ADMIN_USER / ADMIN_PASSWORD | First administrator, created on first start. |
SESSION_SECRET | Random text that protects sign-ins. Render generates one. |
MFA_REQUIRED | 1 requires two-step sign-in for every account from the first start. Otherwise an administrator turns it on in 👥 Users & access. |
ANTHROPIC_API_KEY | Optional. Turns on AI for everyone signed in, billed to this key. |
FIRM_NAME | Your company name in the client portal and its emails. Default: the email "from" name. |
PORTAL | 1 turns the client portal on at first start. Default off; an administrator can switch it on the team page. |
SIGNUP_CODE / SIGNUP_OPEN | Optional starting company code, and 1 to open the sign-up link at first start. |
SESSION_HOURS | How long a sign-in lasts. Default 12. |
COMPANY_EMAIL_DOMAINS | Staff must use an address at your domain. This doesn't apply to client portal users. |
CERT_SIGNING_KEY, CERT_VOUCHER_SECRET | Turn on Academy exams and signed certificates. Make them with node tools/academy-keys.js; use the same values on every workspace. |
ACADEMY_WORKSPACE | Optional. The workspace name vouchers are tied to. Default: the host name in APP_URL. |
ACADEMY_DEMO | 1 for practice mode: exams need no voucher and certificates are marked PRACTICE. The start files use it. |
APP_URL | Your Claimsfy address. Used in email links, including portal links. |
WEATHER_RADIUS_MILES | How far around the risk the weather report looks. Default 10 (1 to 25). An administrator can also set it in ⚙ Weather settings. |
WEATHER_PROVIDER_URL, WEATHER_PROVIDER_KEY, WEATHER_PROVIDER_HEADER, WEATHER_PROVIDER_NAME | Optional paid weather provider (see Weather on the date of loss). Set here, it can't be changed in the app. |
DATA_DIR, TZ, MAIL_, SMTP_, GRAPH_*, ALLOWED_MODELS, TRUST_PROXY, ADMIN_ONLY | Same as the main Claimsfy team server. |