Environment variable catalog
Fleet-wide (every service)
Section titled “Fleet-wide (every service)”| Name | Points at |
|---|---|
ENVIRONMENT |
Logical env (staging/prod/local) — must match across gateway, mcp, and workers |
INTERNAL_RPC_SECRET |
Shared bearer for internal service-to-service calls (one value fleet-wide) |
REDIS_ADDR |
Redis host:port (the Go gateways use REDIS_ADDR; some services take REDIS_URL) |
REDIS_PASSWORD |
Redis auth |
OTEL_EXPORTER_OTLP_ENDPOINT |
OTLP collector endpoint (traces/metrics/logs → SigNoz) |
LOG_LEVEL |
Log verbosity knob |
Service discovery (gRPC FQDNs)
Section titled “Service discovery (gRPC FQDNs)”| Name | Points at |
|---|---|
CORE_DATABASE_GRPC |
core-database address |
CORE_STORAGE_GRPC |
core-storage address |
CORE_IDENTITY_GRPC |
core-identity address |
CORE_MCP_GRPC |
core-mcp address |
CORE_GATEWAY_CONSUMER_GRPC |
core-gateway-consumer address |
CORE_DATABASE_USE_TLS, CORE_STORAGE_USE_TLS, … |
Per-target TLS toggle (false locally, true in staging/prod) |
Data & storage
Section titled “Data & storage”| Name | Points at |
|---|---|
POSTGRES_DB, POSTGRES_USER, POSTGRES_PASSWORD |
Postgres connection (owned by core-database) |
AZURE_CONNECTION_STRING |
Azure Blob (or Azurite) connection for core-storage |
Agent & tools
Section titled “Agent & tools”| Name | Points at |
|---|---|
AGENT_TOOL_ID |
The registered Agent One tool id (used by the gateway/frontend) |
AGENT_STANDARD_MODEL, AGENT_PRO_MODEL, AGENT_FLASH_MODEL |
Model ids per agent tier (Claude standard/pro, Kimi flash) |
LITELLM_BASE_URL, LITELLM_API_KEY |
LLM routing endpoint + key (litellm prefix routing) |
SANSAARM_API_BASE_URL, SANSAARM_API_KEY, SANSAARM_MODEL_V5 |
Sansaarm song-gen provider |
REPLICATE_API_TOKEN |
Replicate (album art / flux) |
Billing
Section titled “Billing”| Name | Points at |
|---|---|
HYPERSWITCH_BASE_URL, HYPERSWITCH_API_KEY, HYPERSWITCH_PUBLISHABLE_KEY, HYPERSWITCH_PROFILE_ID, HYPERSWITCH_WEBHOOK_SECRET |
Hyperswitch payment orchestration |
BILLING_SCHEDULER_ENABLED |
Toggle the billing scheduler |
CHECKOUT_RETURN_URL |
Post-checkout redirect |
Frontend (soundverse-saas-2.0)
Section titled “Frontend (soundverse-saas-2.0)”| Name | Points at |
|---|---|
AUTH_SECRET |
Auth.js session secret |
AUTH_LOGTO_ID, AUTH_LOGTO_SECRET, AUTH_LOGTO_ISSUER, AUTH_LOGTO_RESOURCE |
Logto OIDC app (request an API resource so the token is a JWT, not opaque) |
STREAM_PROXY_SECRET |
Same-origin audio stream proxy secret |
NEXT_PUBLIC_* |
Browser-exposed config — baked at build time, not runtime |
Build & tooling
Section titled “Build & tooling”| Name | Points at |
|---|---|
GH_TOKEN |
GitHub token to pull private soundverse-* deps at image build (scopes: repo, read:packages) |
Related
Section titled “Related”- Configuring .env — the local
.envpattern - Environment & service-discovery convention — prefix-strip injection
- Inspect a running service’s env — read effective ACA env