Environment Variables Configuration reference for a Pailot contour
These variables are set by the vendor at install time. Use the values from the delivery template — do not copy examples from a public third-party repo.
Variable Description DATABASE_URLPostgreSQL connection string BETTER_AUTH_SECRETAuth secret (32 hex chars): openssl rand -hex 32 BETTER_AUTH_URLPublic app URL ENCRYPTION_KEYEncryption key (32 hex chars): openssl rand -hex 32 INTERNAL_API_SECRETInternal API secret (32 hex chars): openssl rand -hex 32 NEXT_PUBLIC_APP_URLPublic app URL NEXT_PUBLIC_SOCKET_URLWebSocket URL (often the same host, or port 3002 on an internal name)
Variable Provider OPENAI_API_KEYOpenAI ANTHROPIC_API_KEY_1Anthropic Claude GEMINI_API_KEY_1Google Gemini MISTRAL_API_KEYMistral OLLAMA_URLOllama (default: http://localhost:11434)
For load balancing, add multiple keys with _1, _2, _3 suffixes (for example OPENAI_API_KEY_1, OPENAI_API_KEY_2). Works with OpenAI, Anthropic, and Gemini.
In Docker, use OLLAMA_URL=http://host.docker.internal:11434 when Ollama runs on the host, not in the compose network.
Variable Description AZURE_OPENAI_API_KEYAzure OpenAI API key AZURE_OPENAI_ENDPOINTAzure OpenAI endpoint URL AZURE_OPENAI_API_VERSIONAPI version (e.g., 2024-02-15-preview)
Variable Description VLLM_BASE_URLvLLM server URL (e.g., http://localhost:8000/v1) VLLM_API_KEYOptional bearer token for vLLM
Variable Description GOOGLE_CLIENT_IDGoogle OAuth client ID GOOGLE_CLIENT_SECRETGoogle OAuth client secret GITHUB_CLIENT_IDGitHub OAuth client ID GITHUB_CLIENT_SECRETGitHub OAuth client secret
Variable Description API_ENCRYPTION_KEYEncrypts stored API keys (32 hex chars): openssl rand -hex 32 COPILOT_API_KEYSet only if the delivery uses a separate copilot key ADMIN_API_KEYAdmin API key for GitOps-style operations RESEND_API_KEYEmail service for notifications ALLOWED_LOGIN_DOMAINSRestrict signups to domains (comma-separated) ALLOWED_LOGIN_EMAILSRestrict signups to specific emails (comma-separated) DISABLE_REGISTRATIONSet to true to disable new user signups
DATABASE_URL = postgresql://postgres:postgres@db:5432/pailot BETTER_AUTH_SECRET =< from delivery > BETTER_AUTH_URL = https://pailot.yourdomain.com ENCRYPTION_KEY =< from delivery > INTERNAL_API_SECRET =< from delivery > NEXT_PUBLIC_APP_URL = https://pailot.yourdomain.com NEXT_PUBLIC_SOCKET_URL = https://pailot.yourdomain.com The complete template ships with the contour. Ask the vendor before adding a variable that is not in that file.
