Environment Variables

This page lists every environment variable read by the Swiss AI Hub deployment, organized by role. It is auto-generated from the Pydantic settings classes in packages/*/swiss_ai_hub/**/*settings.py and the docker-compose templates. Do not edit by hand — run make generate-env-docs to refresh.

Variables fall into three roles:

• Compose-required — referenced as ${VAR} in docker-compose.yml. Must be set in .env because the project's compose templates do not provide fallback defaults.
• App-required — read as a required field by a Pydantic BaseSettings class. The application refuses to start if unset.
• Optional — has a default in code. Set in .env only to override the default.

The deployment has a base variant (CPU) plus pure-extension variants (GPU). The first section below lists every variable required by the base; subsequent sections list only the extra variables each extension introduces on top of the base.

Variables for the base deployment (CPU)

Required by docker-compose interpolation

These variables are referenced as ${VAR} (without a ${VAR:-default} fallback) somewhere in docker-compose.yml. Compose-parse will fail or render empty values if .env does not define them. The Consumer column shows the Pydantic settings field that reads the variable when our Python code consumes it; otherwise it points at the config file that embeds it (Keycloak realm import, identity-provider config, etc.) or — if neither — is left empty. The Service(s) column lists the compose service(s) whose environment: block receives the variable.

Variable	Consumer	Service(s)	Description
ACME_EMAIL		traefik
ADMIN_EMAIL		open-webui
ADMIN_PASSWORD_HASH		traefik
AIHUB_CONFIG_ENCRYPTION_KEY	ConfigEncryptionSettings.ENCRYPTION_KEY	api, document_ingestion_pipeline, rclone_pipeline, structured_pipeline	Fernet key (url-safe base64, 32 bytes) encrypting secret configuration fields at rest.
AIHUB_CREATE_DEFAULT_BUCKETS	AIHubSettings.CREATE_DEFAULT_BUCKETS	api, seaweedfs-init	Creates default knowledge buckets and namespaces
AIHUB_DEFAULT_BUCKET_NAME	AIHubSettings.DEFAULT_BUCKET_NAME	api, default_rag_pipeline, seaweedfs-init	Name of the default knowledge bucket
AIHUB_DEFAULT_NAMESPACE_NAME	AIHubSettings.DEFAULT_NAMESPACE_NAME	api	Name of the default namespace
AIHUB_SHARED_BUCKET_NAME	AIHubSettings.SHARED_BUCKET_NAME	api, seaweedfs-init, shared_rag_pipeline	Name of the shared knowledge bucket
AIHUB_SHARED_NAMESPACE_NAME	AIHubSettings.SHARED_NAMESPACE_NAME	api	Name of the shared namespace
AIHUB_SHOW_LEGACY_KNOWLEDGE	AIHubSettings.SHOW_LEGACY_KNOWLEDGE	api	Whether the legacy deploy-bound knowledge databases (default_rag / shared_rag) are listed and readable. Off by default: their pipelines are disabled in every stage, so the databases are obsolete unless a deployment still runs a legacy pipeline — set this to true there to keep managing them. With it off they are neither listed nor browsable, so their documents cannot be reached by name either. Read once at startup: changing it requires an API restart.
AIHUB_STARTUP_TENANT_ACCESS_RULES	StartupTenantSettings.ACCESS_RULES	api	Comma-separated access rules for the startup tenant. Use 'aihub.admin.>' for unrestricted access to all platform features. Leave empty to derive the ceiling from the models this instance actually serves, minus AIHUB_TENANT_DEFAULT_ACCESS_EXCLUDED_MODELS — the same default a sysadmin-created tenant gets. Setting it explicitly skips that lookup entirely, so a deployment whose model gateway is not reachable at first boot can still seed its tenant.
AIHUB_STARTUP_TENANT_DESCRIPTION	StartupTenantSettings.DESCRIPTION	api	Description of the startup tenant.
AIHUB_STARTUP_TENANT_ID	StartupTenantSettings.ID	api, keycloak	Unique identifier for the startup tenant. Also used as the Keycloak group name.
AIHUB_STARTUP_TENANT_NAME	StartupTenantSettings.NAME	api	Display name of the startup tenant.
AIHUB_TENANT_DEFAULT_ACCESS_AGENT_CLASSES	TenantDefaultAccessSettings.AGENT_CLASSES	api	Comma-separated agent classes a new tenant's default ceiling grants, each named as the blueprint reports itself (e.g. RAGAgent). The grant is the blueprint itself, not its existing profiles: the tenant may create assistants of these types, and reaches only the ones it creates. Every other blueprint stays hidden from that tenant until a sysadmin grants it. An allow list rather than exclusions because the discovered-class roster is still empty when the startup tenant is seeded.
AIHUB_TENANT_DEFAULT_ACCESS_EXCLUDED_MODELS	TenantDefaultAccessSettings.EXCLUDED_MODELS	api	Comma-separated models withheld from a new tenant's default ceiling, each as capability/name exactly as LiteLLM reports it (e.g. text-generation/Apertus-70B-Instruct-2509). Matched against the live roster verbatim, so a renamed or removed model silently matches nothing and the capability falls back to a plain wildcard.
AIHUB_USER_SIGNUP_FIRST_ADMIN_USER_ROLES	UserSignupSettings.FIRST_ADMIN_USER_ROLES	api	Comma-separated list of roles assigned to the very first user. This user is typically the initial platform administrator.
AIHUB_USER_SIGNUP_REGULAR_USER_ROLES	UserSignupSettings.REGULAR_USER_ROLES	api	Comma-separated list of roles assigned to regular users (not the first user). These users typically have standard platform access.
AIHUB_VERSION	AIHubSettings.VERSION	anonymiser_agent, api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, universal_agent, web_fetch_agent	Version of the app
AUTH_OPEN_WEBUI_SIGNING_SECRET	AuthSettings.OPEN_WEBUI_SIGNING_SECRET	api, open-webui, sysadmin-api	OpenWebUI signing secret
BACKUP_MINIMUM_KEEP	BackupSettings.MINIMUM_KEEP	backup-code
BACKUP_POSTGRES_SUBPROCESS_TIMEOUT_SECONDS	BackupSettings.POSTGRES_SUBPROCESS_TIMEOUT_SECONDS	backup-code
BACKUP_RETENTION_DAYS	BackupSettings.RETENTION_DAYS	backup-code
BACKUP_S3_BUCKET	BackupSettings.S3_BUCKET	backup-code
DAGSTER_CLEANUP_BATCH_LIMIT		backup-code
DAGSTER_DB		backup-code
DAGSTER_DEBUG_LOG_RETENTION_DAYS		backup-code
DAGSTER_INFO_LOG_RETENTION_DAYS		backup-code
DAGSTER_MAX_CONCURRENT_RUNS		dagster-daemon, dagster-webserver, default_rag_pipeline, document_ingestion_pipeline, rclone_pipeline, shared_rag_pipeline, structured_pipeline
DAGSTER_UNIMPORTANT_EVENT_RETENTION_DAYS		backup-code
DAGSTER_WARNING_LOG_RETENTION_DAYS		backup-code
DOCUMENT_INGESTION_EMBEDDING_MODEL	DocumentIngestionPipelineSettings.EMBEDDING_MODEL	document_ingestion_pipeline	LiteLLM model name used to embed chunks.
DOCUMENT_INGESTION_LLM_MODEL	DocumentIngestionPipelineSettings.LLM_MODEL	document_ingestion_pipeline	LiteLLM model name used for summaries and table refinement, and for figure descriptions when no vision model is set. Must support response schemas, which table refinement relies on.
