Configuration reference | Appaloft Docs

Runtime configuration controls Appaloft serve, databases, static asset directories, and self-hosted behavior.

APPALOFT_DOCS_STATIC_DIR overrides public docs static assets without replacing the Web console.

Scheduled workers are disabled by default unless noted otherwise. Enable them only on the instance that should own the recurring work.

The certificate retry scheduler is the default-on exception because it drains already accepted managed certificate work that is in retry-scheduled state. Runtime execution, runtime prune, history retention, monitoring collection, and preview cleanup workers stay disabled until an operator explicitly enables the matching APPALOFT_*_ENABLED setting.

These runners do not discover new work outside Appaloft state. They only drain due task runs, explicit runtime prune policies, retention defaults, monitoring targets with existing runtime ownership, expired active preview environments, or cleanup attempts already marked for retry.

appaloft doctor, GET /api/system/doctor, and the Web Instance page report the configured activation state, interval, batch settings, and safety mode for these workers without starting or ticking them.

Variable	Default	Meaning
`APPALOFT_CERTIFICATE_RETRY_SCHEDULER_ENABLED`	`true`	Retries already accepted managed certificate issue/renew attempts that reached retry-scheduled state.
`APPALOFT_CERTIFICATE_RETRY_SCHEDULER_INTERVAL_SECONDS`	`300`	Poll interval for certificate retry.
`APPALOFT_CERTIFICATE_RETRY_DEFAULT_DELAY_SECONDS`	`300`	Default delay before retrying retryable certificate work.
`APPALOFT_CERTIFICATE_RETRY_SCHEDULER_BATCH_SIZE`	`25`	Maximum certificate retry attempts scanned per tick.
`APPALOFT_SCHEDULED_TASK_RUNNER_ENABLED`	`false`	Runs due Resource scheduled tasks.
`APPALOFT_SCHEDULED_TASK_RUNNER_INTERVAL_SECONDS`	`60`	Poll interval for scheduled tasks.
`APPALOFT_SCHEDULED_TASK_RUNNER_BATCH_SIZE`	`25`	Maximum scheduled task attempts scanned per tick.
`APPALOFT_SCHEDULED_RUNTIME_PRUNE_RUNNER_ENABLED`	`false`	Runs scheduled runtime capacity prune policies.
`APPALOFT_SCHEDULED_RUNTIME_PRUNE_RUNNER_INTERVAL_SECONDS`	`3600`	Poll interval for runtime capacity prune.
`APPALOFT_SCHEDULED_RUNTIME_PRUNE_RUNNER_BATCH_SIZE`	`25`	Maximum runtime prune policies scanned per tick.
`APPALOFT_SCHEDULED_DEPENDENCY_BACKUP_RUNNER_ENABLED`	`false`	Runs scheduled dependency backup policies.
`APPALOFT_SCHEDULED_DEPENDENCY_BACKUP_RUNNER_INTERVAL_SECONDS`	`3600`	Poll interval for dependency backup policies.
`APPALOFT_SCHEDULED_DEPENDENCY_BACKUP_RUNNER_BATCH_SIZE`	`25`	Maximum dependency backup policies scanned per tick.
`APPALOFT_SCHEDULED_HISTORY_RETENTION_RUNNER_ENABLED`	`false`	Runs retention defaults through existing history prune commands or governed retention stores.
`APPALOFT_SCHEDULED_HISTORY_RETENTION_RUNNER_INTERVAL_SECONDS`	`3600`	Poll interval for scheduled history retention.
`APPALOFT_SCHEDULED_HISTORY_RETENTION_RUNNER_BATCH_SIZE`	`25`	Maximum retention default policies scanned per tick.
`APPALOFT_RUNTIME_MONITORING_COLLECTOR_RUNNER_ENABLED`	`false`	Runs retained runtime monitoring sample collection; currently collects active servers and runtime-owning resources/deployments/projects/environments.
`APPALOFT_RUNTIME_MONITORING_COLLECTOR_RUNNER_INTERVAL_SECONDS`	`60`	Poll interval for the runtime monitoring collector.
`APPALOFT_RUNTIME_MONITORING_COLLECTOR_RUNNER_BATCH_SIZE`	`25`	Maximum runtime monitoring targets collected per tick.
`APPALOFT_TERMINAL_SESSION_ACTIVE_TTL_SECONDS`	`3600`	Activity-aware active terminal session age used by `terminal-session expire` when no explicit cutoff is supplied.
`APPALOFT_TERMINAL_SESSION_OUTPUT_RETENTION_BYTES`	`65536`	Bounded in-memory terminal output tail replayed only when an active terminal transport reconnects; `0` disables replay.
`APPALOFT_BETTER_AUTH_COOKIE_DOMAIN`	unset	Optional Better Auth cookie domain; set it when a product session must be shared across same-site subdomains, for example `.example.com`.
`APPALOFT_BETTER_AUTH_COOKIE_PREFIX`	Better Auth default	Optional Better Auth cookie prefix; keep it consistent when multiple Appaloft origins share one product session.
`APPALOFT_BETTER_AUTH_TRUSTED_PROXY_HEADERS`	`false`	Allows Better Auth to read proxy headers for external origin reconstruction when running behind a trusted reverse proxy.
`APPALOFT_RUNTIME_MONITORING_RAW_RETENTION_HOURS`	`24`	Default retention hours for retained monitoring raw samples.
`APPALOFT_REMOTE_PGLITE_SYNC_BACKUP_RETENTION_DAYS`	`7`	Recovery window for SSH remote PGlite `state/backups/sync-*` upload backups.
`APPALOFT_REMOTE_PGLITE_SYNC_BACKUP_MAX_COUNT`	`20`	Maximum count for SSH remote PGlite `state/backups/sync-*` upload backups; the newest backups are retained.
`APPALOFT_PREVIEW_EXPIRY_CLEANUP_SCHEDULER_ENABLED`	`false`	Scans expired active preview environments and dispatches cleanup through the preview cleanup boundary.
`APPALOFT_PREVIEW_EXPIRY_CLEANUP_SCHEDULER_INTERVAL_SECONDS`	`300`	Poll interval for expired preview cleanup scans.
`APPALOFT_PREVIEW_EXPIRY_CLEANUP_SCHEDULER_BATCH_SIZE`	`25`	Maximum expired active preview environments scanned per tick.
`APPALOFT_PREVIEW_CLEANUP_RETRY_SCHEDULER_ENABLED`	`false`	Retries preview cleanup attempts that were recorded as retry-scheduled.
`APPALOFT_PREVIEW_CLEANUP_RETRY_SCHEDULER_INTERVAL_SECONDS`	`300`	Poll interval for preview cleanup retries.
`APPALOFT_PREVIEW_CLEANUP_RETRY_SCHEDULER_BATCH_SIZE`	`25`	Maximum preview cleanup retry attempts scanned per tick.