Environment Variables

Environment variables are the strongest configuration source for a Roomote deployment. They are best for values that belong to infrastructure: public URLs, database and Redis connections, storage credentials, provider API keys, signing keys, and production-only overrides. Most day-to-day setup can also be managed from the Roomote UI. Use environment variables when you want configuration to be explicit, reproducible, managed by your deployment platform, or unavailable to in-app editors.

Precedence

Roomote resolves configuration in layers:

Process environment variables supplied by Docker Compose, the one-command installer, a PaaS, or the shell.
Saved deployment environment variables encrypted in Roomote during setup or from Settings pages.
Persisted runtime settings such as the selected default model, sandbox provider, or preview settings.
Derived defaults for local development and release-managed values.

The exact order depends on the setting. A few important cases:

Provider credentials usually resolve as process env first, then saved deployment env vars.
Model role env vars such as R_MODEL override the same role selected in Settings > Models.
Preview env vars such as PREVIEW_PROXY_BASE_URL override values saved from the preview pane’s admin setup on the task page.
Sandbox provider credentials resolve as process env first, then saved deployment env vars. The default sandbox provider is special: an explicit admin selection saved in Roomote wins over DEFAULT_COMPUTE_PROVIDER because local and Compose stacks often set a default automatically.
Local development has safe defaults for Postgres, Redis, MinIO, signing keys, and local URLs. Production does not.

UI locking

When a supported setting is provided by the process environment, Roomote treats it as operator-managed infrastructure. Settings pages may show the value as configured, masked, or env-managed, but they should not overwrite it. This is intentional. It lets production operators keep secrets and platform configuration in the deployment system while still letting admins manage non-env settings in the app. Use the UI when:

the value is safe for an admin to rotate from Roomote
the setting is expected to change without redeploying
the deployment platform does not make env management easy

Use environment variables when:

the value is required for boot, networking, or storage
the value is a production secret managed by your host or secret manager
you want changes reviewed in infrastructure config
you need to prevent in-app overrides

/setup also respects env-managed provider configuration. If an inference provider is fully configured from environment variables, setup skips the inference-provider step. If a hosted sandbox provider such as Modal, E2B, or Daytona is fully configured from environment variables, setup skips the sandbox provider step too. Local Docker is still treated as the default local fallback, so Docker-only configuration does not skip that step.

Production recommendations

For production and shared self-hosted deployments:

Set NODE_ENV=production and R_APP_ENV=production.
Set stable public URLs with R_APP_URL, TRPC_URL, and, when previews are enabled, PREVIEW_PROXY_BASE_URL.
Provide DATABASE_URL, REDIS_URL, and S3-compatible artifact storage.
Generate strong ENCRYPTION_KEY, ARTIFACT_SIGNING_KEY, and DASHBOARD_PASSWORD values.
Either provide both job and preview auth keypairs or set R_AUTO_GENERATE_KEYS=true so Roomote generates and persists them.
Keep provider credentials in environment variables or a secret manager when they are controlled by the operator.
Avoid SKIP_ENV_VALIDATION outside build tooling or one-off diagnostics.

Naming convention

Deployment env var names follow three rules:

R_* — configuration Roomote itself defines and operators set: URLs and model roles (R_APP_URL, R_MODEL), Roomote’s registered integration-app credentials (R_GITHUB_*, R_SLACK_*, R_MICROSOFT_*, R_TEAMS_BOT_*, R_TELEGRAM_*, R_DISCORD_*, R_LINEAR_*), and boot knobs such as R_AUTO_GENERATE_KEYS.
Conventional infrastructure names stay unchanged: DATABASE_URL, REDIS_URL, S3_*, NODE_ENV, HOST, PORT.
Third-party provider credentials keep the provider’s standard names: MODAL_*, E2B_*, DAYTONA_*, OPENAI_API_KEY, ANTHROPIC_API_KEY.

A few ROOMOTE_* names remain for Roomote-internal plumbing and installer/upgrade machinery (for example ROOMOTE_APP_DOMAIN, ROOMOTE_VERSION, and ROOMOTE_WORKER_IMAGE_REPO in installer-managed deployments); they are intentional exceptions, documented in the deploy/README.md naming section of the Roomote repository.

Supported env vars

The table below lists operator-supported deployment configuration. It does not include task-scoped internal variables that Roomote injects into sandboxes, such as per-task auth tokens or workspace paths.

