Environment variables

Required

Variable	Description
ROOT_DOMAIN	The domain Pipebase serves on. e.g. pipebase.example.com. Sub-domains derived from this unless overridden.
LETSENCRYPT_EMAIL	Contact email for Let’s Encrypt cert notifications. Use a real inbox.
PIPEBASE_DEPLOY_TOKEN	32-byte hex bearer token between designer ↔ runtime /_api/*. Generate fresh per install: openssl rand -hex 32.
PIPEBASE_JWT_SECRET	HMAC-SHA256 signing key for OAuth-issued JWTs. Designer + runtime must see the same value.

Optional — host overrides

Defaults follow the <service>.<root> pattern.

Variable	Default	Description
DESIGNER_HOST	designer.${ROOT_DOMAIN}	Hostname for the designer SPA + REST API
RUNTIME_HOST	runtime.${ROOT_DOMAIN}	Hostname for the runtime’s public HTTP triggers + management API
DOCS_HOST	docs.designer.${ROOT_DOMAIN}	Hostname for this docs site

Optional — runtime/designer wiring

Variable	Default	Description
PIPEBASE_RUNTIME_URL	http://pipebase-runtime:8080	Internal URL the designer dials. Docker DNS in compose.
PIPEBASE_RUNTIME_PUBLIC_URL	https://${RUNTIME_HOST}	Public URL surfaced in the SPA so users see where their HTTP triggers are reachable.
PIPEBASE_DATA_DIR	/data/flows	Disk root for designer flow storage inside the container
PIPEBASE_RUNTIME_ROOT_DOMAIN	${ROOT_DOMAIN}	Used by the managed-runtime feature when provisioning new runtime containers at <env>.<this-value>
PIPEBASE_RUNTIME_IMAGE	pipebase-runtime:0.4.5	Image tag the managed-runtime feature uses for new containers
PIPEBASE_RUNTIME_NETWORK	coolify	Docker network for new runtime containers
PIPEBASE_RUNTIME_CERT_RESOLVER	letsencrypt	Traefik cert resolver name for new runtimes
PIPEBASE_RUNTIME_ENTRYPOINT	https	Traefik entrypoint for new runtimes
PIPEBASE_DOCKER_SOCKET	/var/run/docker.sock	Path to the Docker socket inside the designer container

Optional — Pulsar mesh (only with --profile mesh)

Variable	Default	Description
PIPEBASE_PULSAR_URL	pulsar://pipebase-pulsar:6650	Binary protocol endpoint
PIPEBASE_PULSAR_ADMIN_URL	http://pipebase-pulsar:8080	Admin REST API endpoint
PIPEBASE_PULSAR_CLUSTER	(unset)	Default cluster name for the bootstrap runtime

Optional — release & diagnostics

Variable	Default	Description
PIPEBASE_VERSION	(unset → local build)	Pin a specific GHCR image version when using docker-compose.prod.yml. e.g. v0.5.0
LOG_LEVEL	info	Pino log level: trace, debug, info, warn, error, fatal, silent

Source of truth

The committed .env.example at the repo root is the authoritative reference — this table mirrors it. If they diverge, the file wins; open an issue.