Configuration reference
All settings are environment variables prefixed with BEZISYNC_.
| Variable | Default | Purpose |
|---|---|---|
ENVIRONMENT |
development |
production enforces secure settings |
DATABASE_URL |
local Postgres | Metadata database (SQLAlchemy URL) |
STATE_DATABASE_URL |
= DATABASE_URL |
Connector offsets and schema history |
CONNECTOR_STATE_DATABASE_URL_OVERRIDE |
— | The state DB as connectors reach it, if different |
MASTER_KEY / PREVIOUS_MASTER_KEYS |
dev key / — | Secret encryption (base64, 32 bytes) and rotation |
PUBLIC_URL, COOKIE_SECURE, SESSION_TTL_HOURS |
http://localhost:8080, false, 12 |
Browser access |
ALLOW_PLAIN_HTTP |
false |
Production over http when the network encrypts traffic (e.g. Tailscale) |
BOOTSTRAP_ADMIN_EMAIL / _PASSWORD |
[email protected] / — |
First administrator |
SSRF_ALLOW_CIDRS / SSRF_EXTRA_DENY_CIDRS |
— | Networks connection checks may (not) reach |
DEBEZIUM_DEFAULT_IMAGE |
quay.io/debezium/server:3.7.0.Final |
Image when neither pipeline nor runtime picks one, unless an Admin chose a catalog default |
ICEBERG_IMAGE |
the pinned ghcr.io/memiiso/debezium-server-iceberg build |
Image of Apache Iceberg pipelines (e.g. a mirror in a private registry) |
AGENT_URL / AGENT_IMAGE / AGENT_CHART / AGENT_CHART_VERSION |
PUBLIC_URL / this release's bezisync image / OCI chart / the agent chart version the control-plane chart was released with (unset: the newest) |
Used in generated agent install commands |
LAB |
false |
An open lab: the sign-in page invites anyone in and links the public testing policy (/testing-policy); feedback is addressed to the BeziSync team |
METRICS_TOKEN, METRICS_RETENTION_DAYS |
—, 30 |
Prometheus endpoint and chart history |
SMTP_* |
— | Email alert channel |
TELEMETRY_ENABLED, TELEMETRY_URL |
false, — |
Opt-in anonymous statistics |
SANDBOX_* |
— | Demo stack: create the Sandbox project |
CONTROLLER_TICK_SECONDS, LOG_LEVEL, LOG_JSON |
5, INFO, true |
Operations |