Skip to main content
Environment variables override their corresponding config file values. For the control plane, CLI flags are not supported beyond --config and --generate-config — use environment variables or the config file instead.

Control plane

VariableConfig fieldNotes
PORTserver.port
DATABASE_DRIVERdatabase.driver"sqlite" or "postgres"
DATABASE_URLdatabase.urlAlso sets driver to "postgres"
DB_PATHdatabase.pathSQLite file path
SUBNETnetwork.subnet
EXTERNAL_INTERFACEnetwork.external_interface
ENABLE_BRIDGEnetwork.bridge.enabled"true" to enable
BRIDGE_SUBNETnetwork.bridge.subnet
ENABLE_PROXYproxy.enabled"true" to enable
PROXY_DOMAINproxy.domain
PROXY_HTTP_PORTproxy.http_port
PROXY_HTTPS_PORTproxy.https_port
PROXY_TLS_EMAILproxy.tls.emailAlso enables TLS
PROXY_TLS_CACHE_DIRproxy.tls.cache_dir
HEALTH_CHECK_INTERVALproxy.health.interval
WORKER_POOL_SIZEworkers.pool_size
SCHEDULER_STRATEGYscheduler.strategy"spread" or "pack"
AUTH_DATABASE_URLauth.database_url
SECRETS_MASTER_KEY_PATHsecrets.master_key_path
SECRETS_METADATA_SERVICE_ENABLEDsecrets.metadata_service_enabled"false" to disable
SECRETS_METADATA_SERVICE_ADDRESSsecrets.metadata_service_address
CORS_ALLOWED_ORIGINScors.allowed_originsComma-separated, supports wildcards
SKIP_STARTUP_CLEANUP(direct)Set to "1" to skip stale process cleanup
SOCKET_DIR(direct)Firecracker socket directory (default: /tmp)

Host agent

VariableConfig fieldNotes
AGENT_HOST_IDhost_id
AGENT_GRPC_PORTgrpc_port
AGENT_CONTROL_PLANE_URLcontrol_plane_url
AGENT_LICENSE_KEYlicense_key
AGENT_REGIONregion
AGENT_DATACENTERdatacenter
AGENT_CAPACITY_CPUScapacity_cpus
AGENT_CAPACITY_MEMORY_MBcapacity_memory_mb
AGENT_IMAGE_CACHE_DIRimage_cache_dir
AGENT_IMAGE_CACHE_MAX_GBimage_cache_max_gb
SOCKET_DIR(direct)Socket directory for cleanup (default: /tmp)

Override precedence

For the control plane: config file < environment variables. CLI flags (--config, --generate-config) control which config file is loaded but don’t override individual values. For the host agent: config file < environment variables < CLI flags. CLI flags take highest precedence when provided.