Backend Environment Reference
These variables configure the backend services (api, worker, upload). Compose reads them from .env; Helm renders them into a ConfigMap (non-secret) and Secret (secret).
License & mode
| Variable | Default | Notes |
|---|---|---|
RTYLR_LICENSE_KEY | — | Your rtylr license key (provided by Voxire) |
DEPLOYMENT_MODE | self_hosted | |
APP_ENV | production |
Configurable URLs
AUTH_URL, DASH_URL, POS_URL, ERP_URL, HR_URL, CRM_URL, FINANCE_URL, FLOW_URL, INSIGHTS_URL, RECRUIT_URL, MENU_URL, API_URL, UPLOAD_URL.
CORS_ALLOWED_ORIGINS is derived from the frontend URLs (Compose builds it in the compose file; Helm builds it in the ConfigMap).
Secrets
| Variable | Notes |
|---|---|
JWT_SECRET | Required; generated by setup.sh / set via secrets.jwtSecret |
INTERNAL_TOKEN | Internal service-to-service token |
CDN_API_KEY | Upload service key |
Database
| Variable | Default |
|---|---|
DB_HOST | db (bundled) or your host |
DB_PORT | 3306 |
DB_NAME | rtylr_self_host |
DB_USER | rtylr_user |
DB_PASSWORD | (secret) |
Cache
| Variable | Default |
|---|---|
REDIS_URL | redis://redis:6379 (bundled) or your URL |
Object storage (S3-compatible)
| Variable | Default | Notes |
|---|---|---|
S3_BUCKET_NAME | rtylr-self-host | |
S3_REGION | us-east-1 | |
S3_ENDPOINT | http://floci:4566 | Your S3 endpoint when BYO |
S3_FORCE_PATH_STYLE | true | Needed for MinIO/floci |
AWS_ACCESS_KEY_ID | rtylr | |
AWS_SECRET_ACCESS_KEY | (secret) | |
CDN_MAX_UPLOAD_MB | 100 |
Optional passthrough integrations
SENTRY_DSN, AXIOM_TOKEN, AXIOM_DATASET, RESEND_API_KEY, OPENAI_API_KEY, OPENAI_ORG_ID, OPENAI_BASE_URL, GEMINI_API_KEY, DEEPSEEK_API_KEY, NVIDIA_NIM_API_KEY, AI_PRIMARY_PROVIDER, PADDLE_API_KEY, PADDLE_WEBHOOK_SECRET, PADDLE_CLIENT_TOKEN, PADDLE_SANDBOX.
In Helm, add any additional variables through extraEnv (non-secret) and extraSecretEnv (secret) — both are applied to the backend services.