Environment Variables

Environment variables for the CORE webapp container.

Name	Required	Default	Description
Version
`VERSION`	No	0.1.12	CORE version identifier
Secrets
`SESSION_SECRET`	Yes	none	Session encryption secret. Run: `openssl rand -hex 16`
`MAGIC_LINK_SECRET`	Yes	none	Magic link encryption secret. Run: `openssl rand -hex 16`
`ENCRYPTION_KEY`	Yes	none	Data encryption key. Run: `openssl rand -hex 16`
Application & Domains
`REMIX_APP_PORT`	No	3033	Application port number
`APP_ENV`	No	production	Application environment (development, production)
`NODE_ENV`	No	production	Node.js environment
`APP_ORIGIN`	Yes	http://localhost:3033	Application origin URL
`LOGIN_ORIGIN`	Yes	http://localhost:3033	Login origin URL (usually same as APP_ORIGIN)
`API_BASE_URL`	No	`APP_ORIGIN`	API base URL
Database - PostgreSQL
`DB_HOST`	No	localhost	Database host (use container name for Docker)
`DB_PORT`	No	5432	Database port
`POSTGRES_USER`	Yes	docker	PostgreSQL username
`POSTGRES_PASSWORD`	Yes	docker	PostgreSQL password
`POSTGRES_DB`	Yes	core	PostgreSQL database name
`DATABASE_URL`	Yes	postgresql://docker:docker@postgres:5432/core?schema=core	PostgreSQL connection string
`DIRECT_URL`	Yes	`DATABASE_URL`	Direct DB connection string for migrations
Database - Neo4j (Memory Graph)
`NEO4J_URI`	Yes	bolt://neo4j:7687	Neo4j connection URI
`NEO4J_USERNAME`	Yes	neo4j	Neo4j username
`NEO4J_PASSWORD`	Yes	none	Neo4j password. Run: `openssl rand -hex 16`
`NEO4J_AUTH`	Yes	neo4j/password	Neo4j authentication (username/password format)
Redis
`REDIS_HOST`	Yes	redis	Redis host (use container name for Docker)
`REDIS_PORT`	Yes	6379	Redis port
`REDIS_TLS_DISABLED`	No	true	Disable Redis TLS for local development
Authentication
`ENABLE_EMAIL_LOGIN`	No	true	Enable email-based authentication
`AUTH_GOOGLE_CLIENT_ID`	No	none	Google OAuth client ID
`AUTH_GOOGLE_CLIENT_SECRET`	No	none	Google OAuth client secret
AI Providers
`OPENAI_API_KEY`	No	none	OpenAI API key. Required for OpenAI; for many OpenAI-compatible proxies any non-empty value works
`OPENAI_BASE_URL`	No	none	OpenAI-compatible API base URL (e.g. proxy endpoint)
`OPENAI_API_MODE`	No	responses	OpenAI API mode: `responses` (default) or `chat_completions` (common for proxies)
`GOOGLE_GENERATIVE_AI_API_KEY`	No	none	Google AI API key (required when CHAT_PROVIDER=google or EMBEDDINGS_PROVIDER=google)
`ANTHROPIC_API_KEY`	No	none	Anthropic API key (required when CHAT_PROVIDER=anthropic)
`MODEL`	No	gpt-4-turbo-2024-04-09	Default chat model
`CHAT_PROVIDER`	No	openai	Chat provider: `openai` (default), `anthropic`, `google`, or `ollama`
`EMBEDDINGS_PROVIDER`	No	openai	Embeddings provider: `openai` (default), `google`, or `ollama`. See Embedding Models
`EMBEDDING_MODEL`	No	text-embedding-3-small	Model for text embeddings
`EMBEDDING_MODEL_SIZE`	No	1536	Embedding dimension (must match pgvector schema/index dimension)
`OLLAMA_URL`	No	http://ollama:11434	Ollama server URL for local models
Background Jobs
`QUEUE_PROVIDER`	No	trigger	Queue provider: “trigger” for Trigger.dev or “bullmq” for BullMQ (Redis-based)
`TRIGGER_PROJECT_ID`	Conditional	none	Trigger.dev project identifier (required only when QUEUE_PROVIDER=trigger)
`TRIGGER_SECRET_KEY`	Conditional	none	Trigger.dev authentication secret (required only when QUEUE_PROVIDER=trigger)
`TRIGGER_API_URL`	Conditional	http://host.docker.internal:8030	Trigger.dev API endpoint (required only when QUEUE_PROVIDER=trigger)