DOCUMENT_INGESTION_OBSERVE_JOB_HOUR	DocumentIngestionPipelineSettings.OBSERVE_JOB_HOUR	document_ingestion_pipeline	Hour of the daily per-bucket observation schedule.
DOCUMENT_INGESTION_OBSERVE_JOB_MINUTE	DocumentIngestionPipelineSettings.OBSERVE_JOB_MINUTE	document_ingestion_pipeline	Minute of the daily per-bucket observation schedule.
DOCUMENT_INGESTION_VISION_MODEL	DocumentIngestionPipelineSettings.VISION_MODEL	document_ingestion_pipeline	LiteLLM model name used for figure descriptions; the text model when unset. Set it whenever the text model cannot read images, or figures are sent to a model that cannot describe them.
DOCUMENT_INGESTION_WITH_FIGURE_DESCRIPTIONS	DocumentIngestionPipelineSettings.WITH_FIGURE_DESCRIPTIONS	document_ingestion_pipeline	Generate figure descriptions with a vision LLM.
DOCUMENT_INGESTION_WITH_SUMMARY_NODES	DocumentIngestionPipelineSettings.WITH_SUMMARY_NODES	document_ingestion_pipeline	Generate recursive summaries for hierarchical RAG.
DOCUMENT_INGESTION_WITH_TABLE_REFINEMENT	DocumentIngestionPipelineSettings.WITH_TABLE_REFINEMENT	document_ingestion_pipeline	Refine tables with the LLM to detect structure and split them.
DOMAIN	30-clients.json, realm-settings.json	anonymiser_agent, api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, keycloak, keycloak-config, knowledge_extraction_agent, langfuse-web, litellm, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, oauth2proxy-attu, oauth2proxy-backup, oauth2proxy-dagster, oauth2proxy-seaweed, open-webui, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, seaweedfs-s3, shared_rag_pipeline, structured_pipeline, sysadmin-api, sysadmin-web, traefik, universal_agent, web, web_fetch_agent
ENABLE_OTEL_METRICS		open-webui
ENV		api, open-webui, sysadmin-api
ETCD_TOKEN		etcd, etcd-init, milvus-standalone, seaweedfs-filer
EXPERT_ASKING_CHANNEL_TYPE		expert_asking_agent
GEMINI_API_KEY		litellm
HUGGINGFACE_API_KEY		litellm, vllm, vllm-bge-m3, vllm-bge-reranker
INCIDENT_GITHUB_APP_ID	IncidentSettings.GITHUB_APP_ID	api	GitHub App id. The App needs Issues: write and Contents: write.
INCIDENT_GITHUB_INSTALLATION_ID	IncidentSettings.GITHUB_INSTALLATION_ID	api	Installation id of the App on the target repository.
INCIDENT_GITHUB_PRIVATE_KEY	IncidentSettings.GITHUB_PRIVATE_KEY	api	PEM private key of the GitHub App, used to sign the JWT that buys an installation token. Supply it as a Docker secret mounted at /run/secrets/incident_github_private_key (a compose override adding a secrets: entry to the api service) or from a vault, never in a committed env file. An empty INCIDENT_GITHUB_PRIVATE_KEY in the environment does not shadow the secret.
INCIDENT_GITHUB_REPOSITORY	IncidentSettings.GITHUB_REPOSITORY	api	Repository issues are filed in, as 'owner/name'. Must be private — reports carry customer data, and a public repository would publish it irreversibly.
JIRA_ALLOWED_PRIVATE_HOSTS	JiraSettings.ALLOWED_PRIVATE_HOSTS	release_notes_agent	Comma-separated host names an agent's Jira URL may name although they are internal, such as a Jira Data Center reachable only on the company network. Every other internal host is refused.
KEYCLOAK_ADMIN_PASSWORD		keycloak, keycloak-config
KEYCLOAK_ADMIN_USER		keycloak, keycloak-config
KEYCLOAK_API_SERVICE_CLIENT_SECRET	KeycloakSettings.API_SERVICE_CLIENT_SECRET	api, bot, keycloak, keycloak-config, sysadmin-api	Client secret for the API service account
KEYCLOAK_AZURE_CLIENT_ID	identity-providers.json	keycloak
KEYCLOAK_AZURE_CLIENT_SECRET	identity-providers.json	keycloak
KEYCLOAK_AZURE_TENANT_ID	identity-providers.json	keycloak
KEYCLOAK_LOGIN_WELCOME_PAGE	KeycloakSettings.LOGIN_WELCOME_PAGE	api, sysadmin-api	Show a welcome page instead of the identity provider list on the generic login page, and stop publishing federated IDPs to anonymous callers. For shared instances whose tenants each log in through their own per-tenant login link.
KEYCLOAK_OAUTH2_PROXY_ATTU_SECRET	30-clients.json	keycloak, keycloak-config, oauth2proxy-attu
KEYCLOAK_OAUTH2_PROXY_BACKUP_SECRET	30-clients.json	keycloak, keycloak-config, oauth2proxy-backup
KEYCLOAK_OAUTH2_PROXY_DAGSTER_SECRET	30-clients.json	keycloak, keycloak-config, oauth2proxy-dagster
KEYCLOAK_OAUTH2_PROXY_DATALAKE_SECRET	30-clients.json	keycloak, keycloak-config, oauth2proxy-seaweed
KEYCLOAK_OPENWEBUI_CLIENT_SECRET	30-clients.json	keycloak, keycloak-config, open-webui
KEYCLOAK_SHOW_KEYCLOAK_LOGIN	KeycloakSettings.SHOW_KEYCLOAK_LOGIN	api, sysadmin-api	Show a direct Keycloak login button alongside federated IDPs
KEYCLOAK_TENANT_IDP_ALIASES	KeycloakSettings.TENANT_IDP_ALIASES	api	Tenant login links as comma-separated tenant_id=idp_alias pairs (e.g. 'acme=acme-entra,beta=shared-idp'). A logged-out visit to /<tenant_id> goes straight to that identity provider. Empty turns tenant login links off.
LANGFUSE_ALLOWED_ORGANIZATION_CREATORS		langfuse-web
LANGFUSE_CLICKHOUSE_PASSWORD		backup-code, clickhouse, langfuse-web, langfuse-worker
LANGFUSE_ENCRYPTION_KEY		langfuse-web, langfuse-worker
LANGFUSE_INIT_USER_EMAIL		langfuse-web
LANGFUSE_INIT_USER_PASSWORD		langfuse-web
LANGFUSE_KEYCLOAK_CLIENT_SECRET		keycloak, keycloak-config, langfuse-web
LANGFUSE_NEXTAUTH_SECRET		langfuse-web
LANGFUSE_PUBLIC_KEY	LangfuseSettings.PUBLIC_KEY	api, langfuse-web, otel-collector	Langfuse public API key
LANGFUSE_SALT		langfuse-web, langfuse-worker
LANGFUSE_SECRET_KEY	LangfuseSettings.SECRET_KEY	api, langfuse-web, otel-collector	Langfuse secret API key
LITELLM_CONFIG_VARIANT		litellm
LITELLM_MASTER_KEY	litellm-config.yml	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, litellm, llm_wrapping_agent, memory_writer_agent, mineru-api, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, shared_rag_pipeline, universal_agent, web_fetch_agent
LITELLM_UI_PASSWORD		litellm
LITELLM_UI_USERNAME		litellm
LOCAL_LLM_TOKEN	litellm-config.yml	litellm, vllm, vllm-bge-m3, vllm-bge-reranker
LOG_LEVEL	LogSettings.LEVEL	anonymiser_agent, api, bot, dagster-daemon, dagster-webserver, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, open-webui, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, traefik, universal_agent, web_fetch_agent	Logging level
MAINTENANCE_DISABLED		backup-code
MEM0_EMBEDDING_MODEL_NAME	Mem0Settings.EMBEDDING_MODEL_NAME	api, bot, expert_asking_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, memory_writer_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Name of the embedding model to use
MEM0_LLM_NAME	Mem0Settings.LLM_NAME	api, bot, expert_asking_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, memory_writer_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Name of the LLM to use. Platform default; an agent may override it per profile.
MEM0_RERANKING_MODEL_NAME	Mem0Settings.RERANKING_MODEL_NAME	api, bot, expert_asking_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, memory_writer_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Name of the reranking model to use
