> For the complete documentation index, see [llms.txt](https://docs.algenta.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.algenta.ai/deploy-and-operate/configuration.md). # Configuration reference Every environment variable Algenta reads, with its default and any accepted aliases. Set these in your shell, your `.env`, or your orchestrator. Names are case-insensitive. {% hint style="info" %} Where a variable has accepted aliases (for example a legacy `DE_` name), they appear in the Aliases column. {% endhint %} | Variable | Default | Aliases | Description | | ------------------------------------------ | ------------------------------------------ | ---------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `ALGENTA_ACCOUNTS_BASE_URL` | `https://accounts.thyn.ai` | `ACCOUNTS_BASE_URL` | — | | `ALGENTA_AGENT_CORE_URL` | — | — | Optional agent-runtime (sidecar) endpoint. | | `ALGENTA_ALLOW_OUTBOUND_NETWORK` | — | — | Permit egress (default false in air-gapped). | | `ALGENTA_API_PUBLIC_BASE_URL` | — | `API_PUBLIC_BASE_URL` | Public-facing API base URL (cloud). | | `ALGENTA_APP_BASE_URL` | — | `APP_BASE_URL`, `DE_APP_BASE_URL` | Dashboard / console base URL for self-hosted links. | | `ALGENTA_BASE_URL` | — | `DE_BASE_URL`, `ALGENTA_API_URL` | Engine URL for self-hosted clients (absolute, e.g. ). | | `ALGENTA_CONTROL_PLANE_URL` | — | — | Control-plane endpoint for satellite deployments. | | `ALGENTA_DEPLOYMENT_MODE` | `saas` | — | Privacy/egress profile: saas \| vpc \| self\_hosted \| air\_gapped \| hybrid\_provider \| local\_dev\_daemon. | | `ALGENTA_DISABLE_CLOUD` | — | — | Opt out of any cloud integration (self-hosted). | | `ALGENTA_DISABLE_TELEMETRY` | — | — | Disable all outbound/vendor telemetry; keep local audit. | | `ALGENTA_EGRESS_ALLOWLIST` | — | — | Comma-separated allowlist of permitted egress destinations. | | `ALGENTA_ENFORCE_LICENSE_VALIDATION` | — | — | Enable fail-closed license validation on self-hosted deployments. | | `ALGENTA_ENFORCE_STORAGE_CAP` | `False` | — | Enforce the per-org free-tier storage\_gb quota (opt-in). | | `ALGENTA_ENGINE_IMAGE` | — | — | Docker image to deploy on all cloud providers. MUST be a pinned tag or @sha256 digest (e.g. .../api:git-); never a floating :latest. Empty = unconfigured (provisioning supplies a pinned ref). | | `ALGENTA_MANAGED_LLM` | `False` | — | Enable the pooled managed-LLM provider key (multi-tenant SaaS). | | `ALGENTA_METERING_MODE` | — | — | Metering destination: disabled \| local\_audit \| control\_plane\_sync. | | `ALGENTA_REQUIRE_LOCAL_LICENSE` | — | — | Require a valid local signed license; disable hosted/dev fallback. | | `ALGENTA_RUNTIME_LIBRARY_HTTP_API_ENABLED` | `False` | `RUNTIME_LIBRARY_HTTP_API_ENABLED` | Expose the /v1/libraries\* runtime-library routes (off by default). | | `ALGENTA_SERVICE_ROLE` | `full` | — | Deployment role: full (default, with