`TRIGGER_DB`	No	trigger	Database name for Trigger.dev
Telemetry
`POSTHOG_PROJECT_KEY`	No	phc_SwfGIzzX5gh5bazVWoRxZTBhkr7FwvzArS0NRyGXm1a	PostHog project key for usage analytics
`TELEMETRY_ENABLED`	No	true	Enable (true) or disable (false) telemetry collection
`TELEMETRY_ANONYMOUS`	No	false	Send anonymous telemetry (true) or include user email (false)
Provider Configuration
`GRAPH_PROVIDER`	No	neo4j	Graph database provider: “neo4j”, “falkordb”, or “helix”
`VECTOR_PROVIDER`	No	pgvector	Vector store provider: “pgvector”, “turbopuffer”, or “qdrant”
`MODEL_PROVIDER`	No	vercel-ai	Model provider abstraction layer
Reranking
`RERANK_PROVIDER`	No	none	Reranking provider: “cohere”, “ollama”, or “none”
`COHERE_API_KEY`	No	none	Cohere API key (required when RERANK_PROVIDER=cohere)
`COHERE_RERANK_MODEL`	No	rerank-english-v3.0	Cohere reranking model
`COHERE_SCORE_THRESHOLD`	No	0.3	Minimum score threshold for Cohere reranking
`OLLAMA_RERANK_MODEL`	No	dengcao/Qwen3-Reranker-8B:Q4_K_M	Ollama reranking model
`OLLAMA_SCORE_THRESHOLD`	No	0.3	Minimum score threshold for Ollama reranking
Email / SMTP
`EMAIL_TRANSPORT`	No	none	Email transport: “smtp” or “resend”
`FROM_EMAIL`	No	none	Sender email address
`REPLY_TO_EMAIL`	No	none	Reply-to email address
`RESEND_API_KEY`	No	none	Resend API key (required when EMAIL_TRANSPORT=resend)
`RESEND_WEBHOOK_SECRET`	No	none	Resend webhook signing secret
`SMTP_HOST`	No	none	SMTP server hostname
`SMTP_PORT`	No	none	SMTP server port
`SMTP_SECURE`	No	none	Use TLS for SMTP (true/false)
`SMTP_USER`	No	none	SMTP authentication username
`SMTP_PASSWORD`	No	none	SMTP authentication password
Channels
`SLACK_SIGNING_SECRET`	No	none	Slack app signing secret for webhook verification
`TWILIO_ACCOUNT_SID`	No	none	Twilio account SID (required for WhatsApp channel)
`TWILIO_AUTH_TOKEN`	No	none	Twilio auth token (required for WhatsApp channel)
`TWILIO_WHATSAPP_NUMBER`	No	none	Twilio WhatsApp number (e.g. whatsapp:+14155238886)
Other
`EXA_API_KEY`	No	none	Exa API key for web search capabilities

Security Considerations

Required Secrets

These secrets must be generated and kept secure:

# Generate secure random secrets
openssl rand -hex 16  # For SESSION_SECRET
openssl rand -hex 16  # For MAGIC_LINK_SECRET  
openssl rand -hex 16  # For ENCRYPTION_KEY
openssl rand -hex 16  # For NEO4J_PASSWORD

Production Recommendations

Change all default passwords before deploying to production
Use environment-specific secrets - never reuse secrets across environments
Store secrets securely - use a secrets manager in production
Enable TLS for all database connections in production
Restrict CORS origins to your actual domains
Use strong authentication - configure OAuth providers for production use

Docker Compose Networks

When using Docker Compose, service names are used as hostnames:

postgres for PostgreSQL
neo4j for Neo4j
redis for Redis
ollama for Ollama (if using local models)

For external services (like Trigger.dev), use host.docker.internal to access services running on the host machine.

Get Started

Configuration

Channels

Remote Sessions

Build Integrations

Migration

Local Development

Security Considerations

Required Secrets

Production Recommendations

Docker Compose Networks

​Security Considerations

​Required Secrets

​Production Recommendations

​Docker Compose Networks

Security Considerations

Required Secrets

Production Recommendations

Docker Compose Networks