webapp.mdx

title	Webapp
description	Environment variables for the webapp container.
sidebarTitle	Webapp
mode	wide

Name	Required	Default	Description
Secrets
SESSION_SECRET	Yes	—	Session encryption secret. Run: openssl rand -hex 16
MAGIC_LINK_SECRET	Yes	—	Magic link encryption secret. Run: openssl rand -hex 16
ENCRYPTION_KEY	Yes	—	Secret store encryption key. Run: openssl rand -hex 16
MANAGED_WORKER_SECRET	No	managed-secret	Managed worker secret. Should be changed and match supervisor.
Domains & ports
REMIX_APP_PORT	No	3030	Remix app port.
APP_ORIGIN	Yes	http://localhost:3030	App origin URL.
LOGIN_ORIGIN	Yes	http://localhost:3030	Login origin URL. Most likely the same as APP_ORIGIN.
API_ORIGIN	No	APP_ORIGIN	API origin URL.
STREAM_ORIGIN	No	APP_ORIGIN	Realtime stream origin URL.
ELECTRIC_ORIGIN	No	http://localhost:3060	Electric origin URL.
Postgres
DATABASE_URL	Yes	—	PostgreSQL connection string.
DIRECT_URL	Yes	—	Direct DB connection string used for migrations etc.
DATABASE_CONNECTION_LIMIT	No	10	Max DB connections.
DATABASE_POOL_TIMEOUT	No	60	DB pool timeout (s).
DATABASE_CONNECTION_TIMEOUT	No	20	DB connect timeout (s).
DATABASE_READ_REPLICA_URL	No	DATABASE_URL	Read-replica DB string.
Redis
REDIS_HOST	Yes	—	Redis host.
REDIS_PORT	Yes	—	Redis port.
REDIS_READER_HOST	No	REDIS_HOST	Redis reader host.
REDIS_READER_PORT	No	REDIS_PORT	Redis reader port.
REDIS_USERNAME	No	—	Redis username.
REDIS_PASSWORD	No	—	Redis password.
REDIS_TLS_DISABLED	No	—	Disable Redis TLS.
Auth
WHITELISTED_EMAILS	No	—	Whitelisted emails regex.
LOGIN_RATE_LIMITS_ENABLED	No	true	Enable rate limiting on magic-link login.
AUTH_GITHUB_CLIENT_ID	No	—	GitHub client ID.
AUTH_GITHUB_CLIENT_SECRET	No	—	GitHub client secret.
Email
EMAIL_TRANSPORT	No	—	Email transport type. One of resend, smtp, aws-ses.
FROM_EMAIL	No	—	From email address.
REPLY_TO_EMAIL	No	—	Reply-to email address.
RESEND_API_KEY	No	—	Resend API key.
SMTP_HOST	No	—	SMTP host.
SMTP_PORT	No	—	SMTP port.
SMTP_SECURE	No	—	SMTP secure flag.
SMTP_USER	No	—	SMTP user.
SMTP_PASSWORD	No	—	SMTP password.
AWS_REGION	No	—	AWS region for SES.
AWS_ACCESS_KEY_ID	No	—	AWS access key ID for SES.
AWS_SECRET_ACCESS_KEY	No	—	AWS secret access key for SES.
Graphile & Redis worker
WORKER_CONCURRENCY	No	10	Redis worker concurrency.
WORKER_POLL_INTERVAL	No	1000	Redis worker poll interval (ms).
WORKER_SCHEMA	No	graphile_worker	Graphile worker schema.
GRACEFUL_SHUTDOWN_TIMEOUT	No	60000 (1m)	Graphile graceful shutdown timeout (ms). Affects shutdown time.
Concurrency limits
DEFAULT_ENV_EXECUTION_CONCURRENCY_LIMIT	No	100	Default env execution concurrency.
DEFAULT_ORG_EXECUTION_CONCURRENCY_LIMIT	No	300	Default org execution concurrency, needs to be 3x env concurrency.
DEFAULT_ENV_EXECUTION_CONCURRENCY_BURST_FACTOR	No	1.0	Burst factor for env concurrency.
DEFAULT_DEV_ENV_EXECUTION_ATTEMPTS	No	1	Default max attempts for dev environment runs.
Dev
DEV_MAX_CONCURRENT_RUNS	No	25	Sets the max concurrency for dev runs via the CLI.
DEV_OTEL_EXPORTER_OTLP_ENDPOINT	No	APP_ORIGIN/otel	OTel endpoint for dev runs.
Rate limiting
API_RATE_LIMIT_REFILL_INTERVAL	No	10s	API rate limit refill interval.
API_RATE_LIMIT_MAX	No	750	API rate limit max.
API_RATE_LIMIT_REFILL_RATE	No	250	API rate limit refill rate.
API_RATE_LIMIT_REQUEST_LOGS_ENABLED	No	0	API rate limit request logs.
API_RATE_LIMIT_REJECTION_LOGS_ENABLED	No	1	API rate limit rejection logs.
API_RATE_LIMIT_LIMITER_LOGS_ENABLED	No	0	API rate limit limiter logs.
API_RATE_LIMIT_JWT_WINDOW	No	1m	API rate limit JWT window.
API_RATE_LIMIT_JWT_TOKENS	No	60	API rate limit JWT tokens.
Deploy & Registry
DEPLOY_REGISTRY_HOST	Yes	—	Deploy registry host.
DEPLOY_REGISTRY_USERNAME	No	—	Deploy registry username.
DEPLOY_REGISTRY_PASSWORD	No	—	Deploy registry password.
DEPLOY_REGISTRY_NAMESPACE	No	trigger	Deploy registry namespace.
DEPLOY_IMAGE_PLATFORM	No	linux/amd64	Deploy image platform, same values as docker --platform flag.
DEPLOY_TIMEOUT_MS	No	480000 (8m)	Deploy timeout (ms).
DEPLOY_QUEUE_TIMEOUT_MS	No	900000 (15m)	Deploy queue timeout (ms).
Object store (S3)
OBJECT_STORE_BASE_URL	No	—	Object store base URL (default provider).
OBJECT_STORE_BUCKET	No	—	Object store bucket name (default provider).
OBJECT_STORE_ACCESS_KEY_ID	No	—	Object store access key (default provider).
OBJECT_STORE_SECRET_ACCESS_KEY	No	—	Object store secret key (default provider).
OBJECT_STORE_REGION	No	—	Object store region (default provider).
OBJECT_STORE_SERVICE	No	s3	Object store service (default provider).
OBJECT_STORE_DEFAULT_PROTOCOL	No	—	Protocol for new uploads (e.g. s3, r2). Enables protocol-prefixed storage. See migration guide below.
OBJECT_STORE_{PROTOCOL}_BASE_URL	No	—	Named provider base URL (replace {PROTOCOL}, e.g. OBJECT_STORE_S3_BASE_URL).
OBJECT_STORE_{PROTOCOL}_ACCESS_KEY_ID	No	—	Named provider access key.
OBJECT_STORE_{PROTOCOL}_SECRET_ACCESS_KEY	No	—	Named provider secret key.
OBJECT_STORE_{PROTOCOL}_REGION	No	—	Named provider region.
OBJECT_STORE_{PROTOCOL}_SERVICE	No	—	Named provider service.
ARTIFACTS_OBJECT_STORE_BUCKET	No	—	Optional separate bucket for artifacts. If not set, uses main object store.
ARTIFACTS_OBJECT_STORE_BASE_URL	No	—	Optional artifacts store base URL.
ARTIFACTS_OBJECT_STORE_ACCESS_KEY_ID	No	—	Optional artifacts store access key.
ARTIFACTS_OBJECT_STORE_SECRET_ACCESS_KEY	No	—	Optional artifacts store secret key.
ARTIFACTS_OBJECT_STORE_REGION	No	—	Optional artifacts store region.
Alerts
ORG_SLACK_INTEGRATION_CLIENT_ID	No	—	Slack client ID. Required for Slack alerts.
ORG_SLACK_INTEGRATION_CLIENT_SECRET	No	—	Slack client secret. Required for Slack alerts.
ALERT_EMAIL_TRANSPORT	No	—	Alert email transport.
ALERT_FROM_EMAIL	No	—	Alert from email.
ALERT_REPLY_TO_EMAIL	No	—	Alert reply-to email.
ALERT_RESEND_API_KEY	No	—	Alert Resend API key.
ALERT_SMTP_HOST	No	—	Alert SMTP host.
ALERT_SMTP_PORT	No	—	Alert SMTP port.
ALERT_SMTP_SECURE	No	—	Alert SMTP secure.
ALERT_SMTP_USER	No	—	Alert SMTP user.
ALERT_SMTP_PASSWORD	No	—	Alert SMTP password.
Limits
TASK_PAYLOAD_OFFLOAD_THRESHOLD	No	524288 (512KB)	Max task payload size before offloading to S3.
TASK_PAYLOAD_MAXIMUM_SIZE	No	3145728 (3MB)	Max task payload size.
BATCH_TASK_PAYLOAD_MAXIMUM_SIZE	No	1000000 (1MB)	Max batch payload size.
BATCH_CONCURRENCY_LIMIT_DEFAULT	No	5	Default concurrency for batch processing.
BATCH_RATE_LIMIT_REFILL_RATE	No	100	Batch rate limit refill rate.
BATCH_RATE_LIMIT_MAX	No	1200	Batch rate limit max.
BATCH_RATE_LIMIT_REFILL_INTERVAL	No	10s	Batch rate limit refill interval.
TASK_RUN_METADATA_MAXIMUM_SIZE	No	262144 (256KB)	Max metadata size.
MAX_BATCH_V2_TRIGGER_ITEMS	No	500	Max batch size (legacy v2 API).
STREAMING_BATCH_MAX_ITEMS	No	1000	Max items in streaming batch (v3 API, requires SDK 4.3.1+).
STREAMING_BATCH_ITEM_MAXIMUM_SIZE	No	3145728 (3MB)	Max size per item in streaming batch.
