Operate

Environment variables

Glozr is configured through environment variables. This page lists every variable the app reads at boot, grouped by subsystem. Variables not set fall back to safe defaults where possible; missing required keys are surfaced in the platform admin's Site Health pill.

Core application

Key	Default	Description
`APP_NAME`	`Glozr`	Display name used in emails and the dashboard.
`APP_ENV`	`production`	`local`, `staging`, or `production`.
`APP_KEY`	—	32-byte base64 encryption key. Generate with `php artisan key:generate`.
`APP_DEBUG`	`false`	Never enable in production — leaks stack traces.
`APP_URL`	—	Public HTTPS URL. Used to sign assets and build absolute links.
`APP_LOCALE`	`en`	Default UI locale. Falls back per visitor via `Accept-Language`.
`APP_TIMEZONE`	`UTC`	Server-side timezone for scheduled jobs.

Database & cache

Key	Default	Description
`DB_CONNECTION`	`pgsql`	Postgres is the supported driver in production.
`DB_HOST`	`127.0.0.1`	Postgres hostname.
`DB_PORT`	`5432`	Postgres port.
`DB_DATABASE`	—	Database name.
`DB_USERNAME`	—	DB user.
`DB_PASSWORD`	—	DB password.
`REDIS_HOST`	`127.0.0.1`	Redis hostname.
`REDIS_PORT`	`6379`	Redis port.
`REDIS_PASSWORD`	—	Optional password.
`CACHE_STORE`	`redis`	Cache driver.
`SESSION_DRIVER`	`redis`	Session driver.
`QUEUE_CONNECTION`	`redis`	Queue driver. Horizon expects `redis`.

LLM providers

At least one provider must be configured. The system auto-selects based on available credentials, in the order: Cloudflare Workers AI → OpenAI → OpenRouter.

Key	Description
`CLOUDFLARE_ACCOUNT_ID`	Cloudflare account hosting Workers AI.
`CLOUDFLARE_API_TOKEN`	Scoped token with Workers AI permissions.
`CLOUDFLARE_LLM_MODEL`	Default `@cf/meta/llama-3.3-70b-instruct-fp8-fast`.
`CLOUDFLARE_EMBED_MODEL`	Default `@cf/baai/bge-base-en-v1.5`.
`OPENAI_API_KEY`	Fallback provider.
`OPENAI_LLM_MODEL`	Default `gpt-4o-mini`.
`OPENAI_EMBED_MODEL`	Default `text-embedding-3-small`.
`OPENROUTER_API_KEY`	Optional third-tier fallback.

Vector store

Key	Description
`VECTOR_DRIVER`	`vectorize` or `qdrant`.
`VECTORIZE_INDEX`	Vectorize index name.
`VECTORIZE_DIM`	Optional explicit dim; auto-detected from the embedding model if omitted.
`QDRANT_URL`	Qdrant base URL.
`QDRANT_API_KEY`	Optional API key.
`QDRANT_COLLECTION`	Default `glozr`.

Note. The Vectorize index is provisioned at the dim active when it was first created and cannot be resized in place. Switching embedding models with a different dim requires re-provisioning — run php artisan vector:rebuild-index.

Web crawler

Key	Default	Description
`CRAWL_DRIVER`	`cloudflare`	`cloudflare`, `browserless`, or `http`.
`CRAWL_MAX_PAGES_PER_SOURCE`	`500`	Hard cap per source.
`CRAWL_MAX_CONCURRENCY`	`4`	Parallel page fetches per source.
`CRAWL_USER_AGENT`	`GlozrBot/1.0`	Identifies the crawler.
`BROWSERLESS_URL`	—	Required when using Browserless fallback.
`BROWSERLESS_TOKEN`	—	Token for Browserless.

RAG tuning

Key	Default	Description
`RAG_TOP_K`	`6`	Chunks pulled before rerank.
`RAG_FAN_OUT`	`3`	Sub-queries per turn.
`RAG_RERANK`	`true`	Toggle cross-encoder rerank.
`RAG_CONFIDENCE_DEFAULT`	—	Workspace default if not set per agent. `0.5` for bge-base, `0.78` for OpenAI.
`RAG_PAGE_BOOST`	`0.15`	Score bump for chunks on the current page.

Billing & payments

Key	Description
`STRIPE_KEY`	Publishable key.
`STRIPE_SECRET`	Secret key.
`STRIPE_WEBHOOK_SECRET`	Webhook signing secret.
`CASHIER_CURRENCY`	Default `usd`.

Mail

Key	Default	Description
`MAIL_MAILER`	`smtp`	Driver.
`MAIL_HOST`	—	SMTP host.
`MAIL_PORT`	`587`	SMTP port.
`MAIL_USERNAME`	—	Username.
`MAIL_PASSWORD`	—	Password.
`MAIL_FROM_ADDRESS`	`[email protected]`	Default sender.
`MAIL_FROM_NAME`	`Glozr`	Sender display name.

Object storage

Key	Description
`FILESYSTEM_DISK`	`s3` in production.
`AWS_ACCESS_KEY_ID`	Access key (also accepts R2 keys).
`AWS_SECRET_ACCESS_KEY`	Secret.
`AWS_DEFAULT_REGION`	Region (R2 uses `auto`).
`AWS_BUCKET`	Bucket name.
`AWS_ENDPOINT`	Set for R2 / non-AWS S3.
`AWS_USE_PATH_STYLE_ENDPOINT`	`true` for R2.

Realtime (Reverb)

Key	Description
`BROADCAST_CONNECTION`	`reverb`.
`REVERB_APP_ID`	App identifier.
`REVERB_APP_KEY`	Public key, exposed to clients.
`REVERB_APP_SECRET`	Server secret.
`REVERB_HOST`	Public hostname.
`REVERB_PORT`	`443` behind a TLS proxy.
`REVERB_SCHEME`	`https`.

Observability

Key	Description
`SENTRY_LARAVEL_DSN`	Sentry DSN; leave blank to disable.
`SENTRY_TRACES_SAMPLE_RATE`	Trace sampling rate, `0.0`–`1.0`.
`OTEL_EXPORTER_OTLP_ENDPOINT`	OTLP collector URL; blank disables tracing.
`OTEL_SERVICE_NAME`	Default `glozr`.

OAuth integrations

Key	Description
`NOTION_CLIENT_ID` / `NOTION_CLIENT_SECRET`	Notion source connector.
`GOOGLE_CLIENT_ID` / `GOOGLE_CLIENT_SECRET`	Google Drive / Docs connector.

Admin overrides

Many sensitive credentials — Stripe keys, mail SMTP, OAuth client secrets — can be set or overridden from the platform admin's App Settings page without redeploying. Values stored there take precedence over the matching env vars and are encrypted at rest.