MEM0_TELEMETRY		api, bot, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, shared_rag_pipeline, universal_agent, web_fetch_agent
MILVUS_DIMENSION	MilvusSettings.DIMENSION	anonymiser_agent, api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Dimension of the embedding vector
MILVUS_ROOT_PASSWORD	MilvusSettings.ROOT_PASSWORD	anonymiser_agent, api, attu, backup-code, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, milvus-standalone, namespace_selection_agent, open-webui, rag_agent, release_notes_agent, retrieval_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Root password for Milvus authentication. If not set, no auth is used. Username is always 'root'.
MINERU_API_MAX_CONCURRENT_REQUESTS		mineru-api
MINERU_API_TIMEOUT	MineruSettings.API_TIMEOUT	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Timeout for MinerU API calls in seconds
MINERU_FORMULA_ENABLE	MineruSettings.FORMULA_ENABLE	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Enable formula/equation parsing
MINERU_MAX_CONCURRENT_BATCH_REQUESTS	MineruSettings.MAX_CONCURRENT_BATCH_REQUESTS	api, default_rag_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Client-side concurrent page-batch requests per document
MINERU_PAGE_BATCH_SIZE	MineruSettings.PAGE_BATCH_SIZE	api, default_rag_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Pages per MinerU request for PDFs; keeps server memory constant. 0 disables batching
MINERU_TABLE_ENABLE	MineruSettings.TABLE_ENABLE	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Enable table detection and parsing
MINERU_VLM_NAME	MineruSettings.VLM_NAME	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, mineru-api, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	LiteLLM model alias for MinerU VLM
MONGO_PASSWORD		anonymiser_agent, api, backup-code, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, ferretdb, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, postgres-ferretdb, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, universal_agent, web_fetch_agent
MONGO_USERNAME		anonymiser_agent, api, backup-code, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, ferretdb, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, postgres-ferretdb, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, universal_agent, web_fetch_agent
NATS_TOKEN	NatsSettings.TOKEN	anonymiser_agent, api, backup-code, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, nats, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, universal_agent, web_fetch_agent	Authentication token for NATS server. If not set, no auth is used.
NEO4J_PASSWORD	Neo4jSettings.PASSWORD	api, bot, expert_asking_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, memory_writer_agent, neo4j, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Password for Neo4j DB Server
NEO4J_USERNAME	Neo4jSettings.USERNAME	api, bot, expert_asking_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, memory_writer_agent, neo4j, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Username for Neo4j DB Server
NOTIFICATION_URLS	NotificationSettings.URLS	default_rag_pipeline, document_ingestion_pipeline, rclone_pipeline, shared_rag_pipeline, structured_pipeline	Apprise notification URIs (comma-separated). Examples: 'slack://TokenA/TokenB/TokenC/#alerts', 'mailto://user:pw@smtp.example.com', 'discord://webhook_id/webhook_token'. See https://github.com/caronc/apprise for the full list.
OAUTH_ADMIN_ROLES_OPENWEBUI		open-webui
OAUTH_ALLOWED_GROUPS_ATTU		oauth2proxy-attu
OAUTH_ALLOWED_GROUPS_BACKUP		oauth2proxy-backup
OAUTH_ALLOWED_GROUPS_DAGSTER		oauth2proxy-dagster
OAUTH_ALLOWED_GROUPS_SEAWEEDFS		oauth2proxy-seaweed
OAUTH_CLIENT_ID		api, bot, open-webui, sysadmin-api, sysadmin-web, web
OAUTH_CLIENT_SECRET		api, bot, open-webui, sysadmin-api
OAUTH_COOKIE_SECRET_ATTU		oauth2proxy-attu
OAUTH_COOKIE_SECRET_BACKUP		oauth2proxy-backup
OAUTH_COOKIE_SECRET_DAGSTER		oauth2proxy-dagster
OAUTH_COOKIE_SECRET_SEAWEEDFS		oauth2proxy-seaweed
OAUTH_CUSTOM_SIGN_IN_LOGO		oauth2proxy-attu, oauth2proxy-backup, oauth2proxy-dagster, oauth2proxy-seaweed
OAUTH_TENANT_ID		api, sysadmin-api
OPENWEBUI_BYPASS_ADMIN_ACCESS_CONTROL		open-webui
OPENWEBUI_ENABLE_ADMIN_EXPORT		open-webui
OPENWEBUI_MODEL_NAME_LOCALE	OpenWebuiSettings.MODEL_NAME_LOCALE	open-webui	Locale used to render agent workspace-model names in OpenWebUI, which only stores a single name per model. Falls back to the platform default locale and then any available translation.
OPENWEBUI_SCIM_TOKEN	OpenWebuiSettings.SCIM_TOKEN	api, open-webui, sysadmin-api	SCIM 2.0 bearer token for group and user provisioning
OPENWEBUI_SECRET_KEY	OpenWebuiSettings.SECRET_KEY	api, open-webui, sysadmin-api	OpenWebUI WEBUI_SECRET_KEY for JWT signing
OPENWEBUI_SERVICE_ACCOUNT_ID	OpenWebuiSettings.SERVICE_ACCOUNT_ID	api, openwebui-init, sysadmin-api	UUID of the AI-Hub service account in OpenWebUI's database
OPENWEBUI_WEBHOOK_SECRET	OpenWebuiSettings.WEBHOOK_SECRET	api, open-webui, sysadmin-api	Shared secret for authenticating OpenWebUI webhook calls
OPEN_TERMINAL_API_KEY	OpenTerminalSettings.API_KEY	api, open-terminal, open-webui, universal_agent	The bearer key every sandbox caller sends.
OTEL_CLOUD_ENDPOINT	otel-config.yml	otel-collector
OTEL_CLOUD_HEADERS	otel-config.yml	otel-collector
OTEL_ENABLED	OpenTelemetrySettings.ENABLED	anonymiser_agent, api, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, web_fetch_agent	Enable/disable OpenTelemetry tracing entirely
OTEL_METRICS_ENABLED	OpenTelemetrySettings.METRICS_ENABLED	api	Enable/disable OpenTelemetry request metrics (separate from tracing)
PII_ANONYMISE_EXTERNAL_MODELS		litellm
POSTGRES_PASSWORD	openwebui-init-openwebui.sh	backup-code, dagster-daemon, dagster-webserver, default_rag_pipeline, document_ingestion_pipeline, keycloak, langfuse-web, langfuse-worker, litellm, open-webui, openwebui-init, pgbouncer, postgres, postgres-ferretdb, rclone_pipeline, shared_rag_pipeline, structured_pipeline
POSTGRES_PORT	openwebui-init-openwebui.sh	backup-code, openwebui-init
POSTGRES_USER	openwebui-init-openwebui.sh	backup-code, dagster-daemon, dagster-webserver, default_rag_pipeline, document_ingestion_pipeline, keycloak, langfuse-web, langfuse-worker, litellm, open-webui, openwebui-init, pgbouncer, postgres, postgres-ferretdb, rclone_pipeline, shared_rag_pipeline, structured_pipeline
PRESIDIO_ANALYZER_API_KEY	PresidioAnalyzerSettings.API_KEY	anonymiser_agent, litellm, presidio-analyzer	The bearer key every analyzer caller sends.
RAG_FILE_MAX_COUNT		open-webui
RAG_FILE_MAX_SIZE		open-webui
RAG_IMAGE_INLINE_ENABLED	RagImageInlineSettings.ENABLED	expert_rag_agent, litellm, rag_agent, retrieval_agent	Whether RAG figures are inlined as base64 at the LiteLLM gateway.
