diff --git a/docs/self-hosting/configuration/envars.mdx b/docs/self-hosting/configuration/envars.mdx index 103c6400e..7d1acb0c5 100644 --- a/docs/self-hosting/configuration/envars.mdx +++ b/docs/self-hosting/configuration/envars.mdx @@ -34,8 +34,14 @@ Used to configure platform-specific security and operational settings this to `false`. - - Determines whether App Connections and Dynamic Secrets are permitted to connect with internal/private IP addresses. + + Determines whether App Connections and Dynamic Secrets are permitted to + connect with internal/private IP addresses. ## CORS @@ -45,24 +51,32 @@ The following environment variables can be used to configure the Infisical Rest - Specify a list of origins that are allowed to access the Infisical API. +Specify a list of origins that are allowed to access the Infisical API. - An example value would be `CORS_ALLOWED_ORIGINS=["https://example.com"]`. +An example value would be `CORS_ALLOWED_ORIGINS=["https://example.com"]`. + +Defaults to the same value as your `SITE_URL` environment variable. - Defaults to the same value as your `SITE_URL` environment variable. Array of HTTP methods allowed for CORS requests. - Defaults to reflecting the headers specified in the request's Access-Control-Request-Headers header. - +Defaults to reflecting the headers specified in the request's Access-Control-Request-Headers header. + ## Data Layer The platform utilizes Postgres to persist all of its data and Redis for caching and backgroud tasks +### PostgresSQL + + + The Database user must have **CREATE** privilege to allow database schema + creation. + + Postgres database connection string. @@ -73,10 +87,6 @@ The platform utilizes Postgres to persist all of its data and Redis for caching `echo "" | base64` - - Redis connection string. - - Postgres database read replica connection strings. It accepts a JSON string. ``` @@ -97,6 +107,12 @@ DB_READ_REPLICAS=[{"DB_CONNECTION_URI":""}] +### Redis + + + Redis connection string. + + ## Email Service Without email configuration, Infisical's core functions like sign-up/login and secret operations work, but this disables multi-factor authentication, email invites for projects, alerts for suspicious logins, and all other email-dependent features. @@ -455,6 +471,7 @@ You can configure third-party app connections for re-use across Infisical Projec The AWS IAM User secret key for assuming roles + @@ -477,6 +494,7 @@ You can configure third-party app connections for re-use across Infisical Projec The private key for the GitHub App + @@ -487,6 +505,7 @@ You can configure third-party app connections for re-use across Infisical Projec The OAuth2 client secret for GitHub OAuth Connection + ## Native Secret Integrations