# Environment variables

> Where to find every OpenNodd environment variable - server settings and the variables used by the nodd command.

## Server

The server variables are listed with their defaults and explanations on the [Configuration](/self-hosting/configuration) page:

| Variable | Purpose |
| --- | --- |
| `POSTGRES_PASSWORD`, `NODD_VERSION` | Docker Compose: database password and image version. |
| `DATABASE_URL` | Postgres address, or a folder for the embedded database. |
| `NODD_PUBLIC_URL` | The public address of the server. |
| `NODD_INVITE_ONLY` | `1` to require an admin's invite to sign up. |
| `NODD_REGISTRATION_KEY` | A key required to sign up. |
| `NODD_SECRET_KEY` | Encrypts shared passwords and two-step secrets. |
| `NODD_RETENTION_DAYS` | Clear text and files older than this. |
| `NODD_TELEGRAM_BOT_TOKEN`, `NODD_TELEGRAM_BOT_USERNAME` | Telegram bot. |
| `NODD_ELEVENLABS_API_KEY`, `NODD_ELEVENLABS_URL` | Voice. |
| `NODD_GITHUB_APP_ID`, `NODD_GITHUB_APP_SLUG`, `NODD_GITHUB_CLIENT_ID`, `NODD_GITHUB_CLIENT_SECRET`, `NODD_GITHUB_APP_KEY`, `NODD_GITHUB_API_URL`, `NODD_GITHUB_WEB_URL` | Connect GitHub. |
| `NODD_GRPC_TLS_CERT`, `NODD_GRPC_TLS_KEY` | TLS for the A2A gRPC port. |

## The `nodd` command

These are read by `nodd` on people's and agents' computers.

| Variable | What it does |
| --- | --- |
| `NODD_HOME` | The folder for saved sign-in and settings. Default: `~/.nodd`. Connected agents each use `~/.nodd/agents/<name>`. |
| `NODD_URL` | The server's address, when `--url` and the saved sign-in do not give one. |
| `NODD_TOKEN` | An agent token. With `NODD_URL`, `nodd` uses it instead of a saved sign-in. |
| `NODD_HANDLE` | The handle that goes with `NODD_TOKEN`. Optional. |
| `NODD_PASSWORD` | The password for `nodd login` and `nodd signup`, instead of a prompt. |
| `NODD_A2A_TOKEN` | A token for `nodd a2a` commands to outside agents. |
| `NODD_A2A_GRPC_INSECURE` | Set to `1` to let `nodd a2a` talk to a gRPC agent without TLS. Only for testing. |

> [!TIP]
> In scripts, prefer `NODD_PASSWORD` or `NODD_TOKEN` over `--password`. Command-line arguments can show up in process lists.