engine) \| control\_plane (engine-free). | | `ALGENTA_SIMULATION_PERSIST_TRANSPORT` | `auto` | `SIMULATION_PERSIST_TRANSPORT` | Result persistence backend: auto \| celery \| in\_process. | | `ALGENTA_TELEMETRY_MODE` | — | — | Telemetry destination: disabled \| local\_audit \| control\_plane\_sync. | | `API_ENV` | `development` | — | — | | `API_KEY_CREATE_RATE_LIMIT_PER_MINUTE` | `10` | — | — | | `API_KEY_PREFIX` | `de_live_` | — | — | | `API_KEY_TEST_PREFIX` | `de_test_` | — | — | | `AWS_ACCESS_KEY_ID` | — | — | AWS access key for ECS/RDS provisioning | | `AWS_DEFAULT_REGION` | `us-east-1` | — | — | | `AWS_ECR_IMAGE_URI` | — | — | ECR image URI for Algenta engine | | `AWS_SECRET_ACCESS_KEY` | — | — | AWS secret key | | `AZURE_ACR_REGISTRY` | — | — | Azure Container Registry URL | | `AZURE_CLIENT_ID` | — | — | Azure service principal client ID | | `AZURE_CLIENT_SECRET` | — | — | Azure service principal secret | | `AZURE_RESOURCE_GROUP_PREFIX` | `algenta` | — | Prefix for Azure resource groups | | `AZURE_SUBSCRIPTION_ID` | — | — | Azure subscription ID | | `AZURE_TENANT_ID` | — | — | Azure tenant ID | | `CORS_ORIGINS` | `http://localhost:3000,http://localhos...` | — | — | | `DATABASE_URL` | `postgresql+asyncpg://postgres:postgre...` | — | Async PostgreSQL connection string. | | `DATABASE_URL_SYNC` | `postgresql://postgres:postgres@localh...` | — | Sync PostgreSQL connection string (migrations). | | `DEPLOYMENT_BASE_DOMAIN` | `deploy.algenta.ai` | — | Base domain for per-org deployment endpoints | | `DEPLOYMENT_BILLING_MARKUP_PCT` | `20.0` | — | Default pass-through billing markup percentage | | `EMAIL_FROM` | `noreply@algenta.ai` | — | — | | `GCP_ARTIFACT_REGISTRY` | — | — | GCP Artifact Registry image URL | | `GCP_PROJECT_ID` | — | — | GCP project ID | | `GCP_REGION` | `us-central1` | — | — | | `GCP_SERVICE_ACCOUNT_JSON` | — | — | GCP service account JSON (base64-encoded) | | `GITHUB_APP_CLIENT_ID` | — | — | — | | `GITHUB_APP_CLIENT_SECRET` | — | — | — | | `GITHUB_APP_ID` | — | — | — | | `GITHUB_APP_PRIVATE_KEY` | — | — | — | | `GITHUB_APP_SLUG` | — | — | — | | `GITHUB_APP_WEBHOOK_SECRET` | — | — | — | | `JWT_ALGORITHM` | `HS256` | — | — | | `JWT_EXPIRE_MINUTES` | `10080` | — | — | | `JWT_SECRET` | `change-me-in-production-use-256-bit-r...` | — | Signing secret for session JWTs. | | `LICENSE_V2_ISSUANCE` | `False` | — | — | | `LOGIN_RATE_LIMIT_PER_MINUTE` | `10` | — | — | | `LOG_LEVEL` | `info` | — | — | | `MAX_BATCH_ITEMS_FREE` | `10` | — | — | | `MAX_BATCH_ITEMS_PRO` | `100` | — | — | | `MAX_PAYLOAD_SIZE_BYTES` | `1048576` | — | — | | `MAX_SYNC_RUNS` | `100000` | — | — | | `METRICS_SECRET` | — | — | Bearer secret guarding the /metrics endpoint. | | `MOJO_BINARY_PATH` | `./mojo_build/simulate` | — | Path to the compiled Mojo engine binary. | | `MOJO_MAX_CONCURRENT` | `4` | — | Max concurrent Mojo