Environment Variables

Tempr-specific and package-specific environment variables outside Laravel's stock framework configuration.

This page documents environment variables that Tempr or installed non-stock packages read from this repository's configuration files.

It intentionally skips Laravel's standard framework variables that are already covered by Laravel documentation, such as APP_*, primary DB_*, DATABASE_URL, REDIS_*, CACHE_*, SESSION_*, QUEUE_*, MAIL_*, LOG_*, FILESYSTEM_DISK, BROADCAST_DRIVER, PUSHER_*, REVERB_*, SQS_*, MEMCACHED_*, BCRYPT_ROUNDS, and VIEW_COMPILED_PATH.

Some Laravel ecosystem packages are still listed when this app has package config files for them and the variable is not part of a fresh Laravel application's default .env surface.

Logging Database

Defined in config/database.php.

VariableDefaultPurpose
LOGGING_DB_CONNECTIONDB_CONNECTION, then mysqlConnection name used by config('database.logging').
LOGGING_DB_DRIVERnoneDatabase driver for the logging connection, such as pgsql or mysql.
LOGGING_DATABASE_URLnoneFull DSN URL for the logging connection.
LOGGING_DB_HOST127.0.0.1Logging database host.
LOGGING_DB_PORT3306Logging database port.
LOGGING_DB_DATABASEforgeLogging database name.
LOGGING_DB_USERNAMEforgeLogging database user.
LOGGING_DB_PASSWORDemptyLogging database password.
LOGGING_DB_SOCKETemptyUnix socket for MySQL-compatible logging connections.
MYSQL_ATTR_SSL_CAnoneCA certificate path for MySQL-compatible primary and logging connections.

The logging migrations create audit and Telescope tables on config('database.logging'). The audit and Telescope runtime configs must also point at the logging connection before writes move there.

Auditing And Comments

ConfigEnv variablesNotes
config/audit.phpAUDIT_DB_CONNECTION, AUDIT_CONSOLE_ENABLED, AUDIT_THRESHOLDOwenIt auditing uses the database driver and the audits table. The connection falls back to LOGGING_DB_CONNECTION, then DB_CONNECTION, when AUDIT_DB_CONNECTION is unset.
config/filament-auditing.phpnoneTapp Filament Auditing sorting, lazy loading, extension columns, mappings, and custom view settings are config-only.
config/filament-comments.phpnoneParallax Filament Comments avatars, editor type, prune interval, user attribute, model class, and table name are config-only.
config/nav.phpnoneSidebar entries, routes, icons, permissions, badges, and sessions are config-only.

OAuth JWT

Defined in config/oauth-jwt.php.

VariableDefaultPurpose
OAUTH_JWT_ENABLEDtrueEnables inbound bearer JWT authentication.
OAUTH_JWT_ISSUERFORTRESS_HOSTExpected JWT issuer.
OAUTH_JWT_AUDIENCESemptyComma-separated allowed audiences.
OAUTH_JWT_AUDIENCEemptyLegacy/singular fallback for OAUTH_JWT_AUDIENCES.
OAUTH_JWT_JWKS_URInoneExplicit JWKS URL.
OAUTH_JWT_OPENID_CONFIGURATION_URL{issuer}/.well-known/openid-configurationOpenID discovery document URL.
OAUTH_JWT_ALLOWED_ALGSRS256Comma-separated allowed signing algorithms.
OAUTH_JWT_CACHE_TTL_SECONDS3600JWKS/discovery cache TTL.
OAUTH_JWT_LEEWAY_SECONDS60Clock-skew allowance for time claims.
OAUTH_JWT_SCOPE_CLAIMSscope,scp,scopesClaims inspected for OAuth scopes.
OAUTH_JWT_REQUIRED_SCOPESemptyComma-separated scopes required for JWT access.
OAUTH_JWT_LOG_VALIDATION_ERRORSfalseLogs JWT validation failures when enabled.
OAUTH_JWT_ALLOW_MISSING_KIDtrueAllows validation when a token header has no kid.
OAUTH_JWT_USER_LOOKUPemail:email,preferred_username:email,upn:email,sub:emailOrdered claim:user_column pairs for resolving local users.
OAUTH_JWT_SCOPE_GATE_BRIDGEtrueLets matching JWT scopes authorize Laravel Gate checks.

