Environment Variables

This page provides a complete reference of Rack Gateway environment variables. For a shorter overview, see Configuration.

Core Server

Variable	Default	Description
`PORT`	`8080`	TCP port the API listens on
`DOMAIN`	(required)	Gateway domain for OAuth redirect URLs
`DEV_MODE`	`false`	Enables development-friendly behavior
`APP_SECRET_KEY`	(required)	Secret for sessions and CSRF
`COOKIE_SECURE`	`true`	Set the `Secure` cookie attribute
`TRUSTED_PROXY_CIDRS`		Comma-separated proxy CIDRs
`LOG_LEVEL`	`info`	Log level (`debug`, `info`, `warn`, `error`)
`DEBUG_TOPICS`		Comma-separated debug topics

Variable	Description
`ADMIN_USERS`	Comma-separated admin emails
`VIEWER_USERS`	Comma-separated viewer emails
`DEPLOYER_USERS`	Comma-separated deployer emails
`OPERATIONS_USERS`	Comma-separated ops emails

Variable	Default	Description
`RACK_HOST`		Convox rack API URL
`RACK_TOKEN`		Convox rack API token
`RACK_USERNAME`	`convox`	Basic auth username
`RACK`	`default`	Rack name (internal identifier)
`RACK_ALIAS`	`RACK`	Short alias (user-facing)
`RACK_DISPLAY_NAME`	`RACK_ALIAS`	Human-friendly display name
`ENABLE_RACK_TLS_PINNING`	`false`	Enable rack TLS pinning

Variable	Description
`RGW_DATABASE_URL`	Preferred Postgres URL
`GATEWAY_DATABASE_URL`	Alternate Postgres URL
`DATABASE_URL`	Alternate Postgres URL
`ADMIN_DATABASE_URL`	Admin URL for migrations/reset
`PGHOST` / `PGPORT` / `PGUSER` / `PGPASSWORD` / `PGDATABASE`	libpq connection fields
`PGSSLMODE`	SSL mode override

Variable	Description
`TEST_DATABASE_URL`	Override database URL for tests

Settings resolve in this order: DB value → env var → default.

Variable	Description
`RGW_SETTING_SESSION_TIMEOUT_MINUTES`	Browser session inactivity timeout
`RGW_SETTING_MFA_REQUIRE_ALL_USERS`	Require MFA for all users
`RGW_SETTING_MFA_STEP_UP_WINDOW_MINUTES`	Step-up window
`RGW_SETTING_MFA_TRUSTED_DEVICE_TTL_DAYS`	Trusted device TTL
`RGW_SETTING_DEPLOY_APPROVALS_ENABLED`	Enable deploy approvals
`RGW_SETTING_DEPLOY_APPROVAL_WINDOW_MINUTES`	Approval window
`RGW_SETTING_ALLOW_DESTRUCTIVE_ACTIONS`	Allow destructive actions
`RGW_SETTING_DEFAULT_CI_PROVIDER`	Default CI provider
`RGW_SETTING_DEFAULT_VCS_PROVIDER`	Default VCS provider

Per-app overrides use:

RGW_APP_<APP>_SETTING_<KEY>=value

Example:

RGW_APP_MYAPP_SETTING_CI_PROVIDER=circleci

See Deploy Approvals for common keys.

Variable	Default	Description
`AUDIT_HMAC_SECRET`	(required in prod)	HMAC chain secret
`AUDIT_ANCHOR_BUCKET`		S3 bucket for anchors
`AUDIT_ANCHOR_CHAIN_ID`		Chain identifier
`AUDIT_ANCHOR_RETENTION_DAYS`	`400`	Object Lock retention
`AUDIT_ANCHOR_INTERVAL_MINUTES`	`60`	Anchor interval
`AWS_ENDPOINT_URL_S3`		Custom S3 endpoint
`AWS_ACCESS_KEY_ID`		AWS access key
`AWS_SECRET_ACCESS_KEY`		AWS secret key
`AWS_REGION`	`us-east-1`	AWS region

Variable	Description
`SLACK_CLIENT_ID`	Slack OAuth client ID
`SLACK_CLIENT_SECRET`	Slack OAuth client secret
`GITHUB_TOKEN`	GitHub token for deploy approvals
`CIRCLECI_TOKEN`	CircleCI token for deploy approvals

Variable	Description
`CONVOX_SECRET_ENV_VARS`	Comma-separated env vars to redact

Ports are defined in mise.toml: