Configuration
Environment files
- Root:
.env - Backend:
backend/.env - Frontend:
frontend/.env
Core runtime config
Backend
Important vars (backend/config.js):
PORT(default4000)JWT_SECRETJWT_EXPIRES_IN(default30d)APP_URLFRONTEND_ORIGINDATA_DIR,UPLOADS_DIR,SQLITE_PATHOUTBOX_WORKER_*(polling, retries, alerts)EXTENSIONS_DIR,EXTENSIONS_OVERRIDES_FILE
Frontend
VITE_API_URL(defaulthttp://localhost:4000)
In-app configuration (/admin)
- Allowed login domains.
- Developer emails.
- App name, URL, logo.
- Mail provider:
smtporses.
Security-sensitive settings
Treat these as secrets:
smtp_passses_access_key_idses_secret_access_keyses_session_token
The API masks these values in responses.