Login And Fortress Auth

Defined in config/auth.php, config/fortress-auth.php, and config/services.php.

VariableDefaultPurpose
LOGIN_BASIC_ENABLEDtrueEnables local/basic login option.
LOGIN_ENTRA_ENABLEDfalseEnables Entra login option.
LOGIN_GOOGLE_ENABLEDfalseEnables Google login option.
FORTRESS_USER_MODELapp user provider modelUser model for the Fortress auth package.
FORTRESS_AUTH_GUARDapp default guardGuard used by Fortress auth.
FORTRESS_AUTH_SUCCESS_REDIRECT/Redirect after successful Fortress auth.
FORTRESS_AUTH_FAILURE_REDIRECT/auth/fortress/loginRedirect after failed Fortress auth.
FORTRESS_BASE_URLFORTRESS_HOSTBase URL for Fortress API calls.
FORTRESS_HOSTnoneFortress auth host and fallback JWT issuer.
FORTRESS_CLIENT_IDnoneFortress OAuth client ID.
FORTRESS_CLIENT_SECRETnoneFortress OAuth client secret.
FORTRESS_REDIRECT_URIFORTRESS_CALLBACKOAuth redirect URI.
FORTRESS_CALLBACKnoneLegacy Socialite redirect/callback value.
FORTRESS_USER_ENDPOINTnoneFortress user-info endpoint.
FORTRESS_SCOPESemptyComma-separated OAuth scopes for Fortress.

Escalated Ticketing

Defined in config/escalated.php.

VariableDefaultPurpose
ESCALATED_MODEself-hostedTicket storage/sync mode: self-hosted, synced, or cloud.
ESCALATED_USER_MODELApp\Models\UserUser model class Escalated should use.
ESCALATED_USER_DISPLAY_COLUMNnameUser column used for display/search.
ESCALATED_API_URLhttps://cloud.escalated.dev/api/v1Hosted/cloud API URL.
ESCALATED_API_KEYnoneHosted/cloud API key.
ESCALATED_UI_ENABLEDtrueEnables the bundled Escalated UI.
ESCALATED_TABLE_PREFIXescalated_Prefix for Escalated tables.
ESCALATED_WEBHOOK_URLnoneOutbound notification webhook URL.
ESCALATED_EMAIL_DOMAINnoneDomain used for ticket Message-ID and signed Reply-To addresses.
ESCALATED_EMAIL_INBOUND_SECRETemptyHMAC secret for signed inbound Reply-To addresses.
ESCALATED_PLUGINS_ENABLEDtrueEnables Escalated plugin runtime.
ESCALATED_API_ENABLEDfalseEnables the Escalated REST API.
ESCALATED_API_RATE_LIMIT60Escalated REST API rate limit.
ESCALATED_BROADCASTING_ENABLEDfalseEnables real-time ticket event broadcasting.
ESCALATED_CHAT_ENABLEDfalseEnables live chat ticket mode.
ESCALATED_INBOUND_EMAILfalseEnables inbound email processing.
ESCALATED_INBOUND_ADAPTERmailgunInbound email adapter: mailgun, postmark, ses, or imap.
ESCALATED_INBOUND_ADDRESSsupport@example.comPublic inbound support address.
ESCALATED_MAILGUN_SIGNING_KEYnoneMailgun inbound webhook signing key.
ESCALATED_POSTMARK_INBOUND_TOKENnonePostmark inbound token.
ESCALATED_SES_REGIONus-east-1SES inbound region.
ESCALATED_SES_TOPIC_ARNnoneSES SNS topic ARN.
ESCALATED_IMAP_HOSTnoneIMAP host for polling inbound mail.
ESCALATED_IMAP_PORT993IMAP port.
ESCALATED_IMAP_ENCRYPTIONsslIMAP encryption mode.
ESCALATED_IMAP_USERNAMEnoneIMAP username.
ESCALATED_IMAP_PASSWORDnoneIMAP password.
ESCALATED_IMAP_MAILBOXINBOXIMAP mailbox to poll.

