dontriskit/tracecat

Set these on your host before deploying. Each platform has an “Environment Variables” section in the deploy flow. (showing first 20, more exist in .env.example)

• LOG_LEVEL Shared env vars
• COMPOSE_PROJECT_NAME
• PUBLIC_APP_PORT Shared URL env vars Note: you can replace the port with another port (e.g. 8082) In production, however, Caddy should be placed behind a…
• PUBLIC_APP_URL
• PUBLIC_API_URL
• INTERNAL_API_URL
• INTERNAL_EXECUTOR_URL
• BASE_DOMAIN -- Caddy env vars
• ADDRESS
• TRACECAT__APP_ENV App and DB env vars One of `development`, `staging`, or `production`
• TRACECAT__DB_ENCRYPTION_KEY secret Used to encrypt/decrypt sensitive keys in the database Can be generated using `python -c "from cryptography.fernet import Fernet;…
• TRACECAT__SERVICE_KEY secret Used to authenticate with Tracecat services Can be generated using `openssl rand -hex 32`
• TRACECAT__SIGNING_SECRET secret Used to generate private webhook URLs Can be generated using `openssl rand -hex 32`
• TRACECAT__API_URL API Service URL
• TRACECAT__API_ROOT_PATH Root path to deal with extra path prefix behind the reverse proxy
• TRACECAT__PUBLIC_APP_URL This the public URL for the frontend
• TRACECAT__PUBLIC_API_URL This is the public URL for incoming webhooks If you wish to expose your webhooks to the internet, you can use a tunneling service like…
• TRACECAT__ALLOW_ORIGINS CORS (comman separated string of allowed origins)
• TRACECAT__DB_SSLMODE Postgres SSL model
• TRACECAT__ALLOWED_EMAIL_ATTRIBUTES Email Sanitization Key-value pairs of allowed attributes to add to the email body e.g. {"*": {"style"}} # This allows all tags to have a…