  • Internal service token.
  • Swagger docs password.
  • Allowed frontend origins.
  • Session cookie configuration.
  • Google OAuth client ID.
  • HTTP logging options.

​
Agent

Agent needs variables for:
  • HTTP port.
  • Log level.
  • WhatsApp verify token.
  • WhatsApp access token.
  • WhatsApp phone number ID.
  • WhatsApp app secret.
  • LLM provider.
  • LLM model.
  • LLM API key.
  • Redis URL.
  • Platform base URL and internal token when Platform integration is enabled.

​
Infra

Infra needs variables for:
  • Public domains.
  • Postgres credentials.
  • Grafana credentials.
  • Komodo credentials.
  • Analytics readonly credentials.
  • Timezone.

​
Secret handling rules

  • the production environment file must not be committed.
  • Example files should include placeholders only.
  • Passwords and tokens should be long and randomly generated.
  • If a secret is leaked, rotate it and redeploy affected services.

​
Operational warning

Changing the production environment file does not automatically update running containers. Restart or recreate the affected service so Docker Compose injects the new environment.