diff --git a/docs/self-hosting/configuration/envars.mdx b/docs/self-hosting/configuration/envars.mdx
index b63c58d3a..1c78a05ea 100644
--- a/docs/self-hosting/configuration/envars.mdx
+++ b/docs/self-hosting/configuration/envars.mdx
@@ -32,14 +32,16 @@ Used to configure platform-specific security and operational settings
Specifies the network interface Infisical will bind to when accepting incoming connections.
- By default, Infisical binds to `localhost`, which restricts access to connections from the same machine.
+By default, Infisical binds to `localhost`, which restricts access to connections from the same machine.
- To make the application accessible externally (e.g., for self-hosted deployments), set this to `0.0.0.0`, which tells the server to listen on all network interfaces.
+To make the application accessible externally (e.g., for self-hosted deployments), set this to `0.0.0.0`, which tells the server to listen on all network interfaces.
+
+Example values:
+
+- `localhost` (default, same as `127.0.0.1`)
+- `0.0.0.0` (all interfaces, accessible externally)
+- `192.168.1.100` (specific interface IP)
- Example values:
- - `localhost` (default, same as `127.0.0.1`)
- - `0.0.0.0` (all interfaces, accessible externally)
- - `192.168.1.100` (specific interface IP)
@@ -86,8 +88,9 @@ The platform utilizes Postgres to persist all of its data and Redis for caching
### PostgreSQL
- Please note that the database user you create must be granted all privileges on the Infisical database.
- This includes the ability to create new schemas, create, update, delete, modify tables and indexes, etc.
+ Please note that the database user you create must be granted all privileges
+ on the Infisical database. This includes the ability to create new schemas,
+ create, update, delete, modify tables and indexes, etc.
@@ -95,9 +98,8 @@ The platform utilizes Postgres to persist all of its data and Redis for caching
- Configure the SSL certificate for securing a Postgres connection by first encoding it in base64.
- Use the command below to encode your certificate:
- `echo "" | base64`
+ Configure the SSL certificate for securing a Postgres connection by first
+ encoding it in base64. Use the command below to encode your certificate:
@@ -122,9 +124,42 @@ DB_READ_REPLICAS=[{"DB_CONNECTION_URI":""}]
### Redis
-
- Redis connection string.
-
+Redis is required for smooth operation of Infisical.
+
+
+
+
+ Redis connection string.
+
+
+
+
+ Comma-separated list of Sentinel host:port pairs. ```
+ 192.168.65.254:26379,192.168.65.254:26380 ```
+
+
+ The name of the Redis master set monitored by Sentinel
+
+
+ Whether to use TLS/SSL for Redis Sentinel connection
+
+
+ Authentication username for Redis Sentinel
+
+
+ Authentication password for Redis Sentinel
+
+
+
## Email Service
@@ -222,7 +257,7 @@ SMTP_FROM_NAME=Infisical
This will be used to verify the email you are sending from.
- If you AWS SES is under sandbox mode, you will only be able to send emails to verified identies.
+ If you AWS SES is under sandbox mode, you will only be able to send emails to verified identies.
@@ -388,9 +423,9 @@ SMTP_FROM_NAME=Infisical
-
+
1. Create an account and configure [SMTP2Go](https://www.smtp2go.com/) to send emails.
-2. Turn on SMTP authentication
+2. Turn on SMTP authentication
```
SMTP_HOST=mail.smtp2go.com
SMTP_PORT=You can use one of the following ports: 2525, 80, 25, 8025, or 587
@@ -401,7 +436,7 @@ SMTP_FROM_NAME=Infisical
```
{" "}
-
+
Optional (for TLS/SSL):
TLS: Available on the same ports (2525, 80, 25, 8025, or 587)
@@ -632,13 +667,27 @@ To help you sync secrets from Infisical to services such as Github and Gitlab, I
The App ID of your GitHub App.
-
- The slug of your GitHub App.
-
+{" "}
-
- A private key for your GitHub App.
-
+
+ The slug of your GitHub App.
+
+
+{" "}
+
+
+ A private key for your GitHub App.
+
The webhook secret of your GitHub App.