> ## Documentation Index > Fetch the complete documentation index at: https://mintlify.com/activepieces/activepieces/llms.txt > Use this file to discover all available pages before exploring further. # Environment Variables > Complete reference for all Activepieces environment variables Activepieces is configured entirely through environment variables prefixed with `AP_`. All variables are defined in the source code at `packages/server/common/src/lib/system-props.ts`. Environment variables are read from the `.env` file or passed directly to the container. The `.env.example` file in the repository shows the minimum required configuration. ## Quick Reference Download the example configuration: ```bash theme={null} curl -O https://raw.githubusercontent.com/activepieces/activepieces/main/.env.example ``` ## Required Variables These must be set for Activepieces to function: Path to the workflow execution engine **Default**: `dist/packages/engine/main.js` **Example**: ```bash theme={null} AP_ENGINE_EXECUTABLE_PATH=dist/packages/engine/main.js ``` 256-bit encryption key (32 hex characters) for encrypting sensitive data **Generate**: ```bash theme={null} openssl rand -hex 32 ``` Changing this key will make existing encrypted data unreadable. Store it securely and never commit to version control. Secret key for signing JWT authentication tokens **Generate**: ```bash theme={null} openssl rand -hex 32 ``` Changing this will invalidate all existing user sessions. Public URL where users access Activepieces **Examples**: ```bash theme={null} # Development AP_FRONTEND_URL=http://localhost:8080 # Production AP_FRONTEND_URL=https://activepieces.yourdomain.com ``` ## Database Configuration ### PostgreSQL PostgreSQL database name PostgreSQL server hostname **Examples**: ```bash theme={null} # Docker Compose AP_POSTGRES_HOST=postgres # External server AP_POSTGRES_HOST=db.example.com ``` PostgreSQL server port PostgreSQL username PostgreSQL password Use a strong password for production deployments. PostgreSQL connection URL (alternative to individual settings) **Format**: `postgresql://username:password@host:port/database` **Example**: ```bash theme={null} AP_POSTGRES_URL=postgresql://user:pass@localhost:5432/activepieces?sslmode=require ``` If set, this overrides individual `AP_POSTGRES_*` variables. Enable SSL/TLS for PostgreSQL connection ```bash theme={null} AP_POSTGRES_USE_SSL=true ``` Path to SSL CA certificate file ```bash theme={null} AP_POSTGRES_SSL_CA=/path/to/ca-certificate.crt ``` PostgreSQL connection pool size **Recommended**: 10-20 for production Connection idle timeout in milliseconds Database type (for advanced use cases) **Options**: `postgres`, `sqlite` SQLite is for development only. Use PostgreSQL for production. ## Redis Configuration Redis server hostname Redis server port Redis username (Redis 6+ ACL) Redis password Redis database number (0-15) Redis connection URL (alternative to individual settings) **Format**: `redis://[username:password@]host:port/db` **Example**: ```bash theme={null} AP_REDIS_URL=redis://:password@redis:6379/0 ``` Enable SSL/TLS for Redis connection Path to SSL CA certificate file Redis deployment type **Options**: `standalone`, `sentinel` ### Redis Sentinel Sentinel master name Comma-separated list of sentinel hosts **Example**: ```bash theme={null} AP_REDIS_SENTINEL_HOSTS=sentinel1:26379,sentinel2:26379,sentinel3:26379 ``` Sentinel role **Options**: `master`, `slave` ### Redis Job Retention How many days to keep failed job data Maximum number of failed jobs to retain ## Application Configuration ### Environment Application environment **Options**: `prod`, `dev` ```bash theme={null} # Production AP_ENVIRONMENT=prod # Development AP_ENVIRONMENT=dev ``` Activepieces edition **Options**: `ce` (Community Edition), `ee` (Enterprise Edition) ### Execution Code execution mode for workflows **Options**: * `SANDBOX_CODE_ONLY`: Sandboxed execution using isolated-vm (128MB limit) * `UNSANDBOXED`: Direct Node.js execution (development only) ```bash theme={null} # Production (recommended) AP_EXECUTION_MODE=SANDBOX_CODE_ONLY # Development only AP_EXECUTION_MODE=UNSANDBOXED ``` Use `SANDBOX_CODE_ONLY` in production to prevent malicious code execution. Memory limit in MB for sandboxed code execution **Range**: 64-512 MB Comma-separated environment variables to pass to sandbox **Example**: ```bash theme={null} AP_SANDBOX_PROPAGATED_ENV_VARS=NODE_ENV,DEBUG,CUSTOM_VAR ``` ### Timeouts Maximum workflow execution time in seconds **Default**: 10 minutes Webhook request timeout in seconds Trigger execution timeout in seconds Trigger hook timeout in seconds Default polling interval in minutes for scheduled