Environment variables

Used to validate login session cookies. Genearte one with openssl rand -base64 33.

Relative time from now in seconds when to expire the session.

How often the session should be updated in seconds. If set to 0, session is updated every time.

Lifetime of an OAuth authorization code, in seconds.

Lifetime of an OAuth access token, in seconds.

Lifetime of an OAuth refresh token, in seconds.

URL of your Sourcebot deployment, e.g., https://example.com or http://localhost:3000.

The container relative path to the declarative configuration file. See this doc for more info.

The root data directory in which all data written to disk by Sourcebot will be located.

The directory within the container to store all persistent data. Typically, this directory will be volume mapped such that data is persisted across container restarts (e.g., docker run -v $(pwd):/data)

Connection string of your Postgres database, e.g. postgresql://user:password@host:5432/sourcebot.

If you’d like to use a non-default schema, you can provide it as a parameter in the database url.

You can also use DATABASE_HOST, DATABASE_USERNAME, DATABASE_PASSWORD, DATABASE_NAME, and DATABASE_ARGS to construct the database url.

The email address that transactional emails will be sent from. See this doc for more info.

Connection string of your Redis instance, e.g. redis://host:6379.

To enable TLS, see this doc.

Controls how many completed jobs are allowed to remain in Redis queues

Controls how many failed jobs are allowed to remain in Redis queues

The base sleep duration (in seconds) for exponential backoff when retrying repository sync operations that fail

The timeout duration (in seconds) for GitLab client queries

The url to the SMTP service used for sending transactional emails. See this doc for more info.

You can also use SMTP_HOST, SMTP_PORT, SMTP_USERNAME, and SMTP_PASSWORD to construct the SMTP connection url.

The hostname of the SMTP server. Used to construct SMTP_CONNECTION_URL when individual SMTP variables are provided.

The port of the SMTP server.

The username for SMTP authentication.

The password for SMTP authentication.

Used to encrypt connection secrets and generate API keys. Generate one with openssl rand -base64 24.

Sourcebot’s public key that’s used to verify encrypted license key signatures.

The Sourcebot logging level. Valid values are debug, info, warn, error, in order of severity.

Enables/disable structured JSON logging. See this doc for more info.

Optional file to log to if structured logging is enabled

Enables/disables telemetry collection in Sourcebot. See this doc for more info.

The default maximum number of search results to return when using search in the web app.

A comma separated list of glob patterns matching file paths that should always be indexed, regardless of size or number of trigrams.

Maximum size in bytes of a single image attachment uploaded to Ask Sourcebot. Enforced server-side at upload time.

How long in hours an uploaded-but-unsent attachment is retained before being deleted by the orphan sweep. Set to 0 to disable the sweep.

When enabled, Sourcebot sends the authenticated user’s lower-cased email address to configured language model providers in the X-Sourcebot-User-Email request header. Anonymous requests omit the header.

Enables Node.js to automatically use HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables for network requests. Set to 1 to enable or 0 to disable. See this doc for more info.

HTTP proxy URL for routing non-SSL requests through a proxy server (e.g., http://proxy.company.com:8080). Requires NODE_USE_ENV_PROXY=1.

HTTPS proxy URL for routing SSL requests through a proxy server (e.g., http://proxy.company.com:8080). Requires NODE_USE_ENV_PROXY=1.

Comma-separated list of hostnames or domains that should bypass the proxy (e.g., localhost,127.0.0.1,.internal.domain). Requires NODE_USE_ENV_PROXY=1.

Enables/disables audit logging

The number of days to retain audit logs. Audit log records older than this will be automatically pruned daily. Set to 0 to disable pruning and retain logs indefinitely.

When enabled, allows Sourcebot to automatically register/login from a successful GCP IAP redirect

The GCP IAP audience to use when verifying JWT tokens. Must be set to enable GCP IAP JIT provisioning

Enables permission syncing.

Enables/disables repo-driven permission syncing. Only applies when PERMISSION_SYNC_ENABLED is true.

When enabled, different SSO accounts with the same email address will automatically be linked.

When enabled, only organization owners can create API keys. Non-owner members will receive a 403 error if they attempt to create one.

When enabled, only organization owners can create or use API keys. Non-owner members will receive a 403 error if they attempt to create or authenticate with an API key. If you only want to restrict creation (not usage), use DISABLE_API_KEY_CREATION_FOR_NON_OWNER_USERS instead.

The GitHub App ID used for review agent authentication.

The container relative path to the private key file for the GitHub App used by the review agent.

The webhook secret for the GitHub App used by the review agent.

The OpenAI API key used by the review agent.

The Sourcebot API key used by the review agent.

Enables/disables automatic code reviews by the review agent.

Enables/disables logging for the review agent. Logs are saved in DATA_CACHE_DIR/review-agent

The command used to trigger a code review by the review agent.