--- title: "All environment variables" description: "Configure your environment variables when self-hosting Infisical." --- ## Environment variables Depending on your chosen self hosted deployment method, you may need to configured at least the required environment variable listed below. Other environment variables are listed below to increase the functionality of your self hosted instance based on your use case. Must be a random 16 byte hex string. Can be generated with `openssl rand -hex 16` Must be a random 32 byte base64 string. Can be generated with `openssl rand -base64 32` Mongo connection string. *TLS based connection string is not yet supported Redis connection string When email service is not configured, Infisical will have limited functionality Hostname to connect to for establishing SMTP connections Credential to connect to host (e.g. team@infisical.com) Credential to connect to host Port to connect to for establishing SMTP connections If true, use TLS when connecting to host. If false, TLS will be used if STARTTLS is supported Email address to be used for sending emails Name label to be used in From field (e.g. Team) To sync secret to third party services, provide value for the related services OAuth2 client ID for Heroku integration OAuth2 client secret for Heroku integration OAuth2 client ID for Vercel integration OAuth2 client secret for Vercel integration OAuth2 client ID for Netlify integration OAuth2 client secret for Netlify integration OAuth2 client ID for GitHub integration OAuth2 client secret for GitHub integration OAuth2 slug for Vercel integration OAuth2 client ID for BitBucket integration OAuth2 client secret for BitBucket integration To integrate with external auth providers, provide value for the related keys OAuth2 client ID for Google login OAuth2 client secret for Google login OAuth2 client ID for GitHub login OAuth2 client secret for GitHub login OAuth2 client ID for GitLab login OAuth2 client secret for GitLab login URL of your self-hosted instance of GitLab where the OAuth application is registered #### JWT JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span JWT token lifetime expressed in seconds or a string describing a time span #### Logging Infisical uses Sentry to report error logs The minimum log level for application logging; can be one of `trace`, `debug`, `info`, `warn`, `error`, or `fatal`. #### Settings {" "} Only allow users who are invited to sign up Site URL - should be an absolute URL including the protocol (e.g. https://app.infisical.com)