RAG_IMAGE_INLINE_MAX_BYTES		litellm
RCLONE_PIPELINE_OBSERVE_JOB_HOUR	RclonePipelineSettings.OBSERVE_JOB_HOUR	rclone_pipeline	Hour of the daily per-database sync. Before the ingestion pipeline's midnight observation, so a day's sync is vectorised by the same night's backstop run.
RCLONE_PIPELINE_OBSERVE_JOB_MINUTE	RclonePipelineSettings.OBSERVE_JOB_MINUTE	rclone_pipeline	Minute of the daily per-database sync.
RCLONE_RC_PASS	RcloneSettings.RC_PASS	rclone, rclone_pipeline	RC API password for authentication.
RCLONE_RC_USER	RcloneSettings.RC_USER	rclone, rclone_pipeline	RC API username for authentication.
REDIS_TOKEN	RedisSettings.TOKEN	anonymiser_agent, api, backup-code, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, langfuse-web, langfuse-worker, litellm, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, open-webui, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, valkey, web_fetch_agent	Authentication token for Redis server. If not set, no auth is used.
S3_STORAGE_ACCESS_KEY	S3StorageSettings.ACCESS_KEY	api, backup-code, bot, clickhouse, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, langfuse-web, langfuse-worker, llm_wrapping_agent, milvus-standalone, open-webui, rag_agent, rclone_pipeline, retrieval_agent, seaweedfs-init, seaweedfs-s3, shared_rag_pipeline, structured_pipeline, universal_agent, web_fetch_agent	The access key for the s3 endpoint.
S3_STORAGE_SECRET_KEY	S3StorageSettings.SECRET_KEY	api, backup-code, bot, clickhouse, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, langfuse-web, langfuse-worker, llm_wrapping_agent, milvus-standalone, open-webui, rag_agent, rclone_pipeline, retrieval_agent, seaweedfs-init, seaweedfs-s3, shared_rag_pipeline, structured_pipeline, universal_agent, web_fetch_agent	The secret key for the s3 endpoint.
SANDBOX_MIRROR_INTERVAL_SECONDS		sandbox-mirror
SANDBOX_MIRROR_S3_ACCESS_KEY	s3-entrypoint.sh	sandbox-mirror, seaweedfs-s3
SANDBOX_MIRROR_S3_SECRET_KEY	s3-entrypoint.sh	sandbox-mirror, seaweedfs-s3
SCHEDULER_EVENT_RETENTION_DAYS	SchedulerSettings.EVENT_RETENTION_DAYS	api	Age beyond which events in a scheduled thread are pruned. Zero disables pruning entirely, which is the default: deleting a tenant's history must be something an operator turned on, never something a deploy started doing.
SCHEDULER_LEASE_TTL_SECONDS	SchedulerSettings.LEASE_TTL_SECONDS	api	Leader-lease lifetime. Must exceed the worst-case tick runtime, or the lease expires mid-tick and a second replica starts one concurrently.
SCHEDULER_MAX_CATCHUP_MINUTES	SchedulerSettings.MAX_CATCHUP_MINUTES	api	How far back a tick replays after downtime. Occurrences older than this are logged and dropped rather than fired as a burst of stale runs.
SCHEDULER_MAX_RUNS_PER_PROFILE_PER_MONTH	SchedulerSettings.MAX_RUNS_PER_PROFILE_PER_MONTH	api	Most runs a single schedule may produce in 30 days, rejected when the profile is saved. Defaults to the tightest schedule cron can express (every minute), so out of the box it rejects nothing expressible and exists for a deployment that wants to allow less.
SCHEDULER_MAX_TOTAL_RUNS_PER_MONTH	SchedulerSettings.MAX_TOTAL_RUNS_PER_MONTH	api	Most runs all schedules together may produce in 30 days, checked when a profile is saved. Zero disables the check, which is the default — the right ceiling depends on how many agents a deployment runs and what they cost, and no platform-wide constant knows that.
SCHEDULER_REDIS_KEY_PREFIX	SchedulerSettings.REDIS_KEY_PREFIX	api	Namespace for all scheduler keys in Redis. Change it to run an isolated scheduler.
SCHEDULER_RETENTION_INTERVAL_SECONDS	SchedulerSettings.RETENTION_INTERVAL_SECONDS	api	Minimum seconds between prunes, enforced cluster-wide. Keeps bulk deletes off the tick.
SCHEDULER_TICK_INTERVAL_SECONDS	SchedulerSettings.TICK_INTERVAL_SECONDS	api	Seconds between scheduler ticks. Bounds how late an occurrence can fire.
SEARXNG_SECRET_KEY		searxng
SEAWEEDFS_TOKEN		seaweedfs-filer, seaweedfs-master, seaweedfs-s3, seaweedfs-volume
SLACK_CHANNEL_ID		expert_asking_agent
SLACK_SERVICE_URL		expert_asking_agent
STONEY_CLOUD_API_BASE_URL	litellm-config.yml	litellm
STONEY_CLOUD_API_KEY	litellm-config.yml	litellm
STRUCTURED_PIPELINE_ALLOWED_PRIVATE_HOSTS	StructuredPipelineSettings.ALLOWED_PRIVATE_HOSTS	structured_pipeline	Comma-separated host names a source URL may name although they are internal, such as a Jira Data Center reachable only on the company network. Every other internal host is refused, because a knowledge administrator sets the URL and the pipeline can reach the platform's own services.
STRUCTURED_PIPELINE_OBSERVE_JOB_HOUR	StructuredPipelineSettings.OBSERVE_JOB_HOUR	structured_pipeline	Hour of the daily per-database sync. Before the ingestion pipeline's midnight observation, so a day's sync is vectorised by the same night's backstop run.
STRUCTURED_PIPELINE_OBSERVE_JOB_MINUTE	StructuredPipelineSettings.OBSERVE_JOB_MINUTE	structured_pipeline	Minute of the daily per-database sync.
SUPERUSER_EMAIL	SuperuserSettings.EMAIL	api, keycloak, sysadmin-api	Keycloak email used to look up the superuser.
SUPERUSER_FIRSTNAME	users-superuser.json	keycloak
SUPERUSER_LASTNAME	users-superuser.json	keycloak
SUPERUSER_PASSWORD	users-superuser.json	keycloak
SUPERUSER_ROLES_JSON	SuperuserSettings.ROLES_JSON	api, keycloak, sysadmin-api	JSON array of realm roles assigned to the superuser, shared verbatim with the Keycloak realm import via the same environment variable. Must include AIHubSysAdmin.
SUPERUSER_TOKEN	SuperuserSettings.TOKEN	api, open-webui, sysadmin-api	Static bearer token for machine-to-machine API calls. Must start with 'sk-'.
SUPERUSER_USERNAME	SuperuserSettings.USERNAME	api, keycloak, sysadmin-api	Log-only label for the seeded superuser in API startup logs. Not persisted in Keycloak — the Keycloak username is SUPERUSER_EMAIL (registrationEmailAsUsername), so login is by email.
SWISS_LLM_CLOUD_API_BASE_URL	litellm-config.yml	litellm
SWISS_LLM_CLOUD_API_KEY	litellm-config.yml	litellm
SWISS_LLM_CLOUD_EMBEDDING_API_BASE_URL	litellm-config.yml	litellm
SWISS_LLM_CLOUD_EMBEDDING_API_KEY	litellm-config.yml	litellm
SWISS_LLM_CLOUD_IMAGE_API_BASE_URL	litellm-config.yml	litellm
SWISS_LLM_CLOUD_IMAGE_API_KEY	litellm-config.yml	litellm
SWISS_LLM_CLOUD_OCR_API_BASE_URL	litellm-config.yml	litellm
SWISS_LLM_CLOUD_OCR_API_KEY	litellm-config.yml	litellm
SWISS_LLM_CLOUD_RERANKING_API_BASE_URL	litellm-config.yml	litellm
SWISS_LLM_CLOUD_RERANKING_API_KEY	litellm-config.yml	litellm
SWISS_LLM_CLOUD_WHISPER_API_BASE_URL	litellm-config.yml	litellm
SWISS_LLM_CLOUD_WHISPER_API_KEY	litellm-config.yml	litellm
SWISS_LLM_CLOUD_WHISPER_MODEL	litellm-config.yml	litellm
TEAMS_BOT_ID		expert_asking_agent
TEAMS_CHANNEL_ID		expert_asking_agent
TEAMS_TENANT_ID		expert_asking_agent

