diff --git a/docs/self-hosting/configuration/envars.mdx b/docs/self-hosting/configuration/envars.mdx
index 103c6400e..7d1acb0c5 100644
--- a/docs/self-hosting/configuration/envars.mdx
+++ b/docs/self-hosting/configuration/envars.mdx
@@ -34,8 +34,14 @@ Used to configure platform-specific security and operational settings
this to `false`.
-
- Determines whether App Connections and Dynamic Secrets are permitted to connect with internal/private IP addresses.
+
+ Determines whether App Connections and Dynamic Secrets are permitted to
+ connect with internal/private IP addresses.
## CORS
@@ -45,24 +51,32 @@ The following environment variables can be used to configure the Infisical Rest
- Specify a list of origins that are allowed to access the Infisical API.
+Specify a list of origins that are allowed to access the Infisical API.
- An example value would be `CORS_ALLOWED_ORIGINS=["https://example.com"]`.
+An example value would be `CORS_ALLOWED_ORIGINS=["https://example.com"]`.
+
+Defaults to the same value as your `SITE_URL` environment variable.
- Defaults to the same value as your `SITE_URL` environment variable.
Array of HTTP methods allowed for CORS requests.
- Defaults to reflecting the headers specified in the request's Access-Control-Request-Headers header.
-
+Defaults to reflecting the headers specified in the request's Access-Control-Request-Headers header.
+
## Data Layer
The platform utilizes Postgres to persist all of its data and Redis for caching and backgroud tasks
+### PostgresSQL
+
+
+ The Database user must have **CREATE** privilege to allow database schema
+ creation.
+
+
Postgres database connection string.
@@ -73,10 +87,6 @@ The platform utilizes Postgres to persist all of its data and Redis for caching
`echo "" | base64`
-
- Redis connection string.
-
-
Postgres database read replica connection strings. It accepts a JSON string.
```
@@ -97,6 +107,12 @@ DB_READ_REPLICAS=[{"DB_CONNECTION_URI":""}]
+### Redis
+
+
+ Redis connection string.
+
+
## Email Service
Without email configuration, Infisical's core functions like sign-up/login and secret operations work, but this disables multi-factor authentication, email invites for projects, alerts for suspicious logins, and all other email-dependent features.
@@ -455,6 +471,7 @@ You can configure third-party app connections for re-use across Infisical Projec
The AWS IAM User secret key for assuming roles
+
@@ -477,6 +494,7 @@ You can configure third-party app connections for re-use across Infisical Projec
The private key for the GitHub App
+
@@ -487,6 +505,7 @@ You can configure third-party app connections for re-use across Infisical Projec
The OAuth2 client secret for GitHub OAuth Connection
+
## Native Secret Integrations