Runtime and URLs

Env var	Required	Used for
`NODE_ENV`	Production	Node runtime mode: `development`, `test`, or `production`. Production deploys should set `production`.
`R_APP_ENV`	Recommended	Roomote app environment: `development`, `preview`, or `production`. Also affects monitoring and local URL defaults.
`R_PUBLIC_URL`	Local callbacks	Stable public HTTPS origin used by local development for OAuth and webhook callbacks.
`R_APP_URL`	Production	Public web app origin. Workers and integrations use it for links back to Roomote.
`TRPC_URL`	Production	API/tRPC origin used by workers and services. In single-origin production, this is often the app URL plus `/_roomote-api`.
`R_PING_BASE_URL`	Optional	Base URL for anonymous telemetry and version checks. Defaults to `https://ping.roomote.dev`.
`R_INSTANCE_ID`	Optional	Stable anonymous deployment identifier sent with telemetry and version checks. Use a random, non-identifying value when overriding it.
`R_STATUSPAGE_INCIDENTS_URL`	Optional	URL of a Statuspage-compatible unresolved-incidents JSON feed. Setting it enables incident banners and Slack warnings; leaving it unset disables Statuspage checks.
`ROOMOTE_FORCE_TELEMETRY`	Development only	Force-enables telemetry in development or preview environments when a Ping endpoint is explicitly configured.
`R_CLOUD_ENABLED`	Roomote Cloud only	Deployment-managed switch for Roomote Cloud behavior, including required anonymous analytics and Cloud support integrations. Do not set this for self-hosted deployments.
`R_CURATED_INTEGRATIONS_DISABLED`	Optional	Operator policy for the curated Settings > Integrations catalog, which is enabled by default. Set to `true` and restart Roomote to prevent those integrations from being configured or used. Existing connections remain stored while disabled and become available again once the value is unset. Communications, source-control, inference, sandbox providers, and environment-defined MCP servers are unaffected.
`R_COMMUNICATIONS_FAST_MODE_SETTING_ENABLED`	Optional	Set to `true` and restart Roomote to expose a personal setting that defaults a user’s supported Slack and Discord messages to fast mode. Explicit Slack `!fast` remains available regardless of this setting; the personal setting is hidden and unavailable when this flag is unset.
`R_GITHUB_APP_SLUG`	GitHub setup	Primary GitHub App slug used by server-rendered setup, mentions, and GitHub integration flows.
`R_GITHUB_ADDITIONAL_APP_SLUGS`	Optional GitHub setup	Comma-separated additional GitHub App slugs that Roomote should trust as managed bot identities for review attribution and notifications.
`SETUP_TOKEN`	Required (non-local)	One-time bootstrap token that admits the first admin at `/setup`. Required on every non-local deployment — tokenless bootstrap is allowed only when `NODE_ENV` is not `production` and `R_APP_ENV` is `development`, so anything running with `NODE_ENV=production` needs it. Without it, first-admin bootstrap stays closed so nobody can claim the founding-admin slot by reaching the URL first. Optional only in local development.
`DASHBOARD_PASSWORD`	Production	Local fallback/admin password value used by the deployment. Generate a strong secret.
`WEB_DEV_LOGIN_EMAIL`	Local only	Convenience email for development login flows. Do not use as production access control.
`WEB_DEV_LOGIN_ENABLED`	Local only	Explicit opt-in (`true` or `1`) for the `/auth/dev-login` development login route. Dev login stays disabled without it, even in development app envs. `pnpm dev` sets it automatically for local development.
`SKIP_ENV_VALIDATION`	Avoid	Skips env validation when present. Useful for narrow tooling cases, not normal deployments.

Database, Redis, and artifacts

Env var	Required	Used for
`DATABASE_URL`	Production	Postgres connection string. Local development defaults to the local Compose database.
`REDIS_URL`	Production	Redis connection string for queues and runtime coordination.
`S3_ENDPOINT`	Production	S3-compatible artifact storage endpoint used by services.
`S3_PRESIGN_ENDPOINT`	Recommended	Endpoint used when signing artifact URLs for workers or browsers. Set this when the public or worker-reachable URL differs from `S3_ENDPOINT`.
`S3_REGION`	Production	S3 region. MinIO deployments commonly use `us-east-1`.
`S3_ACCESS_KEY_ID`	Production	Artifact-storage access key.
`S3_SECRET_ACCESS_KEY`	Production	Artifact-storage secret key.
`S3_BUCKET_ARTIFACTS`	Production	Bucket used for Roomote artifacts.
`S3_AUTO_CREATE_BUCKET`	Optional	Set to `true` or `1` to create the artifacts bucket at API boot when it is missing.