Required by SDK settings classes (not used by the default deployment)

These variables are declared as required fields on a Pydantic BaseSettings class and are not consumed by any service in the default docker-compose stack. The empty Service(s) column reflects this: no container in the default deployment loads the settings class. They become operationally required only when a custom agent, pipeline, or other extension is added to docker-compose that activates the corresponding SDK functionality (e.g. the SharePoint connector or Azure Document Intelligence loader). Until then, leaving the placeholders unchanged is fine — Pydantic only validates the class when something instantiates it.

Variable	Consumer	Service(s)	Description
AZURE_DATA_LAKE_CONNECTION_STRING	AzureDataLakeSettings.CONNECTION_STRING		Azure Data Lake connection string for explicit authentication. Recommended over implicit authentication.
AZURE_DOCUMENT_INTELLIGENCE_API_KEY	AzureDocumentIntelligenceSettings.API_KEY		API key for Document Intelligence
AZURE_DOCUMENT_INTELLIGENCE_ENDPOINT	AzureDocumentIntelligenceSettings.ENDPOINT
SHAREPOINT_CLIENT_ID	SharePointSettings.CLIENT_ID		The application (client) ID.
SHAREPOINT_CLIENT_SECRET	SharePointSettings.CLIENT_SECRET		The client secret for authentication.
SHAREPOINT_SITE_URL	SharePointSettings.SITE_URL		The SharePoint site URL.
SHAREPOINT_TENANT_ID	SharePointSettings.TENANT_ID		The Azure AD tenant ID.

Optional: override platform defaults

These variables have sensible defaults (or are supplied to containers by docker-compose) and do not need to be set in .env. Add them only to override the default. Vars marked (supplied by compose) are required by the application but get their value injected through docker-compose.yml, so setting them in .env has no effect.

