Skip to main content
NekoHub is configured through environment variables. With Docker Compose, copy .env.example to .env and update the values. 
cp .env.example .env
Do not use placeholder values in production. Replace Auth__Jwt__Secret, Auth__BootstrapSuperAdmin__Password, and all API keys before first deployment.

​
Database

​
Persistence__Database__ConnectionString
string
required
PostgreSQL connection string.
​
Persistence__Database__Provider
string
default:"postgresql"
Database provider. The current codebase supports postgresql.

​
JWT

​
Auth__Jwt__Secret
string
required
JWT signing secret. Use at least 32 characters.
​
Auth__Jwt__Issuer
string
default:"NekoHub"
JWT issuer (iss) claim. Signed and validated by the backend.
​
Auth__Jwt__Audience
string
default:"NekoHub.Admin"
JWT audience (aud) claim. Signed and validated by the backend.
​
Auth__Jwt__AccessTokenMinutes
number
default:"15"
Access token lifetime in minutes.
​
Auth__Jwt__RefreshTokenDays
number
default:"30"
Refresh token lifetime in days.

​
Bootstrap super admin

​
Auth__BootstrapSuperAdmin__Username
string
required
Username for the initial SuperAdmin.
​
Auth__BootstrapSuperAdmin__Password
string
required
Password for the initial SuperAdmin.
Bootstrap only runs when the database has no SuperAdmin. Changing these values later does not overwrite an existing account.

​
API key

​
Auth__ApiKey__Enabled
boolean
default:"false"
Enables API key authentication. When disabled, /mcp and Bearer API key requests are rejected.
​
Auth__ApiKey__Keys__0
string
The first API key. Add more keys as Keys__1, Keys__2, and so on.

​
Storage

​
Storage__Provider
string
required
Runtime provider selection. Supported values are local, s3, and github-repo.
​
Storage__PublicBaseUrl
string
required
Public URL prefix used for browser-reachable content links.
​
Storage__Local__RootPath
string
default:"/app/storage/assets"
Local filesystem path used by the local provider.

​
Frontend

​
FRONTEND_VITE_API_BASE_URL
string
required
Base URL the browser uses to reach the API. Leave empty for same-origin reverse proxies.
​
FRONTEND_VITE_ALLOWED_HOSTS
string
default:"true"
Allowed hosts for the Vite preview server.
​
FRONTEND_VITE_MAX_UPLOAD_SIZE_BYTES
number
default:"10485760"
Frontend upload size limit in bytes.
​
FRONTEND_PORT
number
default:"5173"
Frontend container port.