Security and signing

Env var	Required	Used for
`ENCRYPTION_KEY`	Production	Secret used to encrypt deployment-stored secrets. Must be at least 32 characters.
`BETTER_AUTH_SECRET`	Optional	Dedicated secret for signing sign-in session cookies. At least 32 characters. Falls back to `ENCRYPTION_KEY` when unset; setting it later invalidates existing sessions.
`ARTIFACT_SIGNING_KEY`	Production	Secret used to sign artifact access. Must be at least 32 characters.
`ARTIFACT_SIGNING_KEY_PREVIOUS`	Rotation	Previous artifact signing key during rotation.
`R_LICENSE_KEY`	More than 10 registered users	Deployment license key for user limits above the free tier.
`JOB_AUTH_PRIVATE_KEY`	Production unless auto-generated	Base64-encoded P-256 private key for run and user auth tokens.
`JOB_AUTH_PUBLIC_KEY`	Production unless auto-generated	Base64-encoded P-256 public key for run and user auth token verification.
`PREVIEW_AUTH_PRIVATE_KEY`	Production unless auto-generated	Base64-encoded P-256 private key for preview auth tokens.
`PREVIEW_AUTH_PUBLIC_KEY`	Production unless auto-generated	Base64-encoded P-256 public key for preview auth token verification.
`R_AUTO_GENERATE_KEYS`	Optional	Set to `true` or `1` to generate missing job and preview keypairs at first startup and persist them encrypted in the database.
`SANDBOX_OIDC_PRIVATE_KEY`	Optional	Private key for sandbox OIDC token signing when using OIDC-backed sandbox auth flows.
`SANDBOX_OIDC_PUBLIC_KEY`	Optional	Primary public key for sandbox OIDC verification.
`SANDBOX_OIDC_PUBLIC_KEY_SECONDARY`	Rotation	Secondary sandbox OIDC public key during key rotation.

