Skip to main content
NekoHub is configured through environment variables. With Docker Compose, copy .env.example to .env and update the values.
Do not use placeholder values in production. Replace Auth__Jwt__Secret, Auth__BootstrapSuperAdmin__Password, and all API keys before first deployment.

​
Database

​
Persistence__Database__ConnectionString
string
required
PostgreSQL connection string.
​
Persistence__Database__Provider
string
default:"postgresql"
Database provider. The current codebase supports postgresql.

​
JWT

​
Auth__Jwt__Secret
string
required
JWT signing secret. Use at least 32 characters.
​
Auth__Jwt__Issuer
string
default:"NekoHub"
JWT issuer (iss) claim. Signed and validated by the backend.
​
Auth__Jwt__Audience
string
default:"NekoHub.Admin"
JWT audience (aud) claim. Signed and validated by the backend.
​
Auth__Jwt__AccessTokenMinutes
number
default:"15"
Access token lifetime in minutes.
​
Auth__Jwt__RefreshTokenDays
number
default:"30"
Refresh token lifetime in days.

​
Bootstrap super admin

​
Auth__BootstrapSuperAdmin__Username
string
required
Username for the initial SuperAdmin.
​
Auth__BootstrapSuperAdmin__Password
string
required
Password for the initial SuperAdmin.
Bootstrap only runs when the database has no SuperAdmin. Changing these values later does not overwrite an existing account.

​
API key

​
Auth__ApiKey__Enabled
boolean
default:"false"
Enables API key authentication. When disabled, /mcp and Bearer API key requests are rejected.
​
Auth__ApiKey__Keys__0
string
The first API key. Add more keys as Keys__1, Keys__2, and so on.

​
Storage

​
Storage__Provider
string
required
Runtime provider selection. Supported values are local, s3, and github-repo.
​
Storage__PublicBaseUrl
string
required
Public URL prefix used for browser-reachable content links.
​
Storage__Local__RootPath
string
default:"/app/storage/assets"
Local filesystem path used by the local provider.

​
Frontend

​
FRONTEND_VITE_API_BASE_URL
string
required
Base URL the browser uses to reach the API. Leave empty for same-origin reverse proxies.
​
FRONTEND_VITE_ALLOWED_HOSTS
string
default:"true"
Allowed hosts for the Vite preview server.
​
FRONTEND_VITE_MAX_UPLOAD_SIZE_BYTES
number
default:"10485760"
Frontend upload size limit in bytes.
​
FRONTEND_PORT
number
default:"5173"
Frontend container port.