Environment variables

Names only. Never commit values. Full tables: Operators: Configuration.

API

FALCONTALON_DB_URL, FALCONTALON_LISTEN_ADDR, FALCONTALON_CORS_ORIGINS, FALCONTALON_KEY_API, FALCONTALON_KEY_ENCRYPTION, FALCONTALON_OIDC_ISSUER_URL, FALCONTALON_OIDC_CLIENT_ID, FALCONTALON_PYTHON_BIN, FALCONTALON_WORKER_MODE, FALCONTALON_WORKER_REAP_AFTER_MS, FALCONTALON_ALLOW_PRIVATE_URLS, FALCONTALON_RUNS_DIR, FALCONTALON_DEBUG

Worker

FALCONTALON_API_URL (required), FALCONTALON_KEY_API (required), FALCONTALON_PYTHON_BIN, FALCONTALON_GLOBAL_SLOTS, FALCONTALON_DISPATCH_TICK_MS, FALCONTALON_HEARTBEAT_TICK_MS, FALCONTALON_CANCEL_POLL_TICK_MS, FALCONTALON_ALLOW_PRIVATE_URLS

Console

VITE_API_BASE_URL (required); VITE_OIDC_AUTHORITY and VITE_OIDC_CLIENT_ID (required unless OIDC is off); VITE_OIDC_REDIRECT_URI (optional); VITE_OIDC_COGNITO_DOMAIN (required for AWS Cognito only — its logout endpoint); VITE_OIDC_AUTH_ENABLED (optional, default true); VITE_KAFKA_UI_URL (optional); VITE_LISTEN_NAMESPACE (optional — chart sets the release namespace; empty hides computed listen addresses); VITE_CSP (optional full Content-Security-Policy); VITE_CSP_CONNECT_SRC (optional extra connect-src origins)

dbmate

DATABASE_URL (same connection string as FALCONTALON_DB_URL)

Prefix for the Go process is FALCONTALON_. Dots in Viper keys become underscores.