Skip to content

Environment variable catalog

Name Points at
ENVIRONMENT Logical env (staging/prod/local) — must match across gateway, mcp, and workers
INTERNAL_RPC_SECRET Shared bearer for internal service-to-service calls (one value fleet-wide)
REDIS_ADDR Redis host:port (the Go gateways use REDIS_ADDR; some services take REDIS_URL)
REDIS_PASSWORD Redis auth
OTEL_EXPORTER_OTLP_ENDPOINT OTLP collector endpoint (traces/metrics/logs → SigNoz)
LOG_LEVEL Log verbosity knob
Name Points at
CORE_DATABASE_GRPC core-database address
CORE_STORAGE_GRPC core-storage address
CORE_IDENTITY_GRPC core-identity address
CORE_MCP_GRPC core-mcp address
CORE_GATEWAY_CONSUMER_GRPC core-gateway-consumer address
CORE_DATABASE_USE_TLS, CORE_STORAGE_USE_TLS, … Per-target TLS toggle (false locally, true in staging/prod)
Name Points at
POSTGRES_DB, POSTGRES_USER, POSTGRES_PASSWORD Postgres connection (owned by core-database)
AZURE_CONNECTION_STRING Azure Blob (or Azurite) connection for core-storage
Name Points at
AGENT_TOOL_ID The registered Agent One tool id (used by the gateway/frontend)
AGENT_STANDARD_MODEL, AGENT_PRO_MODEL, AGENT_FLASH_MODEL Model ids per agent tier (Claude standard/pro, Kimi flash)
LITELLM_BASE_URL, LITELLM_API_KEY LLM routing endpoint + key (litellm prefix routing)
SANSAARM_API_BASE_URL, SANSAARM_API_KEY, SANSAARM_MODEL_V5 Sansaarm song-gen provider
REPLICATE_API_TOKEN Replicate (album art / flux)
Name Points at
HYPERSWITCH_BASE_URL, HYPERSWITCH_API_KEY, HYPERSWITCH_PUBLISHABLE_KEY, HYPERSWITCH_PROFILE_ID, HYPERSWITCH_WEBHOOK_SECRET Hyperswitch payment orchestration
BILLING_SCHEDULER_ENABLED Toggle the billing scheduler
CHECKOUT_RETURN_URL Post-checkout redirect
Name Points at
AUTH_SECRET Auth.js session secret
AUTH_LOGTO_ID, AUTH_LOGTO_SECRET, AUTH_LOGTO_ISSUER, AUTH_LOGTO_RESOURCE Logto OIDC app (request an API resource so the token is a JWT, not opaque)
STREAM_PROXY_SECRET Same-origin audio stream proxy secret
NEXT_PUBLIC_* Browser-exposed config — baked at build time, not runtime
Name Points at
GH_TOKEN GitHub token to pull private soundverse-* deps at image build (scopes: repo, read:packages)