Environment Variables

Common environment variables used across RavenmaskOS services.

Locations

• Global secrets: ~/ravenhelm/secrets/.env
• Service-specific overrides: ~/ravenhelm/services/<service>/.env

Common Variables

Variable	Description
POSTGRES_PASSWORD	PostgreSQL password
REDIS_PASSWORD	Redis password
OAUTH2_PROXY_COOKIE_SECRET	OAuth2-Proxy session secret
ZITADEL_ORG	Zitadel organization
ZITADEL_PROJECT	Zitadel project name
GITLAB_TOKEN	GitLab API token
OPENAI_API_KEY	OpenAI API key
ANTHROPIC_API_KEY	Anthropic API key

Guidance

• Store secrets only in .env files or OpenBao
• Rotate credentials when shared externally
• Avoid committing secrets to git