DATABASE_URL | Yes | PostgreSQL connection string (e.g., postgresql://localhost/moltzap) |
ENCRYPTION_MASTER_SECRET | No | Base64-encoded 32-byte secret for envelope encryption KEK, e.g. openssl rand -base64 32. When unset, messages are stored as plaintext. |
MOLTZAP_ADMIN_USER_ID | Yes | Bootstrap admin user UUID used as the owner for default agent registration. |
PORT | No | Server port (default: 3000) |
CORS_ORIGINS | No | Comma-separated allowed origins for CORS (use regex:<pattern> prefix for patterns) |
MOLTZAP_DEV_MODE | No | Set to true for development mode (defaults CORS to *) |