Models and inference providers

Env var	Required	Used for
`R_MODEL`	Optional	Env-level default coding model. Overrides the default selected in Settings > Models for new task starts.
`R_ORCHESTRATION_MODEL`	Optional	Model for Fast answers and coordination of delegated task launches. Defaults to `R_MODEL`.
`R_SMALL_MODEL`	Optional	Helper model for routing, titles, summaries, and lightweight model calls.
`R_VISION_MODEL`	Optional	Vision-capable model for visual inspection and screenshot/image work.
`R_CODE_REVIEW_MODEL`	Optional	Model for initial PR/MR review and review-sync tasks.
`R_EXPLORE_MODEL`	Optional	Exploration/helper model for investigation-oriented subtasks.
`R_PLANNING_MODEL`	Optional	Advisor model used for planning turns and advisor consultations inside coding tasks.
`R_MODEL_REASONING_EFFORT`	Optional	Reasoning level for the coding model: `low`, `medium`, `high`, `xhigh`, or `max`.
`R_ORCHESTRATION_MODEL_REASONING_EFFORT`	Optional	Reasoning level for the orchestration model.
`R_SMALL_MODEL_REASONING_EFFORT`	Optional	Reasoning level for the helper model.
`R_VISION_MODEL_REASONING_EFFORT`	Optional	Reasoning level for the vision model.
`R_CODE_REVIEW_MODEL_REASONING_EFFORT`	Optional	Reasoning level for the code review model.
`R_EXPLORE_MODEL_REASONING_EFFORT`	Optional	Reasoning level for the exploration model.
`R_PLANNING_MODEL_REASONING_EFFORT`	Optional	Reasoning level for the advisor model.
`R_MODEL_ENV_KEYS`	Optional	Comma- or space-separated list of extra provider key env vars to forward to task workers.
`OPENROUTER_API_KEY`	Provider key	OpenRouter API key. Can also be saved from Settings > Models.
`REQUESTY_API_KEY`	Provider key	Requesty API key. Can also be saved from Settings > Models.
`AI_GATEWAY_API_KEY`	Provider key	Vercel AI Gateway API key.
`BASETEN_API_KEY`	Provider key	Baseten API key.
`TOGETHER_API_KEY`	Provider key	Together AI API key.
`OPENAI_API_KEY`	Provider key	OpenAI API key.
`AZURE_API_KEY`	Provider key	Azure OpenAI API key.
`AZURE_RESOURCE_NAME`	Provider config	Azure OpenAI resource name, without the domain or URL.
`AZURE_COGNITIVE_SERVICES_API_KEY`	Provider key	Azure AI Foundry / AI Services API key.
`AZURE_COGNITIVE_SERVICES_RESOURCE_NAME`	Provider config	Azure AI Foundry / AI Services resource name, without the domain or URL.
`ANTHROPIC_API_KEY`	Provider key	Anthropic API key.
`XAI_API_KEY`	Provider key	xAI / Grok API key. Optional when a SuperGrok / eligible X Premium+ subscription is connected from Settings > Models.
`XAI_OAUTH_CLIENT_ID`	Optional	Override for the public Grok CLI OAuth client id used by the SuperGrok device-code connect flow. Defaults to the public CLI client id.
`MOONSHOT_API_KEY`	Provider key	Moonshot AI / Kimi Open Platform API key.
`KIMI_API_KEY`	Provider key	Kimi for Coding API key for `kimi-for-coding/...` models.
`MINIMAX_API_KEY`	Provider key	MiniMax API key.
`ZAI_API_KEY`	Provider key	Z.AI platform API key for the region set by `ZAI_REGION`.
`ZAI_REGION`	Provider key	Z.AI region: `global` (International) or `china`. Defaults to `global` when unset.
`ZAI_CODING_PLAN_API_KEY`	Provider key	Z.AI Coding Plan API key for `zai-coding-plan/...` models. Not a general platform key.
`ZAI_CODING_PLAN_REGION`	Provider key	Z.AI Coding Plan region: `global` (International) or `china`. Defaults to `global` when unset.
`OPENCODE_API_KEY`	Provider key	OpenCode Zen API key.
`OPENCODE_GO_API_KEY`	Provider key	OpenCode API key for an active Go subscription and `opencode-go/...` models.
`GEMINI_API_KEY`	Provider key	Google Gemini API key. Can also be saved from Settings > Models.
`GOOGLE_GENERATIVE_AI_API_KEY`	Provider key	Alternate Google/Gemini provider key forwarded when configured or inferred.
`AWS_BEARER_TOKEN_BEDROCK`	Provider key	Amazon Bedrock Mantle API key. Can also be saved from Settings > Models.
`AWS_REGION`	Provider key	AWS region where the Bedrock API key was created. Defaults to `us-east-1` at runtime when unset.
`LITELLM_BASE_URL`	LiteLLM	LiteLLM endpoint URL, usually including its `/v1` path.
`LITELLM_API_KEY`	LiteLLM	LiteLLM gateway API key. Required when configuring LiteLLM.
`OLLAMA_BASE_URL`	Ollama	Ollama endpoint URL. Use the service root, for example `http://ollama:11434`.
`OPENAI_COMPATIBLE_<NAME>_BASE_URL`	OpenAI-compatible	Endpoint URL for a named OpenAI-compatible connection (see Settings > Models). Example: `OPENAI_COMPATIBLE_COMPANY_PROXY_BASE_URL`.
`OPENAI_COMPATIBLE_<NAME>_API_KEY`	Optional	Bearer API key for that named OpenAI-compatible connection.
`OPENAI_COMPATIBLE_<NAME>_LABEL`	Optional	Display label stored with a named OpenAI-compatible connection.
`VLLM_BASE_URL`	vLLM	vLLM OpenAI-compatible endpoint URL, usually including its `/v1` path.
`VLLM_API_KEY`	Optional	Bearer API key for a vLLM endpoint that requires authentication.