OTel limits
TRIGGER_OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT	No	1024	OTel span attribute count limit.
TRIGGER_OTEL_LOG_ATTRIBUTE_COUNT_LIMIT	No	1024	OTel log attribute count limit.
TRIGGER_OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT	No	131072	OTel span attribute value length limit.
TRIGGER_OTEL_LOG_ATTRIBUTE_VALUE_LENGTH_LIMIT	No	131072	OTel log attribute value length limit.
TRIGGER_OTEL_SPAN_EVENT_COUNT_LIMIT	No	10	OTel span event count limit.
TRIGGER_OTEL_LINK_COUNT_LIMIT	No	2	OTel link count limit.
TRIGGER_OTEL_ATTRIBUTE_PER_LINK_COUNT_LIMIT	No	10	OTel attribute per link count limit.
TRIGGER_OTEL_ATTRIBUTE_PER_EVENT_COUNT_LIMIT	No	10	OTel attribute per event count limit.
SERVER_OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT	No	8192	OTel span attribute value length limit.
Realtime
REALTIME_STREAM_VERSION	No	v1	Realtime stream protocol version. One of v1, v2.
REALTIME_STREAM_MAX_LENGTH	No	1000	Realtime stream max length.
REALTIME_STREAM_TTL	No	86400 (1d)	Realtime stream TTL (s).
Bootstrap
TRIGGER_BOOTSTRAP_ENABLED	No	0	Trigger bootstrap enabled.
TRIGGER_BOOTSTRAP_WORKER_GROUP_NAME	No	—	Trigger bootstrap worker group name.
TRIGGER_BOOTSTRAP_WORKER_TOKEN_PATH	No	—	Trigger bootstrap worker token path.
Run engine
RUN_ENGINE_WORKER_COUNT	No	4	Run engine worker count.
RUN_ENGINE_TASKS_PER_WORKER	No	10	Run engine tasks per worker.
RUN_ENGINE_WORKER_CONCURRENCY_LIMIT	No	10	Run engine worker concurrency limit.
RUN_ENGINE_WORKER_POLL_INTERVAL	No	100	Run engine worker poll interval (ms).
RUN_ENGINE_WORKER_IMMEDIATE_POLL_INTERVAL	No	100	Run engine worker immediate poll interval (ms).
RUN_ENGINE_WORKER_SHUTDOWN_TIMEOUT_MS	No	60000 (1m)	Run engine worker shutdown timeout (ms).
RUN_ENGINE_RATE_LIMIT_REFILL_INTERVAL	No	10s	Run engine rate limit refill interval.
RUN_ENGINE_RATE_LIMIT_MAX	No	1200	Run engine rate limit max.
RUN_ENGINE_RATE_LIMIT_REFILL_RATE	No	400	Run engine rate limit refill rate.
RUN_ENGINE_RATE_LIMIT_REQUEST_LOGS_ENABLED	No	0	Run engine rate limit request logs.
RUN_ENGINE_RATE_LIMIT_REJECTION_LOGS_ENABLED	No	1	Run engine rate limit rejection logs.
RUN_ENGINE_RATE_LIMIT_LIMITER_LOGS_ENABLED	No	0	Run engine rate limit limiter logs.
RUN_ENGINE_DEFAULT_MAX_TTL	No	—	Maximum TTL for all runs (e.g. "14d"). Runs without a TTL use this as default; runs with a larger TTL are clamped.
MAXIMUM_DEV_QUEUE_SIZE	No	—	Maximum queued runs per queue in development environments.
MAXIMUM_DEPLOYED_QUEUE_SIZE	No	—	Maximum queued runs per queue in deployed (staging/prod) environments.
Misc
PROVIDER_SECRET	No	provider-secret	Secret for provider auth. Must be set to a secure value in self-hosted/production; the default is insecure.
COORDINATOR_SECRET	No	coordinator-secret	Secret for coordinator auth. Must be set to a secure value in self-hosted/production; the default is insecure.
TRIGGER_TELEMETRY_DISABLED	No	—	Disable telemetry.
NODE_MAX_OLD_SPACE_SIZE	No	8192	Maximum memory allocation for Node.js heap in MiB (e.g. "4096" for 4GB).
OPENAI_API_KEY	No	—	OpenAI API key.
MACHINE_PRESETS_OVERRIDE_PATH	No	—	Path to machine presets override file. See machine overrides.
APP_ENV	No	NODE_ENV	App environment. Used for things like the title tag.
ADMIN_EMAILS	No	—	Regex of user emails to automatically promote to admin on signup. Does not apply to existing users.
EVENT_LOOP_MONITOR_ENABLED	No	1	Node.js event loop lag monitor.

