ADMIN_USER / ADMIN_PASSWORD | First administrator, created on first start. |
SESSION_SECRET | Random text that protects sign-ins. Render generates one. |
MFA_REQUIRED | 1 requires two-step sign-in for every account from the first start. Otherwise an administrator turns it on in 👥 Users & access. |
ANTHROPIC_API_KEY | Optional. Turns on AI for everyone signed in, billed to this key. |
SIGNUP_CODE / SIGNUP_OPEN | Optional starting company code, and 1 to open the sign-up link at first start. |
SESSION_HOURS | How long a sign-in lasts. Default 12. |
CERT_SIGNING_KEY, CERT_VOUCHER_SECRET | Turn on Academy exams and signed certificates. Make them with node tools/academy-keys.js; use the same values on every workspace. |
ACADEMY_WORKSPACE | Optional. The workspace name vouchers are tied to. Default: the host name in APP_URL. |
ACADEMY_DEMO | 1 for practice mode: exams need no voucher and certificates are marked PRACTICE. The start files use it. |
APP_URL | Your Claimsfy address. Used in email links. |
DATA_DIR, TZ, MAIL_, SMTP_, GRAPH_*, ALLOWED_MODELS, TRUST_PROXY, ADMIN_ONLY | Same as the main Claimsfy team server. |