Environment Variables Reference
Auto-generated
This page is auto-generated from backend/.env.example. Do not edit manually.
General
| Variable | Default | Required | Description |
|---|---|---|---|
PORT | 4000 | Yes | Tenable Dashboard Backend Environment Configuration Copy this file to .env and fill in your values Server Configuration |
NODE_ENV | development | Yes | — |
ALLOW_DEMO_LOGIN | true # Only set to true in development! Enables demo credentials. | No | Security Configuration |
ENCRYPTION_KEY | your_32_character_encryption_key | Yes | Encryption Key for API keys at rest (REQUIRED - exactly 32 characters) Generate with: openssl rand -hex 16 |
INITIAL_ADMIN_EMAIL | admin@company.com | No | Initial Admin User (only used if no admin exists in database) These credentials are used for first-time bootstrap; change password after first login! |
INITIAL_ADMIN_PASSWORD | changeme123 | No | — |
INITIAL_ADMIN_NAME | System Administrator | No | — |
TENABLE_ACCESS_KEY | your_tenable_access_key_here | Yes | Tenable API Configuration Get your API keys from https://cloud.tenable.com/ |
TENABLE_SECRET_KEY | your_tenable_secret_key_here | Yes | — |
TENABLE_API_URL | https://cloud.tenable.com | No | — |
DATABASE_URL | postgresql://tenable:tenable_secure_password_change_me@localhost:5432/tenable_dashboard | Yes | Database Configuration (PostgreSQL) |
DB_HOST | localhost | No | — |
DB_PORT | 5432 | No | — |
DB_NAME | tenable_dashboard | No | — |
DB_USER | tenable | No | — |
DB_PASSWORD | tenable_secure_password_change_me | No | — |
REDIS_URL | redis://localhost:6379 | No | Redis Configuration |
REDIS_HOST | localhost | No | — |
REDIS_PORT | 6379 | No | — |
JWT_SECRET | your_super_secret_jwt_key_change_in_production_min_32_chars | Yes | JWT Configuration |
JWT_EXPIRES_IN | 1d | No | — |
JWT_REFRESH_SECRET | your_refresh_token_secret_change_in_production | No | — |
JWT_REFRESH_EXPIRES_IN | 7d | No | — |
SESSION_TIMEOUT_MINUTES | 30 | No | Session Configuration |
RATE_LIMIT_WINDOW_MS | 60000 | No | Rate Limiting |
RATE_LIMIT_MAX_REQUESTS | 100 | No | — |
CORS_ORIGIN | http://localhost:3000 | No | CORS Configuration |
AZURE_CLIENT_ID | — | No | SSO Configuration (Optional) Azure AD |
AZURE_CLIENT_SECRET | — | No | — |
AZURE_TENANT_ID | — | No | — |
OKTA_DOMAIN | — | No | Okta |
OKTA_CLIENT_ID | — | No | — |
OKTA_CLIENT_SECRET | — | No | — |
GOOGLE_CLIENT_ID | — | No | Google OAuth |
GOOGLE_CLIENT_SECRET | — | No | — |
LOG_LEVEL | debug | No | Logging |
CACHE_TTL | 3600 | No | Cache TTL (in seconds) |
API_CACHE_TTL | 21600 | No | — |
Generated on 2026-04-05