Multi-Provider Object Storage

The object storage system supports multiple S3-compatible providers (R2, S3, GCS, MinIO, etc.) using protocol prefixes. This enables migrating between providers without breaking existing runs.

How It Works

When data exceeds the configured threshold (TASK_PAYLOAD_OFFLOAD_THRESHOLD), it's uploaded to object storage. The storage location is saved in the database with an optional protocol prefix:

• With protocol: s3://run_abc/payload.json or r2://batch_123/item_0/payload.json
• Without protocol (legacy): batch_123/item_0/payload.json (uses default provider)

Configuration

Default Provider (Backward Compatible)

The default provider is used for data without a protocol prefix:

# Default provider (backward compatible - no protocol prefix)
OBJECT_STORE_BASE_URL=https://r2.example.com
OBJECT_STORE_ACCESS_KEY_ID=...
OBJECT_STORE_SECRET_ACCESS_KEY=...
OBJECT_STORE_REGION=auto
OBJECT_STORE_SERVICE=s3

Named Providers

Named providers are accessed via protocol-prefixed URIs. Configure them using OBJECT_STORE_{PROTOCOL}_* variables:

# S3 provider (accessed via s3:// prefix)
OBJECT_STORE_S3_BASE_URL=https://s3.amazonaws.com
OBJECT_STORE_S3_ACCESS_KEY_ID=...
OBJECT_STORE_S3_SECRET_ACCESS_KEY=...
OBJECT_STORE_S3_REGION=us-east-1
OBJECT_STORE_S3_SERVICE=s3

# R2 provider (accessed via r2:// prefix)
OBJECT_STORE_R2_BASE_URL=https://...r2.cloudflarestorage.com
OBJECT_STORE_R2_ACCESS_KEY_ID=...
OBJECT_STORE_R2_SECRET_ACCESS_KEY=...
OBJECT_STORE_R2_REGION=auto
OBJECT_STORE_R2_SERVICE=s3

Default Protocol for New Uploads

Set OBJECT_STORE_DEFAULT_PROTOCOL to specify which provider to use for new uploads:

# Use S3 for new uploads (old data without prefix still uses default provider)
OBJECT_STORE_DEFAULT_PROTOCOL=s3

Migration Guide

To migrate from R2 to S3 without breaking existing runs:

Add S3 credentials as a named provider:

OBJECT_STORE_S3_BASE_URL=https://s3.amazonaws.com
OBJECT_STORE_S3_ACCESS_KEY_ID=...
OBJECT_STORE_S3_SECRET_ACCESS_KEY=...
OBJECT_STORE_S3_REGION=us-east-1

Keep your existing OBJECT_STORE_* variables (R2) as the default provider.

Restart the webapp and verify both providers work:

• Old runs (no prefix) should still access R2
• New runs with s3:// prefix should use S3

Set the default protocol to use S3 for new uploads:

OBJECT_STORE_DEFAULT_PROTOCOL=s3

After this change:

• New data uses s3:// prefix and goes to S3
• Old data (no prefix) still uses R2
• Data with explicit protocol uses the corresponding provider

Once all active runs using R2 data have completed (check your data retention policies), you can remove the R2 credentials. Keep `OBJECT_STORE_DEFAULT_PROTOCOL=s3` to ensure new data continues using S3.