Sandbox providers

Env var	Required	Used for
`DEFAULT_COMPUTE_PROVIDER`	Optional	Runtime default sandbox provider when no admin default is saved. Supported values are `docker`, `modal`, `e2b`, `daytona`, `blaxel`, `box`, `azure`, and the Roomote Cloud-only `roomote`.
`EXCLUDED_COMPUTE_PROVIDERS`	Optional	Comma-separated provider IDs to hide or exclude from default selection.
`DOCKER_WORKER_IMAGE`	Optional	Worker image used by Docker. In production, prefer an immutable registry-qualified tag.
`ROOMOTE_WORKER_IMAGE_REPO`	Optional	Registry repository used to derive the worker image from `RELEASE_VERSION` when `DOCKER_WORKER_IMAGE` is unset.
`DOCKER_WORKER_PLATFORM`	Optional	Docker worker platform. Defaults to the host architecture (`linux/arm64` on arm hosts, `linux/amd64` otherwise).
`DOCKER_WORKER_NETWORK`	Self-host Docker	Docker network for worker containers in Compose/self-host mode.
`DOCKER_WORKER_RELEASE_PATH`	Optional	Path to a packaged worker release archive used by Docker worker bootstrap.
`DOCKER_WORKER_CPU_LIMIT`	Optional	CPU limit per Docker task. Defaults to `2`.
`DOCKER_WORKER_MEMORY_LIMIT`	Optional	Memory and memory+swap limit for each Docker worker. Defaults to `4g`.
`DOCKER_TASK_DAEMON_MEMORY_LIMIT`	Optional	Memory and memory+swap limit for the nested Docker daemon used by Docker-project tasks. Defaults to `8g`.
`DOCKER_WORKER_PIDS_LIMIT`	Optional	Process limit per Docker task. Defaults to `512`.
`DOCKER_WORKER_DISK_LIMIT`	Optional	Writable-layer limit. Defaults to `20g`; tasks fail closed when the Docker storage driver cannot enforce it.
`DOCKER_WORKER_ALLOW_UNBOUNDED_DISK`	Optional	Explicitly permits startup without `--storage-opt size`. Defaults to `false`; use only with an equivalent host-level quota.
`DOCKER_WORKER_LOG_MAX_SIZE`	Optional	Maximum size of each Docker JSON log file. Defaults to `10m`.
`DOCKER_WORKER_LOG_MAX_FILES`	Optional	Number of rotated Docker JSON log files retained. Defaults to `3`.
`DOCKER_WORKER_EGRESS_POLICY`	Optional	`internet` (public egress; self-host blocks private+metadata ranges, local dev blocks metadata) or `none` (no external egress).
`DOCKER_STANDBY_MAX_COUNT`	Optional	Maximum stopped Docker task containers retained for resume. Defaults to `10`; `0` disables retention.
`DOCKER_STANDBY_MAX_AGE_HOURS`	Optional	Maximum age of a retained Docker task container. Defaults to `24`, capped at `168`.
`MODAL_TOKEN_ID`	Modal	Modal token ID. Can also be saved from Settings > Sandboxes.
`MODAL_TOKEN_SECRET`	Modal	Modal token secret.
`MODAL_ENDPOINT`	Optional	Modal endpoint override.
`MODAL_ENVIRONMENT`	Optional	Modal environment name.
`MODAL_APP_NAME`	Optional	Modal app name override.
`MODAL_REGIONS`	Optional	Comma-separated Modal sandbox placement regions (for example `us` or `us-west`). Unset keeps Modal default placement.
`MODAL_VM_MEMORY_MIB`	Optional	Memory allocated to Modal VM sandboxes used for nested Docker workloads. Defaults to `8192` MiB.
`E2B_API_KEY`	E2B	E2B API key. Can also be saved from Settings > Sandboxes.
`E2B_DOMAIN`	Optional	E2B domain for self-hosted or custom E2B clusters.
`E2B_MAX_SANDBOX_TIMEOUT_MS`	Optional	Maximum E2B sandbox timeout Roomote will request. Defaults to one hour.
`DAYTONA_API_KEY`	Daytona	Daytona API key. Can also be saved from Settings > Sandboxes.
`DAYTONA_API_URL`	Optional	Daytona API URL override.
`DAYTONA_TARGET`	Optional	Daytona target or region.
`BL_API_KEY`	Blaxel	Blaxel API key. Can also be saved from Settings > Sandboxes.
`BL_WORKSPACE`	Blaxel	Blaxel workspace name.
`BLAXEL_REGION`	Optional	Blaxel sandbox placement region. Unset lets Blaxel choose the closest region.
`BLAXEL_STANDBY_MAX_COUNT`	Optional	Maximum Blaxel standby sandboxes retained for resume. Defaults to `25`; `0` disables retention.
`BLAXEL_STANDBY_MAX_AGE_HOURS`	Optional	Maximum age of a Blaxel standby sandbox. Defaults to `168`, capped at `168`.
`BOX_API_KEY`	Box	Box API key. Can also be saved from Settings > Sandboxes.
`BOX_API_BASE_URL`	Optional	Box-compatible API base URL override.
`BOX_MACHINE_TYPE`	Optional	Box machine type override: `small`, `default`, or `large`.
`BOX_TIMEOUT_MS`	Optional	Active Box sandbox timeout in milliseconds. Defaults to 2 hours (the Box free-trial maximum).
`BOX_STANDBY_MAX_COUNT`	Optional	Maximum stopped Box task sandboxes retained for resume; `0` disables retention.
`BOX_STANDBY_MAX_AGE_HOURS`	Optional	Maximum age in hours of a retained Box task sandbox.
`AZURE_SUBSCRIPTION_ID`	Azure	Azure subscription ID hosting the sandbox group. Can also be saved from Settings > Sandboxes.
`AZURE_RESOURCE_GROUP`	Azure	Resource group containing the Azure sandbox group.
`AZURE_SANDBOX_GROUP`	Azure	Azure Container Apps sandbox group name.
`AZURE_SANDBOX_REGION`	Azure	Data-plane region for the sandbox group, for example `canadacentral`.
`AZURE_SANDBOX_DISK_IMAGE`	Azure	Worker disk image ID. Auto-provisioned from the worker OCI image during setup when unset.
`AZURE_CLIENT_ID`	Optional	User-assigned managed identity client ID — or the service principal’s app ID when paired with `AZURE_TENANT_ID` + `AZURE_CLIENT_SECRET`. Unset uses `az login` locally or the system-assigned identity when deployed.
`AZURE_TENANT_ID`	Optional	Service principal tenant ID (with `AZURE_CLIENT_ID` + `AZURE_CLIENT_SECRET`). Recommended for containerized installs.
`AZURE_CLIENT_SECRET`	Optional	Service principal client secret (with `AZURE_TENANT_ID` + `AZURE_CLIENT_ID`).
`AZURE_SANDBOX_REGISTRY_USERNAME`	Optional	Username for pulling a private worker image during disk-image provisioning (GHCR: token owner’s GitHub username).
`AZURE_SANDBOX_REGISTRY_TOKEN`	Optional	Token for pulling a private worker image during disk-image provisioning (GHCR: PAT with `read:packages`).
`AZURE_SANDBOX_SIZE`	Optional	Sandbox size override: `XS` (0.25/0.5 GiB/5 GiB disk), `S` (0.5/1 GiB/10 GiB disk), `M` (1/2 GiB/20 GiB), `L` (2/4/40 GiB), `XL` (4/8/80 GiB). When unset, Roomote uses its 4 GiB task allocation. ACA caps memory at cores×2Gi (CPU scales up to fit) and disk at cores×20Gi (clamped).
`AZURE_SANDBOX_EGRESS_INSPECTION`	Optional	ACA egress TLS inspection override: `Legacy`, `Full`, `Partial`, or `None`. Defaults to `Partial` when unset; configured values are passed to ACA. Use `Full` only with egress rules or transforms because it TLS-resigns all traffic and blocks non-HTTP traffic.
`WORKER_RELEASE_CHANNEL`	Optional	Worker release channel, `stable` or `preview`, for hosted worker release selection.
`WORKER_RELEASE_VERSION`	Optional	Explicit worker release version for hosted worker bootstrap.
`LOCAL_SANDBOX_FILES_DIR`	Local development	Local override for sandbox bootstrap files. Used only by development workflows.