Variable	Consumer	Default	Service(s)	Description
AIHUB_API_DEBUG_MODE	AIHubSettings.API_DEBUG_MODE	False		Debug mode for development
AIHUB_CREATE_DEFAULT_ROLES	AIHubSettings.CREATE_DEFAULT_ROLES	True	api, sysadmin-api	Creates default roles like AI-Hub Admin and AI-Hub User
AIHUB_FRONTEND_ORIGIN	AIHubSettings.FRONTEND_ORIGIN	(supplied by compose)	anonymiser_agent, api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, universal_agent, web_fetch_agent	Comma separated list of origins to allow CORS
AIHUB_INTERNAL_API_BASE_URL	AIHubSettings.INTERNAL_API_BASE_URL	'http://api:8000'	sysadmin-api	Internal base URL of the main platform API (no path), used for server-to-server calls such as the sysadmin plane proxying the access-capability catalog. Predictable per deployment: the Docker service name in compose, localhost in local dev.
AIHUB_MONGO_MAIN_DB_NAME	AIHubSettings.MONGO_MAIN_DB_NAME	'aihub'		Name of mongodb database that will be used to store data
AIHUB_OPENAI_API_BASE_URL	AIHubSettings.OPENAI_API_BASE_URL	'http://api:8000/api/v1/active/openai'	api	Base URL of AI-Hub's OpenAI-compatible endpoint, used for Langfuse LLM connection
AUTH_ENABLE_API_ACCESS	AuthSettings.ENABLE_API_ACCESS	True	api, sysadmin-api	Enable API access
AZURE_DOCUMENT_INTELLIGENCE_API_VERSION	AzureDocumentIntelligenceSettings.API_VERSION	'2024-11-30'
AZURE_DOCUMENT_INTELLIGENCE_EXTENSIONS	AzureDocumentIntelligenceSettings.EXTENSIONS	['pdf', 'docx', 'xlsx', 'pptx', 'html']		Supported file extensions for document processing
BACKUP_AWS_ENDPOINT_URL	BackupSettings.AWS_ENDPOINT_URL	'http://seaweedfs-s3:9000'	backup-code
BACKUP_CLICKHOUSE_HOST	BackupSettings.CLICKHOUSE_HOST	'clickhouse'	backup-code
BACKUP_CLICKHOUSE_PORT	BackupSettings.CLICKHOUSE_PORT	8123
BACKUP_CLICKHOUSE_USER	BackupSettings.CLICKHOUSE_USER	'clickhouse'	backup-code
BACKUP_DAGSTER_CLEANUP_BATCH_LIMIT	BackupSettings.DAGSTER_CLEANUP_BATCH_LIMIT	1000000	backup-code
BACKUP_DAGSTER_DB	BackupSettings.DAGSTER_DB	'dagster'	backup-code
BACKUP_DAGSTER_DEBUG_LOG_RETENTION_DAYS	BackupSettings.DAGSTER_DEBUG_LOG_RETENTION_DAYS	7	backup-code
BACKUP_DAGSTER_INFO_LOG_RETENTION_DAYS	BackupSettings.DAGSTER_INFO_LOG_RETENTION_DAYS	60	backup-code
BACKUP_DAGSTER_UNIMPORTANT_EVENT_RETENTION_DAYS	BackupSettings.DAGSTER_UNIMPORTANT_EVENT_RETENTION_DAYS	30	backup-code
BACKUP_DAGSTER_WARNING_LOG_RETENTION_DAYS	BackupSettings.DAGSTER_WARNING_LOG_RETENTION_DAYS	60	backup-code
BACKUP_LANGFUSE_CLICKHOUSE_PASSWORD	BackupSettings.LANGFUSE_CLICKHOUSE_PASSWORD	(supplied by compose)	backup-code
BACKUP_MAINTENANCE_DISABLED	BackupSettings.MAINTENANCE_DISABLED	False	backup-code
BACKUP_MILVUS_HOST	BackupSettings.MILVUS_HOST	'milvus-standalone'	backup-code
BACKUP_MILVUS_PORT	BackupSettings.MILVUS_PORT	19530	backup-code
BACKUP_MILVUS_ROOT_PASSWORD	BackupSettings.MILVUS_ROOT_PASSWORD	(supplied by compose)	backup-code
BACKUP_MONGO_PASSWORD	BackupSettings.MONGO_PASSWORD	(supplied by compose)	backup-code
BACKUP_MONGO_USERNAME	BackupSettings.MONGO_USERNAME	'admin'	backup-code
BACKUP_NATS_TOKEN	BackupSettings.NATS_TOKEN	(supplied by compose)	backup-code
BACKUP_NATS_URL	BackupSettings.NATS_URL	'nats://nats:4222'	backup-code
BACKUP_NEO4J_CONTAINER	BackupSettings.NEO4J_CONTAINER	'neo4j'	backup-code
BACKUP_POSTGRES_FERRETDB_HOST	BackupSettings.POSTGRES_FERRETDB_HOST	'postgres-ferretdb'	backup-code
BACKUP_POSTGRES_HOST	BackupSettings.POSTGRES_HOST	'postgres'	backup-code
BACKUP_POSTGRES_PASSWORD	BackupSettings.POSTGRES_PASSWORD	(supplied by compose)	backup-code
BACKUP_POSTGRES_PORT	BackupSettings.POSTGRES_PORT	5432	backup-code
BACKUP_POSTGRES_USER	BackupSettings.POSTGRES_USER	'admin'	backup-code
BACKUP_REDIS_TOKEN	BackupSettings.REDIS_TOKEN	(supplied by compose)	backup-code
BACKUP_S3_STORAGE_ACCESS_KEY	BackupSettings.S3_STORAGE_ACCESS_KEY	'admin'	backup-code
BACKUP_S3_STORAGE_SECRET_KEY	BackupSettings.S3_STORAGE_SECRET_KEY	(supplied by compose)	backup-code
BACKUP_VALKEY_CONTAINER	BackupSettings.VALKEY_CONTAINER	'valkey'	backup-code
BACKUP_VALKEY_HOST	BackupSettings.VALKEY_HOST	'valkey'
BACKUP_VALKEY_PORT	BackupSettings.VALKEY_PORT	6379
INCIDENT_MAX_ATTACHMENTS	IncidentSettings.MAX_ATTACHMENTS	5		How many files one report may carry. Attachments are committed to the repository and cannot meaningfully be removed from its history afterwards, which is why this is deliberately small.
INCIDENT_MAX_ATTACHMENT_BYTES	IncidentSettings.MAX_ATTACHMENT_BYTES	5242880		Largest single attachment accepted, in bytes.
KEYCLOAK_API_SERVICE_CLIENT_ID	KeycloakSettings.API_SERVICE_CLIENT_ID	'aihub-api-service'		Client ID for the API service account
KEYCLOAK_EXTERNAL_URL	KeycloakSettings.EXTERNAL_URL	None	api, bot, sysadmin-api	Keycloak external URL as seen by browsers, used for issuer validation
KEYCLOAK_REALM	KeycloakSettings.REALM	'aihub'	api, bot, sysadmin-api	Keycloak realm name
KEYCLOAK_URL	KeycloakSettings.URL	(supplied by compose)	api, bot, keycloak-config, sysadmin-api	Keycloak internal URL for direct access (e.g., http://keycloak:8080)
LANGFUSE_BASE_URL	LangfuseSettings.BASE_URL	(supplied by compose)	api	Langfuse server base URL
LANGFUSE_PROJECT_ID	LangfuseSettings.PROJECT_ID	None	api	Langfuse project ID for constructing dataset URLs
LANGFUSE_PUBLIC_URL	LangfuseSettings.PUBLIC_URL	None	api	Public-facing Langfuse URL for browser links (e.g. https://langfuse.example.com)
LANGFUSE_TIMEOUT	LangfuseSettings.TIMEOUT	60		Timeout in seconds for Langfuse API requests
LITE_LLM_PROXY_API_KEY	LiteLLMProxySettings.API_KEY	None	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	API key for authentication. If not provided, other authentication methods will be used.
LITE_LLM_PROXY_BASE_URL	LiteLLMProxySettings.BASE_URL	(supplied by compose)	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	The base URL of the model.