Filament

Defined in config/filament.php.

VariableDefaultPurpose
FILAMENT_CORE_PATHfilamentCore Filament route path.
FILAMENT_DOMAINnoneDomain constraint for Filament routes.
FILAMENT_AUTH_GUARDwebGuard used by Filament authentication.
FILAMENT_FILESYSTEM_DRIVERs3Default disk for Filament file uploads.

Activity Log

Defined in config/activitylog.php.

VariableDefaultPurpose
ACTIVITY_LOGGER_ENABLEDtrueEnables Spatie activity logging.
ACTIVITY_LOGGER_TABLE_NAMEactivity_logActivity log table name.
ACTIVITY_LOGGER_DB_CONNECTIONnoneDatabase connection for activity log records.

AI Providers

Defined in config/ai.php.

VariableDefaultPurpose
ANTHROPIC_API_KEYnoneAnthropic API key.
AZURE_OPENAI_API_KEYnoneAzure OpenAI API key.
AZURE_OPENAI_URLnoneAzure OpenAI endpoint.
AZURE_OPENAI_API_VERSION2024-10-21Azure OpenAI API version.
AZURE_OPENAI_DEPLOYMENTgpt-4oAzure chat/model deployment name.
AZURE_OPENAI_EMBEDDING_DEPLOYMENTtext-embedding-3-smallAzure embedding deployment name.
COHERE_API_KEYnoneCohere API key.
DEEPSEEK_API_KEYnoneDeepSeek API key.
ELEVENLABS_API_KEYnoneElevenLabs API key.
GEMINI_API_KEYnoneGemini API key.
GROQ_API_KEYnoneGroq API key.
JINA_API_KEYnoneJina API key.
MISTRAL_API_KEYnoneMistral API key.
OLLAMA_API_KEYemptyOptional Ollama API key.
OLLAMA_BASE_URLhttp://localhost:11434Ollama API base URL.
OPENAI_API_KEYnoneOpenAI API key.
OPENAI_URLhttps://api.openai.com/v1OpenAI-compatible base URL.
OPENROUTER_API_KEYnoneOpenRouter API key.
VOYAGEAI_API_KEYnoneVoyage AI API key.
XAI_API_KEYnonexAI API key.

Defined in config/scout.php.

VariableDefaultPurpose
SCOUT_DRIVERalgoliaScout search driver.
SCOUT_PREFIXemptyPrefix for index names.
SCOUT_QUEUEtrueQueues index updates.
SCOUT_IDENTIFYfalseSends authenticated user metadata to supported search providers.
ALGOLIA_APP_IDemptyAlgolia application ID.
ALGOLIA_SECRETemptyAlgolia admin/write key.
ALGOLIA_SEARCH_KEYALGOLIA_SEARCHAlgolia search-only key.
ALGOLIA_SEARCHemptyLegacy fallback for ALGOLIA_SEARCH_KEY.
MEILISEARCH_HOSThttp://localhost:7700Meilisearch host.
MEILISEARCH_KEYnoneMeilisearch API key.
TYPESENSE_API_KEYxyzTypesense API key.
TYPESENSE_HOSTlocalhostTypesense host.
TYPESENSE_PORT8108Typesense port.
TYPESENSE_PATHemptyTypesense path prefix.
TYPESENSE_PROTOCOLhttpTypesense protocol.
TYPESENSE_CONNECTION_TIMEOUT_SECONDS2Typesense connection timeout.
TYPESENSE_HEALTHCHECK_INTERVAL_SECONDS30Typesense health-check interval.
TYPESENSE_NUM_RETRIES3Typesense retry count.
TYPESENSE_RETRY_INTERVAL_SECONDS1Typesense retry interval.
TYPESENSE_IMPORT_ACTIONupsertTypesense import action.

Media Library

Defined in config/media-library.php.

