Configuration
Self-hostedThe self-hosted version of the application is configured using environment variables.
Environment Variables
| Environment Variable | Value | Description |
|---|---|---|
| APPLICATION_HOST_WEB | https://WEBSITE_HOSTNAME | The web application's URL. Used in emails to build a link to the application. |
| SPRING_DATASOURCE_URL | jdbc:postgresql://YOUR_POSTGRES_HOST:5432/postgres | JDBC URL for PostgreSQL database. |
| SPRING_DATASOURCE_USERNAME | Your Postgres Username | The username of the PostgreSQL server. |
| SPRING_DATASOURCE_PASSWORD | Your Postgres Password | The password of the PostgreSQL server. |
| SPRING_MAIL_HOST | Your SMTP host | SMTP server host. |
| SPRING_MAIL_PORT | Your SMTP port | SMTP server port. |
| SPRING_MAIL_USERNAME | Your SMTP username | Login user of the SMTP server. |
| SPRING_MAIL_PASSWORD | Your SMTP password | Login password of the SMTP server. |
| SPRING_MAIL_PROPERTIES_MAIL_SMTP_AUTH | true | Use basic authentication for SMTP. |
| SPRING_MAIL_PROPERTIES_MAIL_SMTP_STARTTLS_ENABLE | true | Ensure that TLS is used. |
| APPLICATION_MAIL_FROM | support@example.com | The sender email address. |
| APPLICATION_SUPERADMINS | A comma-separated list of email addresses for users with access to /admin interface. | |
| APPLICATION_DATACONTRACT_SPECIFICATIONS | dcs,odcs | The data contract specifications you want to enable. |
| APPLICATION_DATAPRODUCT_SPECIFICATIONTYPES | odps,dps | The data product specifications you want to enable. Possible values are dps and odps, the first item will be assumed as default. Note that dps is deprecated and will be removed at the end of 2026. |
| APPLICATION_SEARCH_ENABLED | false | Enable or disable the AI search functionality. This requires to configure an AI model and an embedding model in the organization settings. |
| APPLICATION_SEMANTICS_ENABLED | false | Enable or disable the Semantics feature (ontologies, concepts, and SPARQL endpoint). See Semantics. |
| APPLICATION_BULKSEMANTICSUGGEST_ENABLED | false | Enable the experimental "Suggest semantics for all properties" flow on data contracts, which uses AI to propose a semantic concept for every property in one pass. Off by default; requires the Semantics feature and a configured AI model. See Semantics. |
| APPLICATION_ACCESSREQUEST_AI_ENABLED | false | Enable or disable the data governance AI check on access requests. This requires to configure an AI model. |
| APPLICATION_COMPROMISEDPASSWORDCHECKER_ENABLED | false | Enable or disable the compromised password checker (using the haveibeenpwned web service) when a user registered with a password. |
| APPLICATION_FEATURES_ORGANIZATIONS_ADD_ENABLED | true | Enable or disable whether non-super-admins can create organizations. |
| APPLICATION_INGESTIONS_ENABLED | false | Enable direct integrations (ingestions) for your instance. |
| APPLICATION_ENCRYPTION_KEYS | A list of 64 character long hex strings that are used as encryption keys. E.g. 3C5652094CCA8881E7D38166BE4E4FDEF3AE91DEED1F6F1577FF6053187652BC, BED9C166327827E90851F8B0F7E05131E807B4D3DAA917FE902BD657957BC81B | If at least one string is set, encryption is enabled for stored credentials. A list of encryption keys is supported to enable you to rotate keys. The rightmost key is used as the current secret. |
| APPLICATION_REDESIGN_ENABLED | true | Enable or disable the simplified navigation structure (Marketplace, Studio, Governance). |
| APPLICATION_STUDIO_ENABLED | true | Enable or disable the Studio. When false, the Studio nav entry and all "Open in Studio" buttons are hidden — useful when a tenant manages its data products and contracts entirely via the API. |
| APPLICATION_REQUESTACCESS_EXTERNAL_URL | https://example.com/request?product={dataProductId}&port={outputPortId} | Redirect "Request Access" buttons to an external URL. Supports placeholders: {dataProductId}, {outputPortId}, {dataContractId}. |
| APPLICATION_I18N_SUPPORTED_LOCALES | en | The UI locales users can choose from, as a comma-separated list of language tags (e.g. en,de). Currently available: en (English) and de (German). A language picker appears in the user settings once more than one locale is enabled. |
| APPLICATION_I18N_DEFAULT_LOCALE | en | The fallback UI locale, used for anonymous visitors and users who have not chosen a language. Must be one of APPLICATION_I18N_SUPPORTED_LOCALES. |
Azure Entra ID
If you are using Azure Entra ID (formerly known as Azure Active Directory) for Single Sign-On (SSO), you can use the following environment variables:
| Environment Variable | Value | Description |
|---|---|---|
| SPRING_SECURITY_OAUTH2_CLIENT_PROVIDER_AZURE_ISSUER_URI | ssoIssuerUri | The OpenID Connect metadata document URI. |
| SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_AZURESSO_CLIENT_ID | ssoClientId | The Application (client) ID. |
| SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_AZURESSO_CLIENT_SECRET | ssoClientSecret | The Secret Value. |
| SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_AZURESSO_PROVIDER | azure | The OAuth2 provider. |
| SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_AZURESSO_AUTHORIZATION_GRANT_TYPE | authorization_code | The authorization grant type. |
| SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_AZURESSO_REDIRECT_URI | {baseUrl}/{action}/oauth2/code/{registrationId} | The redirect URI. |
| SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_AZURESSO_CLIENT_AUTHENTICATION_METHOD | client_secret_basic | The client authentication method. |
| SPRING_SECURITY_OAUTH2_CLIENT_REGISTRATION_AZURESSO_SCOPE | openid,profile,email | The OAuth2 scopes. |
| APPLICATION_SSO_AZURE_HOSTS | $WEBSITE_HOSTNAME | The hostname(s) for SSO. Can be comma-separated. Do not include the https:// prefix. Example: entropydata.example.com,entropydata-poc.example.com |
If you are using another SSO provider, please contact our support.
Azure App Service
If you are deploying the application to Azure as App Service, you can use the following environment variables:
| Environment Variable | Value | Description |
|---|---|---|
| WEBSITES_PORT | 8080 | The port on which the website will run. |
| WEBSITES_ENABLE_APP_SERVICE_STORAGE | false | Enable or disable App Service storage. |
| DOCKER_REGISTRY_SERVER_URL | ghcr.io | The Registry URL. |
| DOCKER_REGISTRY_SERVER_USERNAME | The provided username | The Registry Username. |
| DOCKER_REGISTRY_SERVER_PASSWORD | The provided password | The Registry Password. |
OpenTelemetry
For environment variables to configure observability, see the Observability page.