Environment Variables

Auxot is configured entirely through environment variables. Set them in your shell, a .env file in the working directory, or your container orchestrator’s secrets manager.

Required

VariableDescriptionDefault
DATABASE_URLPostgreSQL connection string
REDIS_URLRedis connection string
AUXOT_SECRET_KEYSecret used for auth and encryption (minimum 32 chars)

Server

VariableDescriptionDefault
AUXOT_BIND_ADDRHTTP bind address:8080
AUXOT_BASE_URLPublic URL used in links and redirectshttp://localhost:8080
AUXOT_LOG_LEVELLog verbosity (debug, info, warn, error)info

Concurrency

VariableDescriptionDefault
AUXOT_CLOUD_CONCURRENCYMax concurrent cloud provider jobs5
AUXOT_AGENT_CONCURRENCYMax concurrent agent-worker jobs3
AUXOT_CLI_CONCURRENCYMax concurrent CLI-worker jobs1

Generating the Secret Key

The AUXOT_SECRET_KEY is used for JWT token signing, AES-256-GCM encryption of stored credentials, and HMAC verification of worker keys. Generate one with:

openssl rand -hex 32

Store this value securely. If you lose it, all encrypted credentials (cloud API keys, MCP server tokens) become unrecoverable and must be re-entered.

License Key Installation

Auxot works without a license key on the free tier. To unlock paid features (unlimited users, team management, audit logs), purchase a license at auxot.com and install it:

Via Environment Variable

Set AUXOT_LICENSE_KEY before starting the server — useful for container and IaC deployments:

AUXOT_LICENSE_KEY=AUXOT-XXXX-XXXX-XXXX-XXXX auxot-server

Via the Admin Agent

Open the chat UI and tell the admin agent:

Install license key: AUXOT-XXXX-XXXX-XXXX-XXXX

The server activates the corresponding tier immediately — no restart required.

License keys are verified offline using Ed25519 signature validation — no phone-home required. See Licensing → for tier details and key expiration behavior.

First User Creation

On first launch, open Auxot in the browser to create the first admin account. The setup wizard walks through name, email, and password. No additional configuration is needed before that step.

Example .env File

AUXOT_BIND_ADDR=:8080
DATABASE_URL=postgres://auxot:s3cret@db.internal:5432/auxot?sslmode=require
REDIS_URL=redis://:r3dis@redis.internal:6379/0
AUXOT_SECRET_KEY=replace-with-32-plus-character-secret
AUXOT_BASE_URL=https://ai.yourcompany.com
AUXOT_LICENSE_KEY=AUXOT-XXXX-XXXX-XXXX-XXXX
AUXOT_LOG_LEVEL=info
AUXOT_CLOUD_CONCURRENCY=5
AUXOT_AGENT_CONCURRENCY=3
AUXOT_CLI_CONCURRENCY=1