VariableDefaultPurpose
MEDIA_DISKlocalDisk for Spatie Media Library files.
MEDIA_QUEUEmediaQueue name for media jobs.
QUEUE_CONVERSIONS_BY_DEFAULTtrueQueues conversions unless overridden.
QUEUE_CONVERSIONS_AFTER_DB_COMMITtrueDefers conversion jobs until DB commit.
IMAGE_DRIVERgdImage manipulation driver.
FFMPEG_PATH/usr/bin/ffmpegFFmpeg executable path.
FFPROBE_PATH/usr/bin/ffprobeFFprobe executable path.
MEDIA_DOWNLOADER_SSLtrueEnables SSL verification for remote downloads.
ENABLE_MEDIA_LIBRARY_VAPOR_UPLOADSfalseEnables Vapor-style uploads.
MEDIA_PREFIXemptyPath prefix for media files.
FORCE_MEDIA_LIBRARY_LAZY_LOADINGtrueForces lazy loading behavior in media rendering.

Third-Party Services

Defined in config/services.php, except where noted.

VariableDefaultPurpose
SMARTY_AUTH_IDnoneSmarty auth ID.
SMARTY_AUTH_TOKENnoneSmarty auth token.
GOOGLE_MAPS_API_KEYnoneGoogle Maps API key.
GOOGLE_CALENDAR_AUTH_PROFILEservice_accountGoogle Calendar auth profile from config/google-calendar.php.
GOOGLE_CALENDAR_IDnoneGoogle Calendar ID from config/google-calendar.php.
RADAR_SECRET_KEYnoneRadar server key.
RADAR_PUBLISHABLE_KEYnoneRadar client key.
RADAR_DATA_TAGnoneRadar data tag.
OPENWEATHER_KEYnoneOpenWeather API key.
REALWORK_URLnoneRealWork Labs base URL.
REALWORK_KEYnoneRealWork Labs API key.
RECAPTCHA_SITE_KEYnonereCAPTCHA site key.
RECAPTCHA_SECRET_KEYnonereCAPTCHA secret key.
RECAPTCHA_VERSIONv3reCAPTCHA version.
SIGNATUREAPI_KEYnoneSignatureAPI key.
SIGNATUREAPI_DOCnoneSignatureAPI template/document ID.
CALCOM_ENABLEDfalseEnables Cal.com integration hooks.
CALCOM_DOMAINhttps://app.cal.comCal.com base URL.
ZEBRA_IPnoneZebra printer IP address.
ZEBRA_DUMPfalseDumps Zebra output instead of sending to printer.
PAYMENTS_SUMMARY_SMS_USER_IDSemptyComma-separated user IDs for payment summary SMS recipients from config/payments-summary.php.

Stripe

Defined in config/services.php and config/stripe-webhooks.php.

VariableDefaultPurpose
STRIPE_SECRETnoneStripe secret key.
STRIPE_PUB_KEYnoneStripe publishable key.
STRIPE_TERMINAL_IDnoneStripe Terminal location/reader identifier used by the app.
STRIPE_PLATFORM_PUB_KEYnonePlatform publishable key.
STRIPE_PLATFORM_SECRETnonePlatform secret key.
STRIPE_PLATFORM_CLIENT_IDnoneStripe Connect platform client ID.
STRIPE_WEBHOOK_SECRETnoneStripe webhook signing secret.
STRIPE_WEBHOOK_CONNECTIONnoneQueue connection for Stripe webhook jobs.
STRIPE_WEBHOOK_QUEUEnoneQueue name for Stripe webhook jobs.
STRIPE_SIGNATURE_VERIFYtrueEnables Stripe webhook signature verification.

Twilio

Defined in config/services.php and config/twilio-notification-channel.php.

VariableDefaultPurpose
TWILIO_SIDnoneTwilio account SID.
TWILIO_TOKENnoneTwilio auth token.
TWILIO_FROMnoneDefault sending phone number.
TWILIO_ALPHA_SENDERnoneAlphanumeric sender ID for notification channel.
TWILIO_SMS_SERVICE_SIDnoneMessaging Service SID.
TWILIO_DEBUG_TOnoneDebug recipient override for notification channel.
TWILIO_COMPLIANCE_WEBHOOK_URLnonePublic compliance webhook URL.
TWILIO_INBOUND_WEBHOOK_URLnonePublic inbound message webhook URL.
TWILIO_STATUS_WEBHOOK_URLnonePublic status callback webhook URL.

QuickBooks

Defined in config/services.php.

