Configuration

All configuration comes from environment variables (or a .env file in backend/). Only DATABASE_URL is required. Everything else has a working default.

Core

Variable	Default	Description
DATABASE_URL	— (required)	Postgres connection URL. Sync-style URLs (postgresql://…) are adapted to asyncpg automatically.
APP_URL	http://localhost:3000	Public URL of the instance; used in emails and links.
LOG_LEVEL	INFO	DEBUG, INFO, WARNING, ERROR, or CRITICAL.
LOG_JSON	false	Emit logs as JSON.

Security

Variable	Default	Description
JWT_SECRET_KEY	random per start	Set this in production, otherwise sessions are invalidated on every restart.
JWT_ACCESS_TOKEN_EXPIRE_MINUTES	4320 (3 days)	Session lifetime.
JWT_COOKIE_SECURE	true	Set false only for plain-HTTP local setups.
SIGNUP_VERIFICATION_TOKEN_EXPIRE_MINUTES	1440	Signup email verification link lifetime.
PASSWORD_RESET_TOKEN_EXPIRE_MINUTES	30	Password reset link lifetime.

Email (optional)

Email sending is disabled unless both SMTP_HOST and SMTP_FROM are set. Without it, signup verification, password reset, and invite emails are not delivered.

Variable	Default	Description
SMTP_HOST	—	SMTP server hostname.
SMTP_PORT	465	SMTP port.
SMTP_USER / SMTP_PASSWORD	—	Credentials, if the server requires them.
SMTP_FROM	—	From address.
SMTP_USE_TLS	true	Use TLS.

Cache (optional)

Variable	Default	Description
CACHE_URL	—	Redis URL (redis://…). When unset, an in-process memory cache is used, which is fine for a single instance. Redis is only needed to coordinate automation rate limits across multiple backend replicas.
CACHE_NAMESPACE	bugfuse	Key prefix.

Event ingestion

Variable	Default	Description
SENTRY_ENVELOPE_MAX_COMPRESSED_BYTES	1048576 (1 MiB)	Max compressed envelope size.
SENTRY_ENVELOPE_MAX_UNCOMPRESSED_BYTES	5242880 (5 MiB)	Max uncompressed envelope size.
SENTRY_TRUST_PROXY_HEADERS	false	Trust X-Forwarded-* headers for client IPs. Enable this behind a reverse proxy.

Artifact storage (optional S3)

Source maps and debug files are stored on the local filesystem by default. Set ARTIFACT_STORAGE_S3_BUCKET to switch to S3 (or any S3-compatible service).

Variable	Default	Description
ARTIFACT_STORAGE_PATH	./data/artifacts	Local storage directory (when S3 is not configured).
ARTIFACT_STORAGE_S3_BUCKET	—	Bucket name; setting it enables S3 storage.
ARTIFACT_STORAGE_S3_REGION	—	Bucket region.
ARTIFACT_STORAGE_S3_ENDPOINT_URL	—	Custom endpoint for S3-compatible services (MinIO, R2, …).
ARTIFACT_STORAGE_S3_ACCESS_KEY_ID / ARTIFACT_STORAGE_S3_SECRET_ACCESS_KEY	—	Credentials (falls back to the default AWS credential chain).
ARTIFACT_STORAGE_S3_PREFIX	""	Key prefix inside the bucket.