workers. | | `MOJO_PROFILING_POLICY` | `optional` | — | Mojo profiling policy: optional disables profiling explicitly on errors, disabled never invokes profiling, required fail-closes profiling errors. | | `MOJO_TIMEOUT_SECONDS` | `30` | — | Max execution time for a Mojo computation. | | `OTEL_EXPORTER_OTLP_ENDPOINT` | — | — | — | | `QUOTA_DEVELOPER_SIMULATIONS_MONTH` | `10000` | — | — | | `QUOTA_FREE_SIMULATIONS_MONTH` | `500` | — | — | | `QUOTA_PRO_SIMULATIONS_MONTH` | `100000` | — | — | | `REDIS_URL` | `redis://localhost:6379/0` | — | Redis connection (cache / queue / coordination). | | `RESEND_API_KEY` | — | — | — | | `RESEND_FROM_EMAIL` | `Codna ` | — | — | | `RESULT_STORAGE_ENABLED` | `False` | — | — | | `RS256_LICENSE_PRODUCTS` | — | — | — | | `RUNTIME_FALLBACK_MODE` | `auto` | — | Engine fallback policy: deny (prod) \| allow \| auto (dev only). | | `S3_ACCESS_KEY_ID` | `minioadmin` | — | — | | `S3_BUCKET_NAME` | `decision-engine-results` | — | — | | `S3_ENDPOINT_URL` | — | — | — | | `S3_REGION` | `us-east-1` | — | — | | `S3_SECRET_ACCESS_KEY` | `minioadmin` | — | — | | `SENTRY_DSN` | — | — | — | | `SIGNUP_MAX_PER_DAY_PER_EMAIL` | `2` | — | — | | `SIGNUP_RATE_LIMIT_PER_MINUTE` | `3` | — | — | | `SMTP_HOST` | `localhost` | — | — | | `SMTP_PASSWORD` | — | — | — | | `SMTP_PORT` | `1025` | — | — | | `SMTP_USERNAME` | — | — | — | | `STRIPE_PRICE_ALGENTA_PRO` | `price_algenta_pro_replace_me` | — | — | | `STRIPE_PRICE_ALGENTA_SELFHOST` | `price_algenta_selfhost_replace_me` | — | — | | `STRIPE_PRICE_ALGENTA_TEAM` | `price_algenta_team_replace_me` | — | — | | `STRIPE_PRICE_DEVELOPER` | `price_developer_replace_me` | — | — | | `STRIPE_PRICE_PRO` | `price_pro_replace_me` | — | — | | `STRIPE_PRICE_PROPLUS` | `price_proplus_replace_me` | — | — | | `STRIPE_PRICE_TEAM` | `price_team_replace_me` | — | — | | `STRIPE_PRICE_TELYS_PRO` | `price_telys_pro_replace_me` | — | — | | `STRIPE_PRICE_TELYS_TEAM` | `price_telys_team_replace_me` | — | — | | `STRIPE_PRICE_ULTRA` | `price_ultra_replace_me` | — | — | | `STRIPE_PUBLISHABLE_KEY` | `pk_test_replace_me` | — | — | | `STRIPE_SECRET_KEY` | `sk_test_replace_me` | — | Stripe API secret key (billing). | | `STRIPE_WEBHOOK_SECRET` | `whsec_replace_me` | — | Stripe webhook signing secret. | | `SUPABASE_JWT_AUD` | `authenticated` | — | — | | `SUPABASE_JWT_SECRET` | — | — | — | | `SUPABASE_SERVICE_ROLE_KEY` | — | — | — | | `SUPABASE_URL` | — | `NEXT_PUBLIC_SUPABASE_URL` | — | | `TURNSTILE_SECRET_KEY` | — | `ALGENTA_TURNSTILE_SECRET_KEY` | — | | `WEBHOOK_MAX_RETRIES` | `3` | — | — | | `WEBHOOK_SIGNING_SECRET` | `change-me-in-production` | — | — | ## Related {% content-ref url="/pages/tWtESdNlxR5ZqT7F3czC" %} [Self-hosting](/deploy-and-operate/self-hosting.md) {% endcontent-ref %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.algenta.ai/deploy-and-operate/configuration.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.