VariableDefaultPurpose
QBO_CLIENT_IDnoneQuickBooks OAuth client ID.
QBO_CLIENT_SECRETnoneQuickBooks OAuth client secret.
QBO_REDIRECT_URInoneQuickBooks OAuth redirect URI.
QBO_ENVnoneQuickBooks environment.
QBO_SEARCH_REQUIREDfalseRequires search behavior before sync actions where used.
QBO_WEBHOOK_SECRETnoneQuickBooks webhook verifier secret.

Review Management

Defined in config/services.php.

VariableDefaultPurpose
REVIEW_MANAGEMENT_URLhttps://reviews.shadesoftx.comReview management base URL.
REVIEW_MANAGEMENT_TOKENnoneReview management API token.
REVIEW_MANAGEMENT_CUSTOMER_TYPEresidentialCustomer type sent to review management.
REVIEW_MANAGEMENT_TAG_IDSemptyComma-separated tag IDs.
REVIEW_MANAGEMENT_PROJECT_ENDPOINT/api/projectsProject upsert endpoint.
REVIEW_MANAGEMENT_LOCATIONS_ENDPOINT/api/locationsLocations endpoint.
REVIEW_MANAGEMENT_MEDIA_ENDPOINT/api/projects/%s/mediaProject media endpoint template.
REVIEW_MANAGEMENT_REVIEW_REQUEST_ENDPOINT/api/projects/%s/review-requestsReview request endpoint template.
REVIEW_MANAGEMENT_CREATE_REVIEW_REQUESTtrueAutomatically creates review requests.
REVIEW_MANAGEMENT_REVIEW_REQUEST_SEND_ATnoneOptional scheduled send time.
REVIEW_MANAGEMENT_TIMEOUT10HTTP timeout in seconds.
REVIEW_MANAGEMENT_RETRY_TIMES2HTTP retry count.
REVIEW_MANAGEMENT_RETRY_SLEEP250Retry sleep in milliseconds.

RingCentral

Defined in config/services.php.

VariableDefaultPurpose
RINGCENTRAL_SERVERhttps://platform.ringcentral.comRingCentral platform URL.
RINGCENTRAL_CLIENT_IDnoneRingCentral client ID.
RINGCENTRAL_CLIENT_SECRETnoneRingCentral client secret.
RINGCENTRAL_JWT_TOKENnoneRingCentral JWT auth token.
RINGCENTRAL_WEBHOOK_URLnonePublic webhook URL.
RINGCENTRAL_WEBHOOK_VALIDATION_TOKENnoneWebhook validation token.
RINGCENTRAL_WEBHOOK_RENEWAL_THRESHOLD86400Seconds before expiration when webhook renewal should run.
RINGCENTRAL_WEBHOOK_EVENT_FILTERS/restapi/v1.0/account/~/telephony/sessionsComma-separated webhook event filters.

AWS And APN

Defined in config/services.php, config/filesystems.php, config/queue.php, config/mail.php, and config/broadcasting.php.

VariableDefaultPurpose
AWS_ACCESS_KEY_IDnoneAWS access key used by S3, SQS, SES, and app AWS service clients.
AWS_SECRET_ACCESS_KEYnoneAWS secret key used by S3, SQS, SES, and app AWS service clients.
AWS_DEFAULT_REGIONus-east-1 in service configsAWS region.
AWS_BUCKETnonePrivate/default S3 bucket.
AWS_BUCKET_PUBLICnonePublic S3 bucket.
AWS_URLnonePublic S3 URL override.
AWS_ENDPOINTnoneS3-compatible endpoint override.
AWS_USE_PATH_STYLE_ENDPOINTfalseEnables path-style S3 URLs.
AWS_ROOTucust/S3 root prefix for configured disks.
APN_KEY_IDnoneApple Push Notification key ID.
APN_TEAM_IDnoneApple developer team ID.
APN_BUNDLE_IDnoneApp bundle ID for APNs.
APN_PRIVATE_KEYnoneAPNs private key content.
APN_PRIVATE_SECRETnoneAPNs private key secret/passphrase.
APN_PRODUCTIONfalseSends APNs through production when enabled.