LITE_LLM_PROXY_CONNECT_TIMEOUT_SECONDS	LiteLLMProxySettings.CONNECT_TIMEOUT_SECONDS	5.0		How long an LLM or embedding call may take to open its connection to the gateway. Kept far below the request timeout: a connect that never completes has nothing in flight, so failing it in seconds lets the SDK retry at once instead of waiting out the whole request timeout.
LITE_LLM_PROXY_INTERNAL_BASE_URL	LiteLLMProxySettings.INTERNAL_BASE_URL	None		In-cluster LiteLLM URL that Langfuse dials from its own containers when running managed evaluators. Falls back to BASE_URL, which is already correct wherever the API and Langfuse share a network; set it only where they do not, as in local development where the API runs on the host. Its hostname must appear in LANGFUSE_LLM_CONNECTION_WHITELISTED_HOST on langfuse-web and langfuse-worker.
LITE_LLM_PROXY_USER_BUDGET_DURATION	LiteLLMProxySettings.USER_BUDGET_DURATION	None		Budget is reset at the end of specified duration. If not set, budget is never reset. You can set duration as seconds ("30s"), minutes ("30m"), hours ("30h"), days ("30d"), months ("1mo").
LITE_LLM_PROXY_USER_MAX_BUDGET	LiteLLMProxySettings.USER_MAX_BUDGET	None		Budget available to a user in one period
LITE_LLM_PROXY_USER_MAX_PARALLEL_REQUESTS	LiteLLMProxySettings.USER_MAX_PARALLEL_REQUESTS	None		Rate limit a user based on the number of parallel requests. Raises 429 error, if user's parallel requests > x.
LITE_LLM_PROXY_USER_RPM_LIMIT	LiteLLMProxySettings.USER_RPM_LIMIT	None		Specify rpm limit for a given user (Requests per minute)
LITE_LLM_PROXY_USER_SOFT_BUDGET	LiteLLMProxySettings.USER_SOFT_BUDGET	None		Get alerts when user crosses given budget, doesn't block requests.
LITE_LLM_PROXY_USER_TPM_LIMIT	LiteLLMProxySettings.USER_TPM_LIMIT	None		Specify tpm limit for a given user (Tokens per minute)
MEM0_SEARCH_QUERY_EMBEDDING_WINDOW	Mem0Settings.SEARCH_QUERY_EMBEDDING_WINDOW	None		Override for the embedding model's input window, in the model's own tokens. Set it only when LiteLLM reports no or an incorrect max_input_tokens; None resolves it at first use. Queries are truncated to half this value: they can only be counted with tiktoken, which undercounts the embedder's tokenizer by up to 2x.
MEM0_SUPPORT_VISION	Mem0Settings.SUPPORT_VISION	True		Whether to support vision
MEM0_VISION_DETAIL	Mem0Settings.VISION_DETAIL	'auto'		Vision details
MEMORY_DEFAULT_TENANT_ID	MemorySettings.DEFAULT_TENANT_ID	'AIHub'		Default tenant ID for memory scoping
MEMORY_DEFAULT_TENANT_NAMESPACE	MemorySettings.DEFAULT_TENANT_NAMESPACE	None		Default tenant namespace for department-level scoping
MILVUS_URL	MilvusSettings.URL	(supplied by compose)	anonymiser_agent, api, attu, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Connection URL for Milvus DB Server
MINERU_API_BASE_URL	MineruSettings.API_BASE_URL	'http://mineru-api:8000'	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	MinerU API endpoint URL
MINERU_EXTENSIONS	MineruSettings.EXTENSIONS	['pdf', 'png', 'jpeg', 'jp2', 'webp', 'gif', 'bmp', 'jpg', 'tiff']		File extensions supported by MinerU
MINERU_VLM_SERVER_API_KEY	MineruSettings.VLM_SERVER_API_KEY	SecretStr('')	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	LiteLLM API key for VLM requests
MINERU_VLM_SERVER_URL	MineruSettings.VLM_SERVER_URL	'http://litellm:4000'	api, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	LiteLLM proxy URL for VLM routing
MONGO_CONNECTION_STRING	MongoSettings.CONNECTION_STRING	(supplied by compose)	anonymiser_agent, api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, universal_agent, web_fetch_agent	Overwrite the MongoDB connection string
NATS_ENDPOINT	NatsSettings.ENDPOINT	(supplied by compose)	anonymiser_agent, api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, rclone_pipeline, release_notes_agent, retrieval_agent, shared_rag_pipeline, structured_pipeline, sysadmin-api, universal_agent, web_fetch_agent	Connection endpoint for NATS messaging system
NEO4J_URL	Neo4jSettings.URL	(supplied by compose)	api, bot, expert_asking_agent, expert_rag_agent, few_shot_agent, llm_wrapping_agent, memory_writer_agent, rag_agent, shared_rag_pipeline, universal_agent, web_fetch_agent	Connection URL for Neo4j DB Server
NOTIFICATION_DAGSTER_UI_BASE_URL	NotificationSettings.DAGSTER_UI_BASE_URL	None	default_rag_pipeline, document_ingestion_pipeline, rclone_pipeline, shared_rag_pipeline, structured_pipeline	Base URL of the Dagster UI used to build deep links in notification bodies (e.g. 'https://dagster.example.com').
NOTIFICATION_MIN_INTERVAL_SECONDS	NotificationSettings.MIN_INTERVAL_SECONDS	30	default_rag_pipeline, document_ingestion_pipeline, rclone_pipeline, shared_rag_pipeline, structured_pipeline	Minimum interval between sensor ticks in seconds.
NOTIFICATION_TITLE_PREFIX	NotificationSettings.TITLE_PREFIX	'Swiss AI Hub Pipeline'	default_rag_pipeline, document_ingestion_pipeline, rclone_pipeline, shared_rag_pipeline, structured_pipeline	Prefix prepended to the notification title.
OPENWEBUI_BASE_URL	OpenWebuiSettings.BASE_URL	(supplied by compose)	api, sysadmin-api	OpenWebUI server base URL
OPENWEBUI_CONVERSATION_METADATA_MODEL	OpenWebuiSettings.CONVERSATION_METADATA_MODEL	'text-generation/gemma-4-31B-it'	api	LiteLLM name (capability/name) of the model generating conversation metadata — chat titles and follow-up questions — for chats that have no agent behind them. OpenWebUI runs it under the end user's identity, so a role without access to this model loses both features silently; the access catalog flags the model for that reason. Same model as the OpenWebUI TASK_MODEL env var but in LiteLLM form, since that one names the workspace model wrapping it.
