--- title: "All environment variables" description: "Configure your environment variables when self-hosting Infisical." --- ## Backend environment variables Depending on your choosen self hosted deployment method, you may need to configured at least the required environment variable listed below. Other environment variables are listed below to increase the functionality of your self hosted instance based on your use case. Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` *TLS based connection string is not yet supported When email service is not configured, Infisical will have limited functionality Hostname to connect to for establishing SMTP connections Credential to connect to host (e.g. team@infisical.com) Credential to connect to host Port to connect to for establishing SMTP connections If true, use TLS when connecting to host. If false, TLS will be used if STARTTLS is supported Email address to be used for sending emails Name label to be used in From field (e.g. Team) To sync secret to third party services, provide value for the related services OAuth2 client ID for Heroku integration OAuth2 client secret for Heroku integration OAuth2 client ID for Vercel integration OAuth2 client secret for Vercel integration OAuth2 client ID for Netlify integration OAuth2 client secret for Netlify integration OAuth2 client ID for GitHub integration OAuth2 client secret for GitHub integration OAuth2 slug for Vercel integration OAuth2 client ID for BitBucket integration OAuth2 client secret for BitBucket integration To integrate with external auth providers, provide value for the related keys Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` OAuth2 client ID for Google auth integration OAuth2 client secret for Google auth integration #### JWT JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span #### Error logging Infisical uses Sentry to report error logs #### Settings Only allow users who are invited to sign up Site URL - should be an absolute URL including the protocol (e.g. https://app.infisical.com) ## Frontend environment variables