Source control providers

Env var	Required	Used for
`R_GITHUB_APP_SLUG`	GitHub	Primary GitHub App slug.
`R_GITHUB_ADDITIONAL_APP_SLUGS`	Optional	Comma-separated additional GitHub App slugs trusted as Roomote-managed bot identities.
`R_GITHUB_APP_ID`	GitHub	GitHub App ID.
`R_GITHUB_APP_PRIVATE_KEY`	GitHub	Raw GitHub App private key PEM, usually with newlines escaped as `\\n`.
`R_GITHUB_CLIENT_ID`	GitHub	GitHub OAuth client ID.
`R_GITHUB_CLIENT_SECRET`	GitHub	GitHub OAuth client secret.
`R_GITHUB_WEBHOOK_SECRET`	GitHub	GitHub webhook secret.
`GITHUB_MCP_SERVER_URL`	Optional	GitHub MCP server URL override.
`GITHUB_AUTOMATED_SKIP_REPOS`	Optional	Repository skip list for automated GitHub processing.
`GITHUB_AUTOMATED_SKIP_OWNERS`	Optional	Owner skip list for automated GitHub processing.
`GITLAB_BASE_URL`	Optional	GitLab base URL for self-managed GitLab.
`GITLAB_CLIENT_ID`	GitLab	GitLab OAuth application ID.
`GITLAB_CLIENT_SECRET`	GitLab	GitLab OAuth application secret.
`GITLAB_WEBHOOK_SIGNING_TOKEN`	Optional	GitLab webhook signing token.
`GITLAB_WEBHOOK_SECRET`	Optional	GitLab webhook secret.
`GITEA_BASE_URL`	Gitea	Gitea base URL.
`GITEA_CLIENT_ID`	Gitea	Gitea OAuth application client ID for deployment and personal account-linking grants.
`GITEA_CLIENT_SECRET`	Gitea	Gitea OAuth application client secret.
`GITEA_WEBHOOK_SECRET`	Optional	Gitea webhook secret.
`BITBUCKET_BASE_URL`	Optional	Bitbucket base URL. Defaults to `https://bitbucket.org` (Cloud only).
`BITBUCKET_CLIENT_ID`	Bitbucket	Bitbucket OAuth consumer client ID for deployment authorization and personal account linking.
`BITBUCKET_CLIENT_SECRET`	Bitbucket	Bitbucket OAuth consumer client secret.
`BITBUCKET_WEBHOOK_SECRET`	Optional	Bitbucket webhook secret.
`ADO_ORGANIZATION`	Azure DevOps	Azure DevOps organization.
`ADO_TOKEN`	Azure DevOps	Azure DevOps access token.
`ADO_AUTH_MODE`	Optional	`pat`, `entra`, or `delegated`; omitted values retain legacy PAT/Entra inference.
`ADO_LINKED_ACCOUNT_ID`	Optional	Linked Azure DevOps account key used by delegated authentication.
`ADO_BASE_URL`	Optional	Azure DevOps base URL.
`ADO_USERNAME`	Optional	Azure DevOps username.
`ADO_CLIENT_ID`	Optional	Microsoft Entra client ID for Azure DevOps service-principal authentication.
`ADO_CLIENT_SECRET`	Optional	Microsoft Entra client secret for Azure DevOps service-principal authentication.
`ADO_TENANT_ID`	Optional	Microsoft Entra tenant ID for Azure DevOps service-principal authentication.
`ADO_WEBHOOK_SECRET`	Optional	Azure DevOps webhook secret. Generated automatically when Roomote configures service hooks.

