# Settings and Environment Variables

> Source: https://docs.synthesized.io/tdk/latest/user_guide/040_reference/environment_variables/
> For the complete documentation index, see [llms.txt](https://docs.synthesized.io/llms.txt).

Most of the platform’s settings are environment variables. This page lists every setting that the documentation describes, which part of the platform reads it, and the page that explains it.

## Where to set them

 
| Part | Where its settings go |
| --- | --- |
| 
Governor

 | 

On its API container: the `backend` service in Docker Compose, or `api.container.config` in Helm (`api.container.secretConfig` for secrets). Restart the container after a change.

 |
| 

Worker

 | 

On the worker container, for example with `docker run -e` or in the worker service of your Compose file.

 |
| 

CLI

 | 

In the environment of the shell or job that runs `tdk`, in an `application.properties` file, or with `docker run -e` for the CLI Docker image.

 |

Settings with names like `TDK_WORKINGDIRECTORY_ENABLED` can also be set as [application properties](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties).

Workflow behaviour, such as modes, transformers and flags, isn’t set here: it’s in the [workflow configuration](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/).

## Governor

  
| Variable | What it’s for | Explained in |
| --- | --- | --- |
| 
`SPRING_DATASOURCE_URL`, `SPRING_DATASOURCE_USERNAME`, `SPRING_DATASOURCE_PASSWORD`

 | 

Governor’s own database

 | 

[Docker Compose](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/dc), [Helm](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/helm)

 |
| 

`JWT_SECRET`

 | 

Key that signs sign-in tokens

 | 

[Docker Compose](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/dc)

 |
| 

`ADMIN_EMAIL`, `ADMIN_DEFAULT_PASSWORD`

 | 

First administrator account

 | 

[Docker Compose](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/dc)

 |
| 

`CREDENTIALS_ENCRYPTION_KEY`

 | 

Key that encrypts stored data source passwords

 | 

[Docker Compose](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/dc)

 |
| 

`SYNTHESIZED_KEY`

 | 

License key

 | 

[Docker Compose](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/dc)

 |
| 

`UI_XML_GENERATOR`, `UI_CSRI`, `UI_SAP_UI`

 | 

Feature flags

 | 

[Feature flags](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_feature_flags)

 |
| 

`JWT_ACCESS_TOKEN_EXPIRATION`, `JWT_REFRESH_TOKEN_EXPIRATION`, `JWT_ISSUER`

 | 

Sign-in tokens

 | 

[Security and sign-in](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_security_and_sign_in)

 |
| 

`GOVERNOR_SECURITY_*`

 | 

Roles, CORS, owner-only access, single sign-on redirect

 | 

[Security and sign-in](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_security_and_sign_in)

 |
| 

`GOVERNOR_SECURITY_SAML_*`

 | 

SAML roles and logout

 | 

[SAML](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_saml), [Single Sign-On](https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/authentication/sso)

 |
| 

`WORKER_GRPC_PORT`, `WORKER_GRPC_MAXMESSAGESIZE`, `WORKER_GRPC_COMPRESSION_ENABLED`, `WORKER_ALIVEMINUTES`, `WORKER_CHECKTASKDELAY`

 | 

Connection to workers

 | 

[Workers](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_workers)

 |
| 

`WORKFLOW_RUNNER_*`, `WORKFLOW_DATASOURCE_*`, `WORKFLOW_LOGFILE_*`

 | 

Run threads, data source connection pools, run log files

 | 

[Workflow execution](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_workflow_execution)

 |
| 

`GOVERNOR_SCHEDULING_*`

 | 

Background housekeeping

 | 

[Scheduled tasks](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_scheduled_tasks)

 |
| 

`SPRING_DATASOURCE_HIKARI_*`

 | 

Connection pool for Governor’s database

 | 

[Governor database connection pool](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_governor_database_connection_pool)

 |
| 

`MANAGEMENT_*`, `SENTRY_*`, `APP_FEIGN_*`

 | 

Health checks, metrics, error reporting, HTTP timeouts

 | 

[Monitoring](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_monitoring)

 |
| 

`DB_URL`, `DB_USER`, `DB_PASSWORD`, `SQL_DIALECT`, `SERVER_PORT`

 | 

Governor’s database and API port

 | 

[Application Properties](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_governor_only)

 |
| 

`SPRING_LIQUIBASE_*`, `SPRING_MAIN_*`

 | 

Internal settings

 | 

[Internal settings](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_internal_settings)

 |

## Worker

  
| Variable | What it’s for | Explained in |
| --- | --- | --- |
| 
`WORKER_SERVERHOST`, `WORKER_SERVERPORT`

 | 

The Governor gRPC host and port to connect to

 | 

[Synthesized Workers](https://docs.synthesized.io/tdk/latest/user_guide/020_guides/advanced_workflows/workers)

