Chapter 5 - Configuration Reference

Missing environment file caveat

No .env or .env.example exists in repository. The install scripts expect .env.example, and deployment must manually build. Variable names below are harvested from all config/*.php files.

Group and purpose summary; values must use placeholders. Do not publish secrets.

Core

• APP_NAME, APP_ENV, APP_KEY, APP_PREVIOUS_KEYS, APP_DEBUG, APP_URL, APP_LOCALE, APP_FALLBACK_LOCALE, APP_FAKER_LOCALE, APP_MAINTENANCE_DRIVER, APP_MAINTENANCE_STORE, IS_DEMO, IS_SAAS.

Localization

• config default UTC; config/timezones.php, format etc controlled by convenience file/help.

Auth

• AUTH_GUARD, AUTH_MODEL, AUTH_PASSWORD_BROKER, AUTH_PASSWORD_RESET_TOKEN_TABLE, AUTH_PASSWORD_TIMEOUT.

Database/cache/infra

• DB: DB_CONNECTION, DB_URL, DB_HOST, DB_PORT, DB_DATABASE, DB_USERNAME, DB_PASSWORD, DB_SOCKET, DB_CHARSET, DB_COLLATION, DB_FOREIGN_KEYS.
• Redis and cluster connections (REDIS_*).
• Cache store and lock (CACHE_STORE, CACHE_PREFIX, DB_CACHE_TABLE, MEMCACHED_*, DynamoDB cache vars).
• Queue driver and queue names (QUEUE_CONNECTION, QUEUE_FAILED_DRIVER, SQS, DB, beanstalk vars).
• Sessions (SESSION_DRIVER, store, DB_TABLE, lifetime, domain etc).
• Filesystem keys for S3/local (FILESYSTEM_DISK, AWS_ACCESS_KEY_ID, AWS_SECRET, AWS_DEFAULT_REGION, AWS_BUCKET, AWS_URL, AWS_ENDPOINT, AWS_USE_PATH_STYLE_ENDPOINT).

Mail

• MAIL_MAILER, MAIL_URL, MAIL_HOST, MAIL_PORT, MAIL_SCHEME, MAIL_USERNAME, MAIL_PASSWORD, MAIL_FROM_ADDRESS, MAIL_FROM_NAME, MAIL_EHLO_DOMAIN, MAIL_LOG_CHANNEL.
• Postmark/Sendgrid? Resend (POSTMARK_*, RESEND_KEY).
• MAIL_LOG_CHANNEL, AWS SES.
• Slack bot user token/channel (SLACK_BOT_USER_OAUTH_TOKEN, SLACK_DEFAULT_CHANNEL).

Payment gateways core

• Gateway credentials map either in .env or DB; physical variables outside code only via ENV following framework config:
• PAYTABS_PROFILE_ID, PAYTABS_SERVER_KEY, PAYTABS_CURRENCY, PAYTABS_REGION.
• .env variables shown in key list are configured via config/services.
• Paytabs keys exist in config files; other gateway settings stored via UI in DB (table payment_settings) by user/workspace, so there may not be an ENV line for each one.
• SESSION_DOMAIN relevant for Inertia cookie-based.

IMAP

• EMAIL_DEV_MODE, IMAP_DEFAULT_ACCOUNT, IMAP_HOST, IMAP_PORT, IMAP_PROTOCOL, IMAP_ENCRYPTION, IMAP_VALIDATE_CERT, IMAP_USERNAME and IMAP_PASSWORD. WARNING: fallback values in config/imap.php are visible and should be considered insecure.

OpenAI

• OPENAI_API_KEY, OPENAI_DEFAULT_MODEL, OPENAI_TIMEOUT, OPENAI_MAX_RETRIES.

Security / reporting

• LB_KEY, LB_PROJECT_KEY, LB_SERVER, LB_VERIFY_SSL.

Build UI (separate)

• BUILD_API_BASE and PROJECT_ROOT, via build-ui helper getenv.

Vite dev

• VITE_APP_NAME; potential VITE_STRIPE_KEY for gateway JS if needed frontend. Integration uses component-level config.

Laravel-specific device mode

• config/laravel-impersonate.php, config/installer.php, config/media_library.php, config/verification.php support environment? likely defaults.

Recommendation

• Treat all secrets as deployment-local and manage through a proper secret delivery process. The repository is not prepared to carry these.>