.env.example
Set these on your host before deploying. Each platform has an “Environment Variables” section in the deploy flow. (showing first 20, more exist in .env.example)
SECRET_KEY_BASE
secret
Rails secret key base (generate with: ruby -rsecurerandom -e 'puts SecureRandom.hex(64)')
ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY
secret
Active Record Encryption (generate with: bin/rails db:encryption:init)
ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY
secret
ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT
secret
GMAIL_USERNAME
Gmail IMAP/SMTP
GMAIL_PASSWORD
secret
GMAIL_IMAP_HOST
GMAIL_SMTP_HOST
RAILS_INBOUND_EMAIL_PASSWORD
secret
Action Mailbox (Rails expects this exact env var name)
OPENROUTER_API_KEY
secret
OpenRouter API (for LLM analysis)
VIRUSTOTAL_API_KEY
secret
VirusTotal API
WHOISXML_API_KEY
secret
WhoisXML API
BRAVE_SEARCH_API_KEY
secret
Brave Search API (for entity verification OSINT)
BRAVE_SEARCH_RATE_LIMIT
THREATFOX_AUTH_KEY
secret
Community Threat Intelligence Reporting (all optional)
ABUSEIPDB_API_KEY
secret
SPAMCOP_SUBMISSION_ADDRESS
MAX_SUBMISSIONS_PER_HOUR
Per-sender rate limiting (submissions per hour, 0 = disabled)
DNSBL_SKIP
Comma-separated DNSBL zones to skip (useful on VPS hosts whose IP ranges are refused by Spamhaus/URIBL free tier). Example:…
ADMIN_EMAIL
Admin email (receives commands, manages allowed senders)