 |
| 

`WORKER_TAGS`

 | 

Tags that identify the worker

 | 

[Synthesized Workers](https://docs.synthesized.io/tdk/latest/user_guide/020_guides/advanced_workflows/workers)

 |
| 

`WORKER_DATASOURCES`

 | 

The worker groups it serves, or `*` for all

 | 

[Synthesized Workers](https://docs.synthesized.io/tdk/latest/user_guide/020_guides/advanced_workflows/workers), [Multi-Worker Deployment](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/multi_worker)

 |
| 

`WORKER_USEPLAINTEXT`

 | 

Plaintext instead of TLS

 | 

[Synthesized Workers](https://docs.synthesized.io/tdk/latest/user_guide/020_guides/advanced_workflows/workers)

 |
| 

`WORKER_GRPC_TLS_ENABLED`, `WORKER_GRPC_TLS_CERT_CHAIN`, `WORKER_GRPC_TLS_PRIVATE_KEY`, `WORKER_GRPC_TLS_TRUST_CERT`, `WORKER_GRPC_TLS_KEY_PASSWORD`

 | 

Mutual TLS, on the worker and on Governor

 | 

[Worker–Governor mTLS](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/production_setup/worker_mtls)

 |
| 

`WORKER_WORKING_DIRECTORY_PATH`

 | 

Working directory

 | 

[Working directory](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_working_directory)

 |
| 

`AGENT_*`

 | 

Older names of the `WORKER_*` variables, still accepted

 | 

[Workers](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/advanced_configuration#_workers)

 |

## CLI

  
| Variable | What it’s for | Explained in |
| --- | --- | --- |
| 
`SYNTHESIZED_USERCONFIG_FILE`, `SYNTHESIZED_USERCONFIG`

 | 

The workflow configuration

 | 

[CLI Docker Environment Variables](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/environment_variables/docker_environment_variables)

 |
| 

`SYNTHESIZED_INVENTORY_FILE`, `SYNTHESIZED_INVENTORY`

 | 

The inventory file

 | 

[CLI Docker Environment Variables](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/environment_variables/docker_environment_variables)

 |
| 

`SYNTHESIZED_INPUT_*`, `SYNTHESIZED_OUTPUT_*`

 | 

Input and output connections

 | 

[CLI Docker Environment Variables](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/environment_variables/docker_environment_variables)

 |
| 

`SYNTHESIZED_COMMAND`

 | 

The command to run

 | 

[CLI Docker Environment Variables](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/environment_variables/docker_environment_variables)

 |
| 

`SYNTHESIZED_KEY`

 | 

License key

 | 

[CLI installation](https://docs.synthesized.io/tdk/latest/user_guide/050_deployment_operations/installation_methods/cli_installation#set_your_license_key)

 |

## CLI and Governor

  
| Variable | What it’s for | Explained in |
| --- | --- | --- |
| 
`SECRETS_AWS_SECRET_MANAGER_ENABLED`, `SECRETS_GCP_SECRET_MANAGER_ENABLED`, `SECRETS_VAULT_SECRET_MANAGER_ENABLED`

 | 

Credentials from a secret manager

 | 

[Secret managers](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_secret_managers)

 |
| 

`TDK_WORKINGDIRECTORY_ENABLED`, `TDK_WORKINGDIRECTORY_PATH`

 | 

Working directory

 | 

[Working directory](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_working_directory)

 |
| 

`TDK_DB_MAXIMUM-POOL-SIZE`

 | 

Database connection pool size

 | 

[Connection pool](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_connection_pool)

 |
| 

`TDK_AWS_ENABLED`, `TDK_GCP_ENABLED`

 | 

AWS and Google Cloud integration

 | 

[Cloud integrations](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_cloud_integrations_and_licensing)

 |
| 

`TDK_AWS_LICENSE_ENABLED`, `TDK_GCP_LICENSE_ENABLED`, `TDK_AZURE_LICENSE_ENABLED`

 | 

Marketplace licensing

 | 

[Cloud integrations](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_cloud_integrations_and_licensing)

 |
| 

`GOOGLE_APPLICATION_CREDENTIALS`

 | 

Google Cloud credentials file

 | 

[Cloud integrations](https://docs.synthesized.io/tdk/latest/user_guide/040_reference/configuration/application_properties#_cloud_integrations_and_licensing)

 |
| 

`TDK_S3_PROTOCOL`, `TDK_S3_REGION`, `TDK_S3_FORCE_PATH_STYLE`

 | 

S3 client for CSV files in S3

 | 

[CSV Support](https://docs.synthesized.io/tdk/latest/user_guide/070_integrations/cloud_storage/csv)

 |

## Java options

`JAVA_TOOL_OPTIONS` passes options to the Java runtime, for example the Kerberos settings in [Kerberos for database connections](https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/authentication/kerberos). For the JVM heap, see [Performance Troubleshooting](https://docs.synthesized.io/tdk/latest/user_guide/080_troubleshooting/performance/).