Optional Laravel Packages And Dev Tools

These are not part of Tempr business logic, but the repo has package config files for them.

VariableDefaultPurpose
TELESCOPE_DOMAINnullTelescope route domain.
TELESCOPE_PATHtelescopeTelescope route path.
TELESCOPE_DRIVERdatabaseTelescope storage driver.
TELESCOPE_ENABLEDtrueEnables Telescope collection.
TELESCOPE_BATCH_WATCHERtrueEnables batch watcher.
TELESCOPE_CACHE_WATCHERtrueEnables cache watcher.
TELESCOPE_CLIENT_REQUEST_WATCHERtrueEnables outbound HTTP client request watcher.
TELESCOPE_COMMAND_WATCHERtrueEnables Artisan command watcher.
TELESCOPE_DUMP_WATCHERtrueEnables dump watcher.
TELESCOPE_DUMP_WATCHER_ALWAYSfalseAlways records dump watcher output.
TELESCOPE_EVENT_WATCHERtrueEnables event watcher.
TELESCOPE_EXCEPTION_WATCHERtrueEnables exception watcher.
TELESCOPE_GATE_WATCHERtrueEnables authorization gate watcher.
TELESCOPE_JOB_WATCHERtrueEnables queued job watcher.
TELESCOPE_LOG_WATCHERtrueEnables log watcher.
TELESCOPE_MAIL_WATCHERtrueEnables mail watcher.
TELESCOPE_MODEL_WATCHERtrueEnables model watcher.
TELESCOPE_NOTIFICATION_WATCHERtrueEnables notification watcher.
TELESCOPE_QUERY_WATCHERtrueEnables query watcher.
TELESCOPE_REDIS_WATCHERtrueEnables Redis watcher.
TELESCOPE_REQUEST_WATCHERtrueEnables request watcher.
TELESCOPE_RESPONSE_SIZE_LIMIT64Request watcher response size limit.
TELESCOPE_SCHEDULE_WATCHERtrueEnables scheduler watcher.
TELESCOPE_VIEW_WATCHERtrueEnables view watcher.
LIVEWIRE_TEMPORARY_FILE_UPLOAD_DISKdefault filesystem diskDisk used for Livewire temporary uploads.
HORIZON_DOMAINnoneHorizon route domain.
HORIZON_PATHhorizonHorizon route path.
PASSPORT_PRIVATE_KEYnoneInline Passport private key.
PASSPORT_PUBLIC_KEYnoneInline Passport public key.
PASSPORT_CONNECTIONnonePassport database connection.
PENNANT_STOREdatabaseLaravel Pennant feature flag store.
DEBUGBAR_ENABLEDnullEnables Laravel Debugbar.
DEBUGBAR_OPEN_STORAGEtrueKeeps Debugbar storage open.
DEBUGBAR_EDITORIGNITION_EDITOR or phpstormEditor used by Debugbar links.
DEBUGBAR_REMOTE_SITES_PATHnoneRemote path mapping for Debugbar.
DEBUGBAR_LOCAL_SITES_PATHIGNITION_LOCAL_SITES_PATHLocal path mapping for Debugbar.
DEBUGBAR_THEMEdarkDebugbar theme.
SOLO_THEMEdarkSolo theme.
SOLO_KEYBINDINGdefaultSolo keybinding preset.
SOLO_DUMP_SERVER_HOSTtcp://127.0.0.1:9984Solo dump server host.

Config-Only Surfaces

These files are deploy-relevant but do not currently define env-backed settings:

ConfigWhat it controls
config/apexcharts.phpApexCharts package defaults.
config/basic-perms.phpLocal permission/bootstrap definitions.
config/blade-icons.phpBlade icon sets and aliases.
config/cors.phpCORS policy.
config/model-states.phpSpatie model state package configuration.
config/nav.phpApp sidebar navigation.
config/notification-log.phpNotification log package settings.
config/pstruct.phpPermission/resource structure discovery settings.
config/settings.phpSpatie settings package behavior.
config/trading.phpEDI/trading driver class registry.
config/webhook-client.phpSpatie webhook client behavior.
config/webhook-server.phpSpatie webhook server behavior.