CodeGraph server environment variables

This reference is for server deployment operators. It lists every name in the shipped .env.example and the current docker-compose.yml substitutions. Set values in the protected /opt/codegraph/.env only for enabled services and features.

“Sample” is the value in .env.example. Set credentials and replace example addresses with your deployment addresses before starting the relevant services. “Compose fallback” applies when a variable is unset. With ${VARIABLE:-value}, an explicitly empty value also selects the fallback. A dash means the source does not define the value; “no fallback” means direct ${VARIABLE} substitution. An unset value produces a warning and an empty string. Set the secrets needed by enabled services in .env. Select the provider and enable the features that use those credentials in config.yaml.

For the setup workflow, see Configure a deployment. Keep the live .env out of source control and support requests.

Database, API and browser access

These settings cover the database, initial administrator, browser access, public API addresses, and approved Git servers. Replace codegraph.ru addresses with your own deployment addresses where the relevant interfaces are exposed to users.

CODEGRAPH_OUTBOUND_GIT_ORIGIN_ALLOWLIST takes exact HTTPS origins separated by commas, for example https://git.internal.example,https://git2.internal.example:8443. An empty value grants no private Git exceptions. IP ranges and wildcards are unsupported.

Model providers and OpenViking

Set credentials only for selected providers. OPENVIKING_CONFIG_TEMPLATE selects the template file; OPENVIKING_API_KEY protects its API. For local embedding and rerank, also set COMPOSE_PROFILES=local-models.

Orchestration and finance

These settings control Temporal, task handoff, and financial artifact verification. Source signing and verification keys from an approved secret store. TEMPORAL_WORKER_CONTAINER_MEMORY_LIMIT caps the temporal-worker container; its fallback is 4G. Account for this limit alongside the GoCPG limits below.

Git and integration credentials

These settings cover GitVerse and GitHub connections and GoCPG. For GitLab, use the approved origin above and store the connection secret through the UI or API.

GoCPG and DuckDB memory

GOCPG_CONTAINER_MEMORY_LIMIT sets the total memory limit for the gocpg container. GOCPG_DUCKDB_BULK_MEMORY_LIMIT limits DuckDB memory when building or updating a CPG; GOCPG_DUCKDB_READONLY_MEMORY_LIMIT applies to reads. A CPG is a code property graph used to analyze a project. Both DuckDB settings are passed to api, mcp, temporal-worker, and gocpg, which can run the native analyzer or read a CPG.

A DuckDB limit does not cap the entire process. The parser, graph, and GoCPG analyses need additional memory within the container limit. Account for the other services and the server’s available memory as well. Start with 8G / 3GB / 1GB, measure memory use with your project and adjust the limits from the results.

On the Docker Compose host, open the existing .env in the distribution directory and add these lines. Preserve the other settings and secrets:

GOCPG_CONTAINER_MEMORY_LIMIT=8G
GOCPG_DUCKDB_BULK_MEMORY_LIMIT=3GB
GOCPG_DUCKDB_READONLY_MEMORY_LIMIT=1GB

Wait for active imports and audits to finish. Run the following commands from that directory in Bash (Linux/macOS) or PowerShell. If the deployment uses additional Compose files, include the same -f options when restarting:

docker compose up -d --no-build --no-deps api mcp temporal-worker gocpg
docker compose exec -T gocpg sh -c 'printenv GOCPG_DUCKDB_BULK_MEMORY_LIMIT GOCPG_DUCKDB_READONLY_MEMORY_LIMIT'
docker inspect codegraph-gocpg --format '{{.HostConfig.Memory}}'
docker stats --no-stream codegraph-api codegraph-mcp codegraph-temporal-worker codegraph-gocpg

With these values, printenv returns 3GB and 1GB, and docker inspect returns 8589934592 (8 GiB in bytes). Repeat the audit and observe memory use. After a failure, check Docker events: an automatic restart can hide an earlier OOM in the container’s current state.

docker events --since 30m --until 0s --filter container=codegraph-gocpg --filter event=oom

For GoCPG run directly outside this Compose distribution, native defaults are 8GB for writes and 4GB for reads. The DuckDB environment variables override those defaults; GOCPG_CONTAINER_MEMORY_LIMIT applies only to Compose.

Security and secret storage

Feature flags enable security controls; Vault and mTLS settings configure secret retrieval and client certificate verification.

Monitoring and notifications

Sample Sentry, email, and metrics addresses describe an example environment; replace them with your infrastructure endpoints before enabling those services.

Deployment and Docker

These settings label the deployment, pin images, and limit Docker logs.

COMPOSE_PROFILES is a Docker Compose control rather than a substitution in docker-compose.yml. It is empty by default, so optional profiles are off. Set local-models for local models; check the release’s Compose file for available profiles.