triggers ### Limits Maximum file upload size in megabytes Maximum size of flow run logs in megabytes Limit concurrent job execution per project ### Data Retention Days to retain execution data before cleanup **Example**: ```bash theme={null} AP_EXECUTION_DATA_RETENTION_DAYS=30 ``` Days before archiving flow issues Days before disabling paused flows ## File Storage File storage backend **Options**: `local`, `s3` **Default**: `local` (uses `/usr/src/app/cache`) ### S3 Configuration S3 bucket name for file storage AWS access key ID AWS secret access key AWS region **Example**: `us-east-1`, `eu-west-1` Custom S3 endpoint for S3-compatible services **Examples**: ```bash theme={null} # MinIO AP_S3_ENDPOINT=http://minio:9000 # DigitalOcean Spaces AP_S3_ENDPOINT=https://nyc3.digitaloceanspaces.com # Cloudflare R2 AP_S3_ENDPOINT=https://.r2.cloudflarestorage.com ``` Use pre-signed URLs for S3 file access Use IAM Roles for Service Accounts (EKS/Kubernetes) When enabled, authentication uses pod IAM role instead of access keys. ## Email (SMTP) SMTP server hostname SMTP server port SMTP username SMTP password Email address for outgoing emails **Example**: `noreply@yourdomain.com` Display name for outgoing emails **Example**: `Activepieces` ## Worker Configuration Container role **Options**: * `WORKER_AND_APP`: Run both API and workers (default) * `APP`: Run API server only * `WORKER`: Run workers only Use separate containers for scaling. See [Workers](/deployment/workers) guide. Number of concurrent jobs per worker **Recommended**: 1-4 based on CPU cores Authentication token for dedicated workers Platform ID for dedicated worker deployment Pre-load pieces into memory on startup Enable PM2 process manager for clustering ```bash theme={null} AP_PM2_ENABLED=true ``` ## Security Optional API key for platform-level authentication HTTP header to extract real client IP **Examples**: ```bash theme={null} # Behind Cloudflare AP_CLIENT_REAL_IP_HEADER=CF-Connecting-IP # Behind proxy AP_CLIENT_REAL_IP_HEADER=X-Forwarded-For ``` Comma-separated webhook secrets ### Rate Limiting Enable authentication rate limiting Maximum authentication requests per window Rate limit window in seconds Enable per-project rate limiting ## Logging Logging verbosity **Options**: `error`, `warn`, `info`, `debug`, `trace` Enable pretty-printed logs (development) ```bash theme={null} # Development AP_LOG_PRETTY=true # Production (JSON logs) AP_LOG_PRETTY=false ``` ## Telemetry & Monitoring Send anonymous usage telemetry to Activepieces Helps improve the platform. No sensitive data is collected. Enable OpenTelemetry instrumentation OpenTelemetry collector endpoint Headers for OTLP exporter ## Advanced Configuration URL for flow template repository Custom pieces registry URL Enable development pieces Pieces synchronization mode Automatically enable flows when published Internal service communication URL Path to custom configuration file Enable BullMQ Board for queue monitoring Username for queue UI Password for queue UI ## Example Configurations ### Development ```bash .env theme={null} AP_ENGINE_EXECUTABLE_PATH=dist/packages/engine/main.js AP_ENCRYPTION_KEY=0000000000000000000000000000000000000000000000000000000000000000 AP_JWT_SECRET=test_jwt_secret AP_ENVIRONMENT=dev AP_FRONTEND_URL=http://localhost:8080 AP_POSTGRES_DATABASE=activepieces AP_POSTGRES_HOST=localhost AP_POSTGRES_PORT=5432 AP_POSTGRES_USERNAME=postgres AP_POSTGRES_PASSWORD=postgres AP_REDIS_HOST=localhost AP_REDIS_PORT=6379 AP_EXECUTION_MODE=UNSANDBOXED AP_LOG_LEVEL=debug AP_LOG_PRETTY=true AP_TELEMETRY_ENABLED=false ``` ### Production ```bash .env theme={null} AP_ENGINE_EXECUTABLE_PATH=dist/packages/engine/main.js AP_ENCRYPTION_KEY= AP_JWT_SECRET= AP_ENVIRONMENT=prod AP_FRONTEND_URL=https://activepieces.yourdomain.com # Database AP_POSTGRES_DATABASE=activepieces AP_POSTGRES_HOST=postgres.yourdomain.com AP_POSTGRES_PORT=5432 AP_POSTGRES_USERNAME=activepieces AP_POSTGRES_PASSWORD= AP_POSTGRES_USE_SSL=true AP_POSTGRES_POOL_SIZE=20 # Redis AP_REDIS_HOST=redis.yourdomain.com AP_REDIS_PORT=6379 AP_REDIS_PASSWORD= AP_REDIS_USE_SSL=true # Execution AP_EXECUTION_MODE=SANDBOX_CODE_ONLY AP_FLOW_TIMEOUT_SECONDS=600 AP_WEBHOOK_TIMEOUT_SECONDS=30 # Storage AP_FILE_STORAGE_LOCATION=s3 AP_S3_BUCKET=activepieces-files AP_S3_ACCESS_KEY_ID= AP_S3_SECRET_ACCESS_KEY= AP_S3_REGION=us-east-1 # Limits AP_MAX_FILE_SIZE_MB=50 AP_EXECUTION_DATA_RETENTION_DAYS=90 # Logging AP_LOG_LEVEL=info AP_LOG_PRETTY=false # Monitoring AP_TELEMETRY_ENABLED=true AP_OTEL_ENABLED=true OTEL_EXPORTER_OTLP_ENDPOINT=http://otel-collector:4318 ``` ## Next Steps Configure PostgreSQL Setup S3 file storage Configure worker processes Scale your deployment