Environment vars
The environment panel configures infrastructure, providers, and runtime settings for your generated application. Open it from the top bar on the modeling canvas.
Organization
Controls tenancy architecture.
- Mode —
single(one tenant),multi(multiple organizations), ormulti-domain(each org gets its own domain/subdomain). - Multi-domain mode —
subdomainordomain(only when mode ismulti-domain). - Trusted origins — allowed CORS origins for multi-domain mode.
- Default role — role assigned to new organization members.
Subscription
Controls billing scope.
- Mode —
disabled(no billing),organization(org-level subscription), ormember(per-user subscription).
Stripe
Payment processing credentials.
- Secret key — Stripe API secret key.
- Publishable key — Stripe public key for the frontend.
- Webhook secret — secret for verifying Stripe webhook signatures.
Database
PostgreSQL connection settings.
- RLS URL — connection string with row-level security enabled.
- RLS user / password — credentials for the RLS role.
- Bypass RLS URL — connection string that bypasses RLS (for admin operations).
- Migration URL — connection string for running migrations.
- Name — database name.
- Schema — PostgreSQL schema (default:
public). - Jobs schema — schema for background job tables (default:
pgboss). - Redis URL — Redis connection string for caching and job queues.
Background jobs
Controls how background tasks are executed.
- Mode —
worker(dedicated process),cron(HTTP-triggered), orinline(runs in the main process). - Cron secret — secret token for authenticating cron HTTP calls.
Authentication
- Auth secret — secret key for signing session tokens.
SMTP settings for transactional emails.
- From — sender email address.
- SMTP host — mail server hostname.
- SMTP port — mail server port.
- SMTP user — authentication username.
- SMTP password — authentication password.
URLs
- Backend URL — base URL for the API server (default:
http://localhost:3011). - Frontend URL — base URL for the web app (default:
http://localhost:5173).
File storage / S3
S3-compatible object storage for file and image uploads.
- Public bucket — bucket for publicly accessible files.
- Private bucket — bucket for access-controlled files.
- Access key ID — S3 access key.
- Secret access key — S3 secret key.
- Region — S3 region (default:
us-east-1). - Endpoint — custom S3-compatible endpoint (e.g., for MinIO or Cloudflare R2).
AI / Chatbot
Settings for the built-in AI chatbot.
- Anthropic API key — API key for Claude-powered features.
- Daily token limit (user) — max tokens per user per day (default:
50000). - Daily token limit (organization) — max tokens per org per day (default:
1000000). - Daily token limit (global) — max tokens across all users per day (default:
1000000).
reCAPTCHA
Bot protection for public forms.
- Site key — reCAPTCHA public site key.
- Secret key — reCAPTCHA server-side secret key.
Push notifications
Browser and mobile push notification support.
- Enabled — toggle push notifications on or off (default: off).
- VAPID public key — public key for Web Push.
- VAPID private key — private key for Web Push.
- Expo access token — token for sending push notifications via Expo (React Native).
OAuth providers
Social login credentials. Each provider needs a client ID and client secret.
- Google —
AUTH_GOOGLE_ID,AUTH_GOOGLE_SECRET