Env var	Required	Used for
`SLACK_APP_ID`	Slack app	Slack app ID for communications setup.
`R_SLACK_CLIENT_ID`	Slack app/auth	Slack OAuth client ID. Also accepted for Slack sign-in setup.
`R_SLACK_CLIENT_SECRET`	Slack app/auth	Slack OAuth client secret. Also accepted for Slack sign-in setup.
`SLACK_REDIRECT_URI`	Optional	Slack redirect URI override.
`SLACK_AUTH_URI`	Optional	Slack auth URI override.
`R_SLACK_SIGNING_SECRET`	Slack app/auth	Slack signing secret for webhook verification.
`SLACK_API_BASE_URL`	Optional	Slack API base URL. Defaults to `https://slack.com/api/`.
`SLACK_UNFURL_ALLOWED_DOMAINS`	Optional	Domains Slack unfurl handling may allow.
`SLACK_API_TIMEOUT_MS`	Optional	Slack API timeout. Defaults to `API_EXTERNAL_REQUEST_TIMEOUT_MS` or 10 seconds.
`SLACK_DEBUG_LOGS`	Optional	Set to `true` or `1` to enable extra Slack logs.
`ROUTER_DEBUG_CHANNEL_ID`	Optional	Slack channel ID for router debug output.
`R_TEAMS_BOT_APP_ID`	Teams	Microsoft Teams bot app ID.
`R_TEAMS_BOT_APP_PASSWORD`	Teams	Microsoft Teams bot password.
`R_TEAMS_BOT_TENANT_ID`	Optional	Microsoft Teams bot tenant ID.
`R_TEAMS_BOT_NAME`	Optional	Teams bot display name for generated app packages and invocation guidance.
`R_TEAMS_BOT_TOKEN_ENDPOINT`	Optional	Teams bot token endpoint override.
`R_TEAMS_BOT_OAUTH_SCOPE`	Optional	Teams bot OAuth scope override.
`R_TELEGRAM_BOT_TOKEN`	Telegram	Telegram bot token.
`R_TELEGRAM_WEBHOOK_SECRET`	Telegram	Optional. Telegram webhook secret; generated automatically when unset in the UI.
`R_DISCORD_BOT_TOKEN`	Discord	Discord bot token. The bot and application identity are read from this token.
`R_DISCORD_GATEWAY_SECRET`	Discord	Shared internal secret for Discord event delivery between BullMQ and API. Auto-generated when Discord is saved in the UI if unset, and auto-healed when Discord is already configured without one.
`DISCORD_API_BASE_URL`	Optional	Discord REST API base URL override, primarily for testing.
`R_MICROSOFT_CLIENT_ID`	Microsoft sign-in	Microsoft OAuth client ID.
`R_MICROSOFT_CLIENT_SECRET`	Microsoft sign-in	Microsoft OAuth client secret.
`R_MICROSOFT_TENANT_ID`	Microsoft sign-in	Microsoft tenant ID. Also accepted as the Azure DevOps tenant ID fallback.
`R_ALLOWED_EMAILS`	Optional	Comma-separated email allowlist for deployments that restrict sign-in by email.
`R_ELEVENLABS_API_KEY`	Optional	ElevenLabs API key for narrated feature-demo videos. The key stays on the control plane; sandboxes reach text-to-speech only through an authenticated Roomote endpoint. A key scoped to text-to-speech only is sufficient and recommended.
`R_ELEVENLABS_VOICE_ID`	Optional	ElevenLabs voice ID used for feature-demo narration. Required alongside the API key for narration to be available.

