Frontend

Variable	Type	Default	Usage
QALITA_API_URL	string (URL)	http://backend:3080	Base backend URL called by the frontend
NEXT_TELEMETRY_DISABLED	boolean (0/1)	1	Disables Next.js telemetry
NEXT_WEBPACK_USEPOLLING	boolean	false	Enables Webpack polling when inotify is unavailable (e.g., containers)
NEXT_SHARP_PATH	string (path)	/app/node_modules/sharp	Path to Sharp binary for image optimization
NODE_ENV	string (development/production/test)	production	Next.js execution mode

Backend

Database

Variable	Type	Default	Usage
DB_USER	string	none	PostgreSQL username
DB_PASSWORD	string	none	PostgreSQL password
DB_HOST	string (host)	none	PostgreSQL server address
DB_NAME	string	none	PostgreSQL database name
DB_PORT	number	5432	PostgreSQL server port

Mail

Variable	Type	Default	Usage
MAIL_USERNAME	string	none	SMTP username
MAIL_PASSWORD	string	none	SMTP password
MAIL_FROM	string (email)	none	Sender email address
MAIL_PORT	number	none	SMTP server port
MAIL_SERVER	string (host)	none	SMTP server address
MAIL_STARTTLS	boolean (true/false)	true	Enables STARTTLS
MAIL_SSL_TLS	boolean (true/false)	false	Uses implicit SSL/TLS
MAIL_FROM_NAME	string	FastAPI	Displayed sender name
MAIL_USE_CREDENTIALS	boolean (true/false)	true	Sends credentials to SMTP server
MAIL_VALIDATE_CERTS	boolean (true/false)	true	Validates TLS certificates

QALITA

Variable	Type	Default	Usage
QALITA_ENV	string (dev/staging/prod)	dev	Backend execution environment
QALITA_SECRET_KEY	string	none	Secret key for signing tokens
QALITA_ALGORITHM	string	HS256	Token signing algorithm
QALITA_API_TOKEN_EXPIRE_MINUTES	number	10080	API token lifetime (minutes)
QALITA_ACCESS_TOKEN_EXPIRE_MINUTES	number	15	Access token lifetime (minutes)
QALITA_ADMIN_USERNAME	string	none	Initial admin username
QALITA_ADMIN_PASSWORD	string	none	Initial admin password
QALITA_DEBUG	boolean	false	Enables backend debug mode
QALITA_AUTH_MODE	string (table/ldap/azure)	table	Authentication mode
QALITA_RETENTION_LOG_HOURS	number	720	Log retention period (hours)
QALITA_ORGANIZATION_NAME	string	none	Organization name displayed/notifications
QALITA_LICENSE_KEY	string	none	License key
QALITA_LICENSE_USER	string	none	License holder
QALITA_PUBLIC_PLATFORM_URL	string (URL)	none	Public platform URL
QALITA_PUBLIC_DOC_URL	string (URL)	none	Public documentation URL
QALITA_PUBLIC_API_URL	string (URL)	none	Public API URL
QALITA_LICENCE_SCOPE	string	none	License scope

LDAP

Variable	Type	Default	Usage
LDAP_SERVER	string (URL/host)	none	LDAP server
LDAP_SEARCH_USER	string (simple DN)	none	LDAP search account
LDAP_SEARCH_PASSWORD	string	none	LDAP search account password
LDAP_DN	string (base DN)	none	Base DN for searches (e.g., dc=example,dc=com)
LDAP_SEARCH_USER_FILTER	string (LDAP filter)	none	Filter to find users
LDAP_ROLE_MAPPING	string (JSON)	none	Group-to-application-role mapping
LDAP_SEARCH_GROUP_FILTER	string (LDAP filter)	none	Filter to retrieve groups
LDAP_TLS	boolean	none	Enables TLS for LDAP

Microsoft (Azure Entra) OIDC / SSO

Variable	Type	Default	Usage
MICROSOFT_CLIENT_ID	string	none	Azure Entra application (client) ID (OIDC)
MICROSOFT_CLIENT_SECRET	string	none	Azure Entra client secret
MICROSOFT_TENANT_ID	string	none	Azure Entra tenant ID
MICROSOFT_REDIRECT_URL	string (URL)	none	Application redirect URL after login
MICROSOFT_SCOPES	string (space-separated)	openid profile email	Requested OIDC scopes

S3

Variable	Type	Default	Usage
QALITA_S3_URL	string (URL)	none	S3-compatible endpoint (e.g., MinIO, AWS S3)
QALITA_S3_KEY_ID	string	none	S3 access key ID
QALITA_S3_KEY_SECRET	string	none	S3 secret key

Cache

Variable	Type	Default	Usage
REDIS_SERVER	string (host)	localhost	Redis server address
REDIS_PORT	number	6379	Redis port
REDIS_PASSWORD	string	none	Redis password (optional)