Configuration
Set the few runtime options most local setups need in Compose.
Authentication
The checked-in Compose setup enables provider and admin authentication with admin and sqrzl-secret. Change these values before sharing a local environment.
For an open development instance, remove SQRZL_ACCESS_KEY_ID and SQRZL_SECRET_ACCESS_KEY from the service environment. Authentication is enabled only when both are set. Provider-specific settings can override the generic credentials.
Set SQRZL_ADMIN_AUTH_DISABLED=true to leave the UI and admin API open while keeping provider API authentication enabled.
MCP uses the same listener but has its own OAuth bearer-token flow when protected. See MCP configuration before connecting an MCP client to an authenticated instance.
Common settings
| Variable | Purpose |
|---|---|
SQRZL_BLOBS_PATH | Storage root. Use /app/blobs with the Compose volume. |
SQRZL_MAX_REQUEST_BYTES | Maximum size for one HTTP request body or SMTP DATA payload; default is 128 MiB. |
SQRZL_BUCKET_LIST | Comma-separated buckets created at startup. |
SQRZL_LOG_FORMAT | text or json; default is text. |
SQRZL_API_PORT | Storage API listener; default is 9000. |
SQRZL_UI_PORT | Admin UI listener; default is 9001. |
SQRZL_SMTP_PORT | SMTP capture listener; default is 2525. |
Docker port mappings are written HOST:CONTAINER. To use host port 19000 for the API, map 19000:9000 and keep the container port unchanged.
Provider credentials
- Azure overrides:
AZURE_ACCOUNTandAZURE_ACCOUNT_KEY. - GCS HMAC:
GCS_HMAC_ACCESS_IDandGCS_HMAC_SECRET. - OCI signing: set all four
OCI_*identity and public-key variables.
Provider credential pairs must be configured together. See S3, Azure, GCS, or OCI for client setup.