> ## Documentation Index
> Fetch the complete documentation index at: https://wundergraphinc-brendan-add-sof-link.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# Configuration
> Here you can set all available environment variables of the Control Plane.
Check the [WunderGraph Demo](https://github.com/wundergraph/cosmo) for a [setup configuration](https://github.com/wundergraph/cosmo/blob/main/controlplane/.env.example).
| Environment variable | Description | Default | Required |
| ---------------------------- | ------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------- | ---------------------------- |
| HOST | The host of the server | localhost | |
| DATABASE\_URL | The connection URL of the database | postgresql://postgres:changeme\@localhost:5432/controlplane | |
| PORT | The port on which the controlplane runs | 3001 | |
| ALLOWED\_ORIGINS | The controlplane url | [http://localhost:3000](http://localhost:3000) | |
| LOG\_LEVEL | Configures the log level | info | |
| DEBUG\_SQL | Configures the logs of SQL | false | |
| CLICKHOUSE\_DSN | The connection URL of clickhouse | "" | |
| AUTH\_REDIRECT\_URI | The authorized redirect URLs | [http://localhost:3001/v1/auth/callback](http://localhost:3001/v1/auth/callback) | |
| WEB\_BASE\_URL | The URL of studio | "" | |
| AUTH\_JWT\_SECRET | The JWT secret used for verifying and signing JWTs (32 characters) | "" | |
| OPENAI\_API\_KEY | The api key of OPEN API | "" | |
| KC\_LOGIN\_REALM | The realm of the login credentials | "master" | |
| KC\_REALM | The keycloak realm of your Client | "" | |
| KC\_CLIENT\_ID | The keycloak client ID | "" | |
| KC\_ADMIN\_USER | The admin username | "" | |
| KC\_ADMIN\_PASSWORD | The admin password | "" | |
| KC\_API\_URL | The URL to your keycloak API endpoint. Used internally for administration | "" | |
| KC\_FRONTEND\_URL | The public URL of your keycloak instance. Used for redirects | "" | |
| WEBHOOK\_URL | The endpoint to which you want to fire platform webhooks | "" | |
| WEBHOOK\_SECRET | The secret key to verify webhook requests | "" | |
| DB\_URL | Postgres connection string | "" | |
| DB\_CERT\_PATH | Path to certificate file | "" | |
| DB\_CA\_PATH | Path to the CA file | "" | |
| DB\_KEY\_PATH | Path to the private key file | "" | |
| GITHUB\_APP\_CLIENT\_ID | GitHub App client id | "" | |
| GITHUB\_APP\_CLIENT\_SECRET | GitHub App client secret | "" | |
| GITHUB\_APP\_ID | GitHub App id | "" | |
| GITHUB\_APP\_PRIVATE\_KEY | Private key of your GitHub App | "" | |
| GITHUB\_APP\_WEBHOOK\_SECRET | Webhook secret of your GitHub App | "" | |
| SLACK\_APP\_CLIENT\_ID | Slack app client id | "" | |
| SLACK\_APP\_CLIENT\_SECRET | Slack app client secret | "" | |
| S3\_STORAGE\_URL | URL to your s3 storage provider (either include credentials or use S3\_ACCESS\_KEY\_ID and S3\_SECRET\_ACCESS\_KEY) | "" | |
| S3\_REGION | The region to be used for the s3 bucket | "auto" | |
| S3\_ENDPOINT | The endpoint to be used falls back to url.Origin | "" | |
| S3\_ACCESS\_KEY\_ID | Access key id for the bucket (AWS\_ACCESS\_KEY\_ID) | "" | |
| S3\_SECRET\_ACCESS\_KEY | Secress Access key for the bucket (AWS\_SECRET\_ACCESS\_KEY) | "" | |
| S3\_FORCE\_PATH\_STYLE | Used to enforce path style url resolution | true | |
| SMTP\_ENABLED | Enable the smtp integration | false | |
| SMTP\_USERNAME | Smtp username | "" | |
| SMTP\_PASSWORD | Smtp password | "" | |
| SMTP\_PORT | The port the smtp server listens to | | |
| SMTP\_HOST | The host to connect to | "" | |
| SMTP\_SECURE | Defines if the connection should use SSL | | |
| SMTP\_REQUIRE\_TLS | Forces the client to use STARTTLS | | |
| STRIPE\_SECRET\_KEY | Stripe secret | "" | |
| STRIPE\_WEBHOOK\_SECRET | Stripe webhook secret | "" | |
| DEFAULT\_PLAN | Based on your custom plans, the name of the default plan | "" | |