During Microsoft Teams setup, Roomote uses the Microsoft Entra app values for the Teams bot by default. Use Show advanced config after the Directory (Tenant) ID field only when your Azure Bot app ID is different from the Entra app ID, or when you need to set the optional bot name or token overrides.

Integrations

Env var	Required	Used for
`R_LINEAR_CLIENT_ID`	Linear	Linear OAuth client ID.
`R_LINEAR_CLIENT_SECRET`	Linear	Linear OAuth client secret.
`R_LINEAR_WEBHOOK_SECRET`	Linear	Linear webhook secret.
`R_LINEAR_REDIRECT_URI`	Optional	Linear redirect URI override.

Declarative environments

Env var	Required	Used for
`ROOMOTE_ENVIRONMENTS_DIR`	Optional	Directory of environment definition files (`.yaml`, `.yml`, `*.json`) applied at API startup. One environment per file.
`ROOMOTE_ENVIRONMENTS_YAML`	Optional	Inline multi-document YAML with environment definitions applied at API startup, for platforms where mounting files is awkward.

See Environments for the apply semantics.

Live previews

Env var	Required	Used for
`PREVIEW_PROXY_BASE_URL`	Preview support	Public preview-proxy origin. Overrides the origin saved from the preview pane’s admin setup when set.
`PREVIEW_DOMAINS`	Optional	Comma-separated preview domains allowed by the preview proxy. Usually derived from `PREVIEW_PROXY_BASE_URL`.
`ROOMOTE_PREVIEW_DOMAIN`	Optional	Roomote preview domain override used by preview runtime analysis.
`PREVIEW_TOKEN_TTL_SECONDS`	Optional	Preview auth token lifetime. Defaults to 3600 seconds.

Observability and request timing

Env var	Required	Used for
`SENTRY_DSN`	Optional	Shared Sentry DSN fallback for Node services that do not have a service-specific DSN.
`NEXT_PUBLIC_SENTRY_DSN`	Optional	Browser and Next.js web Sentry DSN.
`API_SENTRY_DSN`	Optional	API service Sentry DSN. Falls back to `SENTRY_DSN`.
`CONTROLLER_SENTRY_DSN`	Optional	Controller service Sentry DSN. Falls back to `SENTRY_DSN`.
`BULLMQ_SENTRY_DSN`	Optional	BullMQ service Sentry DSN. Falls back to `SENTRY_DSN`.
`WORKER_SENTRY_DSN`	Optional	Worker service Sentry DSN. Falls back to `SENTRY_DSN`.
`API_DEBUG_LOGS`	Optional	Set to `true` or `1` to enable extra API logs.
`API_EXTERNAL_REQUEST_TIMEOUT_MS`	Optional	Default external request timeout. Defaults to 10 seconds.
`API_SLOW_REQUEST_THRESHOLD_MS`	Optional	Threshold for slow API request logging. Defaults to 5 seconds.
`API_SLOW_EXTERNAL_REQUEST_THRESHOLD_MS`	Optional	Threshold for slow external request logging. Defaults to 2 seconds.
`RELEASE_VERSION`	Release images	Baked release version used for release tagging and worker image derivation.
`RELEASE_PRODUCT_VERSION`	Release images	Baked product (changelog) version shown by in-app release notices on channel builds.
`GITHUB_SHA`	Release metadata	Commit SHA fallback for monitoring release metadata.
`VERCEL_GIT_COMMIT_SHA`	Release metadata	Vercel commit SHA fallback for monitoring release metadata.

Local development and deploy helpers

Env var	Required	Used for
`NGROK_AUTH_TOKEN`	Local callbacks	Lets `pnpm dev` configure ngrok automatically for local public callbacks.
`ROOMOTE_ENV_FILE`	Self-host scripts	Alternate dotenv file for local self-host Compose scripts.
`ROOMOTE_DOCKER_LOAD_ENV_FILE`	Self-host scripts	Compose wrapper flag controlling image-baked dotenv loading. Normally managed by scripts.
`ROOMOTE_APP_DOMAIN`	Production example	Domain helper used by production dotenv examples and Caddy deployment files.
`ROOMOTE_PREVIEW_DOMAIN`	Production example/previews	Preview domain helper used by production dotenv examples and preview runtime config.
`SKILLS_API_URL`	Optional	Skill marketplace/API URL override for skill-related tooling.