Backend Configuration Guide
Last updated: 2026-03-13
This guide explains which settings still belong in .env, and which runtime controls have moved
into the UI and database.
Environment Variables That Stay in .env
These values still define bootstrap topology, infrastructure wiring, or build-time behavior. They are not workspace-level controls.
Core Application Settings
.envvalues are not recursively expanded. Do not write placeholders such as:${POSTGRES_PASSWORD}insideDATABASE_URL; use the literal password and keep it aligned withPOSTGRES_PASSWORD.
Celery and Worker Topology
Runtime Engine and Feature Flags
External Data and Secrets
Docker Compose Convenience Variables
Frontend Build and Proxy Settings
Runtime Controls That Moved into the UI and Database
These values are now edited through Settings → Workspace runtime controls and persisted in the
database. Changes apply to future runs without editing .env.
When the database has no saved override yet, the backend falls back to built-in defaults. These
values are no longer exposed in the normal deployment path through .env.example.
Removed Legacy Variables
The following variables were removed. If they still appear in .env or the process environment,
the backend should fail fast during startup:
LITELLM_MODELITELLM_STUB_FAIL_ONCELITELLM_STUB_ALWAYS_FAIL
Recommended Usage
- Copy the template:
cp .env.example .env - Generate
ENCRYPTION_KEY:openssl rand -hex 32 - Edit infrastructure values in
.env, especially the database password andDATABASE_URL - Start the stack
- Use the UI for workspace-level operations:
- add a real provider in
Providers - import or build a dataset in
Datasets - tune runtime policy in
Settings
- add a real provider in
GitHub Actions and Secrets Guidance
In CI/CD, these values are usually injected through Secrets or platform configuration:
DATABASE_URLREDIS_URLENCRYPTION_KEYHF_TOKENif private datasets are requiredPOSTGRES_PASSWORDwhen Compose is used
Workspace runtime controls should be persisted through the product UI rather than continuously overridden by CI secrets.
Keep These Files in Sync
When configuration changes, update all of the following:
backend/src/eval_752/app/config.py.env.example- this document
If a setting moves from environment configuration to a UI-persisted runtime control, also update
the Settings page copy and the related acceptance docs.
