Environment template: apps/web/.env.example. Lando injects defaults via .lando.yml.
Application #
| Variable | Controls |
|---|---|
APP_ENV, APP_KEY, APP_URL | Core Laravel config |
VITE_APP_ENV | Frontend build environment |
DB_* | MySQL connection |
KPI_DATABASE, CLICKHOUSE_* | KPI storage backend (MySQL or ClickHouse) |
Integrations #
| Variable | Controls |
|---|---|
GOOGLE_CLIENT_ID/SECRET | OAuth (login, Business Profile) |
OPENAI_API_KEY, CF_AI_GATEWAY_* | AI assistant and widget agent |
EVENTS_SERVICE_URL, DATA_SERVICE_URL | Go microservice URLs |
MTAS_API_TOKEN | MTAS integration token |
REV_MGMT_ENGINE_URL, REV_MGMT_RAPIDSTOR_*, REV_MGMT_WEBHOOK_SECRET | Revenue management engine + RapidStor |
AGENT_RUNTIME_URL, AGENT_RUNTIME_PUBLIC_URL, AGENT_RUNTIME_SECRET, AGENT_RUNTIME_PRODUCT_ID | Managed-agents runtime service (config/services.php → agent_runtime) |
R2_* | Cloudflare R2 object storage |
VITE_RAPIDSTOR_FRONTEND_URL | RapidStor v2 frontend base for Tenant Journey editor preview iframe (default: Cloudflare Pages prod URL) |
RAPIDSTOR_FRONTEND_TRANSLATIONS_URL | Public JSON endpoint for scheduled translations:sync (RapidStor v2 /api/translations Page Function) |
CONFLUENCE_API_KEY, CONFLUENCE_HELPDESK_FOLDER_ID | Confluence helpdesk integration (config/services.php → confluence) |
Realtime #
| Variable | Controls |
|---|---|
BROADCAST_CONNECTION=reverb | Broadcast driver |
REVERB_*, VITE_REVERB_* | Reverb server and client config |
WIDGET_MCP_URL | Widget MCP endpoint |
Rev-mgmt engine #
Config: apps/rev-mgmt-engine/.env.example. Production boot-guard (EnforceProductionSafety) refuses server start unless SiteLink wrapper is live, JWT_SECRET is set, and REV_MGMT_DEMO_NOW is unset. Opt out in dev/CI with REV_MGMT_ALLOW_UNSAFE=1 (set in Lando and .env.example).
| Variable | Controls |
|---|---|
REV_MGMT_ECRI_ENABLED | Existing-customer rate-increase (ECRI) layer; default off (not production-ready) |
REV_MGMT_DEMO_NOW | Frozen demo clock (unset = real wall-clock in production) |
REV_MGMT_ALLOW_UNSAFE | Skip production safety checks (dev/CI only) |
REV_MGMT_WRAPPER_MODE | SiteLink wrapper mode; must be live in production |
JWT_SECRET | Authenticates forwarded RapidStor token for rate pushes |
Feature flags (Pennant) #
Store: PENNANT_STORE (default database). Defined in FeatureServiceProvider — one flag per Applications case plus global FeatureFlag enum values. Scoped per corporation; states: HIDDEN, INTERNAL, DISABLED, ENABLED, COMING_SOON.
Global-only flags in FeatureFlag enum include rapidstor_internal_settings (ON → native RapidStor Settings screen for all; INTERNAL → admins only; OFF → legacy external link).