Environment Variables
Complete reference of all environment variables
Overview
Environment variables are loaded from .env (production) and .env.local (local overrides, not committed).
Core Configuration
| Variable | Default | Required | Description |
|---|---|---|---|
JWT_SECRET | change-me-in-production | ✅ | JWT signing key (MUST change in production) |
ENCRYPTION_KEY | (falls back to JWT_SECRET) | AES-256-GCM encryption key | |
PORT | 41905 | HTTP server port | |
DATABASE_URL | file:./data/aigcs.db | Database connection URL | |
NODE_ENV | production | Runtime environment | |
ADMIN_URL | http://localhost:5173 | Admin panel URL (for email templates) | |
ALLOWED_ORIGINS | [] | CORS allowed origins (JSON array string) | |
REGISTRATION_OPEN | true | Allow public registration | |
RATE_LIMIT_MAX | 100 | Max requests per window | |
RATE_LIMIT_WINDOW | 60 | Rate limit window in seconds | |
GLOBAL_SYSTEM_PROMPT | — | Global AI system prompt | |
PLUGINS_DIR | (auto-detected) | Override plugins directory path |
SMTP
| Variable | Description |
|---|---|
SMTP_HOST | SMTP server hostname |
SMTP_PORT | SMTP port |
SMTP_USER | SMTP username |
SMTP_PASS | SMTP password |
SMTP_FROM_EMAIL | Sender email address |
SMTP_FROM_NAME | Sender display name |
CAPTCHA
Cloudflare Turnstile
| Variable | Description |
|---|---|
TURNSTILE_SITE_KEY | Turnstile site key |
TURNSTILE_SECRET_KEY | Turnstile secret key |
Google reCAPTCHA
| Variable | Description |
|---|---|
RECAPTCHA_SITE_KEY | reCAPTCHA site key |
RECAPTCHA_SECRET_KEY | reCAPTCHA secret key |
GeeTest
| Variable | Description |
|---|---|
GEETEST_CAPTCHA_ID | GeeTest captcha ID |
GEETEST_CAPTCHA_KEY | GeeTest captcha key |
hCaptcha
| Variable | Description |
|---|---|
HCAPTCHA_SITE_KEY | hCaptcha site key |
HCAPTCHA_SECRET_KEY | hCaptcha secret key |
Altcha
| Variable | Description |
|---|---|
ALTCHA_SITE_KEY | Altcha site key |
ALTCHA_SECRET_KEY | Altcha secret key |
CAP.so
| Variable | Description |
|---|---|
CAP_SITE_KEY | CAP.so site key |
CAP_SECRET_KEY | CAP.so secret key |
CAP_VERIFY_URL | CAP.so verify URL |