OPEN_TERMINAL_BASE_URL	OpenTerminalSettings.BASE_URL	'http://open-terminal:8000'	api, universal_agent	The sandbox's API endpoint.
OPEN_TERMINAL_MAX_FILE_BYTES	OpenTerminalSettings.MAX_FILE_BYTES	100000000		The largest file read whole from the sandbox, so one file cannot exhaust memory.
OPEN_TERMINAL_TIMEOUT	OpenTerminalSettings.TIMEOUT	30		Seconds a request may take, on top of a command's own wait.
OTEL_BLRP_MAX_EXPORT_BATCH_SIZE	OpenTelemetrySettings.BLRP_MAX_EXPORT_BATCH_SIZE	2048		Log records per OTLP export
OTEL_BLRP_MAX_QUEUE_SIZE	OpenTelemetrySettings.BLRP_MAX_QUEUE_SIZE	16384		Log records buffered before new ones are dropped
OTEL_EXPORTER_OTLP_ENDPOINT	OpenTelemetrySettings.EXPORTER_OTLP_ENDPOINT	None	anonymiser_agent, api, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, litellm, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, open-webui, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, web_fetch_agent	OTLP exporter endpoint URL
OTEL_EXPORTER_OTLP_INSECURE	OpenTelemetrySettings.EXPORTER_OTLP_INSECURE	True	open-webui	Use insecure connection (no TLS) for gRPC
OTEL_EXPORTER_OTLP_PROTOCOL	OpenTelemetrySettings.EXPORTER_OTLP_PROTOCOL	'grpc'	anonymiser_agent, api, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, litellm, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, open-webui, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, web_fetch_agent	OTLP protocol
OTEL_EXPORTER_OTLP_TIMEOUT	OpenTelemetrySettings.EXPORTER_OTLP_TIMEOUT	60		Seconds an OTLP export may spend retrying
OTEL_RESOURCE_SERVICE_NAME	OpenTelemetrySettings.RESOURCE_SERVICE_NAME	None	anonymiser_agent, api, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, web_fetch_agent	Resource service name
OTEL_RESOURCE_SERVICE_NAMESPACE	OpenTelemetrySettings.RESOURCE_SERVICE_NAMESPACE	None	anonymiser_agent, api, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, web_fetch_agent	Resource service namespace
OTEL_RESOURCE_SERVICE_VERSION	OpenTelemetrySettings.RESOURCE_SERVICE_VERSION	None	anonymiser_agent, api, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, web_fetch_agent	Resource service version
PARSING_PASSTHROUGH_EXTENSIONS	ParsingSettings.PASSTHROUGH_EXTENSIONS	[]		File extensions that return empty content instead of 400 (e.g. for agent-only processing). Set via env as JSON array: PARSING_PASSTHROUGH_EXTENSIONS='["zip","wav"]'
PLAYWRIGHT_WS_URL	PlaywrightSettings.WS_URL	'ws://playwright:3000'	expert_rag_agent, llm_wrapping_agent, open-webui, rag_agent, universal_agent, web_fetch_agent	WebSocket endpoint of the Playwright server.
PRESIDIO_ANALYZER_API_BASE	PresidioAnalyzerSettings.API_BASE	'http://presidio-analyzer:3000'	anonymiser_agent, litellm	The analyzer's API endpoint.
PRESIDIO_ANALYZER_TIMEOUT	PresidioAnalyzerSettings.TIMEOUT	150		Seconds one analysis may take; a 20k-token text needs about 50 on 4 CPU threads.
RCLONE_LOCAL_SOURCE_ROOT	RcloneSettings.LOCAL_SOURCE_ROOT	None		Directory inside the rclone container that knowledge databases with a local source may read. Unset (the default) removes the local backend from the offered sources, because the daemon's own filesystem would otherwise be readable by every knowledge administrator.
RCLONE_PIPELINE_MAX_PARTITIONS	RclonePipelineSettings.MAX_PARTITIONS	1000		Maximum partitions added or removed per database per observation.
RCLONE_URL	RcloneSettings.URL	'http://rclone:5572'	rclone_pipeline	Rclone RC API URL (e.g., http://rclone:5572).
REDIS_URL	RedisSettings.URL	(supplied by compose)	anonymiser_agent, api, email_classification_agent, expert_asking_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, memory_writer_agent, namespace_selection_agent, open-webui, rag_agent, release_notes_agent, retrieval_agent, sysadmin-api, universal_agent, web_fetch_agent	Connection URL for Redis server (without token)
S3_STORAGE_ENDPOINT	S3StorageSettings.ENDPOINT	(supplied by compose)	api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, litellm, llm_wrapping_agent, rag_agent, rclone_pipeline, retrieval_agent, shared_rag_pipeline, structured_pipeline, universal_agent, web_fetch_agent	The s3 endpoint from either aws or minio.
S3_STORAGE_INTERNAL_ENDPOINT	S3StorageSettings.INTERNAL_ENDPOINT	None		The in-cluster s3 endpoint (Docker DNS) for presigned URLs that are fetched by other in-cluster services (e.g. the LiteLLM gateway inlining RAG figures). Only ever signed against, never connected to, so it works from the host without DNS resolution. If not set, falls back to ENDPOINT.
S3_STORAGE_PUBLIC_ENDPOINT	S3StorageSettings.PUBLIC_ENDPOINT	None	api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, rag_agent, rclone_pipeline, retrieval_agent, shared_rag_pipeline, structured_pipeline, universal_agent, web_fetch_agent	The publicly accessible s3 endpoint for presigned URLs. If not set, falls back to ENDPOINT. Use this when internal and external endpoints differ (e.g., Docker internal vs Traefik-routed external).
S3_STORAGE_REGION	S3StorageSettings.REGION	'us-east-1'		The region for the s3 endpoint. For minio, value does not matter
S3_STORAGE_URL_SIGNING_SECRET	S3StorageSettings.URL_SIGNING_SECRET	(supplied by compose)	api, bot, default_rag_pipeline, document_ingestion_pipeline, email_classification_agent, expert_rag_agent, few_shot_agent, imap_agent, knowledge_extraction_agent, llm_wrapping_agent, rag_agent, rclone_pipeline, retrieval_agent, shared_rag_pipeline, structured_pipeline, universal_agent, web_fetch_agent	A secret key used for signing and verifying temporary anonymous access URLs.
USAGE_LIMIT_WARNING_THRESHOLD_PERCENT	UsageLimitSettings.WARNING_THRESHOLD_PERCENT	80		Usage percentage at which warning headers are emitted

Additional variables for GPU deployments

The GPU variant currently does not introduce any operator-controlled variables beyond the base set above.