Environment Variables

Authgate is configured using environment variables stored in the docker/.env file. Most of these are set automatically during installation, but you may want to change some later.

Database Settings

Variable	Description	Default	Notes
`POSTGRES_DB`	Database name	`authgate-prod`	Can leave as-is
`POSTGRES_USER`	Database username	`postgres`	Can leave as-is
`POSTGRES_PASSWORD`	Database password	Auto-generated	-
`POSTGRES_DATA_PATH`	Where database files are stored	`/path/to/your/authgate/docker/postgres-data`	Only change if needed
`REDIS_PASSWORD`	Redis password (internal)	Auto-generated	-
`REDIS_DATA_PATH`	Where Redis data is stored	`/path/to/your/authgate/docker/redis-data`	Only change if needed

File Storage

Variable	Description	Default	Notes
`FILE_STORAGE_PATH`	Where uploaded files are stored	`/path/to/your/authgate/docker/uploaded-files`	Only change if needed

Admin Account

Variable	Description	Default	Notes
`ADMIN_USERNAME`	Your admin login username	`admin`	Used to log into Authgate
`ADMIN_PASSWORD`	Your admin login password	Set during install	Used to log into Authgate

Domain & SSL

Variable	Description	Default	Notes
`DOMAIN_NAME`	Your domain	Set during install	e.g., `auth.yourproject.com`
`PUBLIC_URL`	Full URL to Authgate	Auto-generated	e.g., `https://auth.yourproject.com`
`ENABLE_HTTPS`	Use HTTPS	`true`	Keep as `true` for production

Port Configuration (Optional)

Variable	Description	Default	Notes
`HTTP_PORT`	External HTTP port	`80`	Only change if needed
`HTTPS_PORT`	External HTTPS port	`443`	Only change if needed

These are optional - only add them to your .env file if you need to use different ports.

Security Settings

Variable	Description	Default	Notes
`SECRET_KEY`	Used for JWT tokens	Auto-generated	-
`FILE_CRYPTO_MASTER_KEY_B64`	Master key for file encryption keys	Auto-generated	Base64 encoded. Don’t change after install
`REQUEST_SIGNING_KEY_CRYPTO_MASTER_KEY_B64`	Master key for request signing keys	Auto-generated	Base64 encoded. Don’t change after install
`RESPONSE_SIGNING_KEY_CRYPTO_MASTER_KEY_B64`	Master key for response signing keys	Auto-generated	Base64 encoded. Don’t change after install
`AUTH_SECRET`	Web session security	Auto-generated	-

Changing Settings

To change any setting after installation:

Stop Authgate:


cd docker
docker compose down

Edit the .env file with your changes
Start Authgate again:


docker compose up -d

Warning: Don’t change encryption master keys (FILE_CRYPTO_MASTER_KEY_B64, REQUEST_SIGNING_KEY_CRYPTO_MASTER_KEY_B64, RESPONSE_SIGNING_KEY_CRYPTO_MASTER_KEY_B64) after installation, as this will break your existing data.