Environment variables (operator)

Focus: variables customers may see in advanced configuration. Do not set test-only or inject flags on production hosts.

Paths & endpoints

Name	Typical purpose
SOVIEZ_OPS_ROOT	Operations state
SOVIEZ_DEVICE_DIR	Device binding
SOVIEZ_SECRETS_DIR	Secrets
SOVIEZ_TENANT_DIR	Tenant runtime
SOVIEZ_SAAS_BASE_URL	Soviez API base (connected mode)
SOVIEZ_STAGES_DIR	Stage data
SOVIEZ_TEST_MODE	Must be 0 on customer hosts

Secrets (prefer files)

Prefer file-based secrets where the product supports them (for example backup passphrase files). Do not put activation secrets in shell history or world-readable files.

Safety windows & policy

Name	Purpose
SOVIEZ_UPDATE_STRICT_SIG	Require signed update artifacts when enabled
SOVIEZ_UPDATE_SAFETY_WINDOW_HOURS	Update rollback window
SOVIEZ_RESTORE_SAFETY_WINDOW_HOURS	Restore rollback window
SOVIEZ_EDGE_MODE	Edge mode (direct or Cloudflare-assisted)
SOVIEZ_BACKUP_DISABLE_ENCRYPTION	Weakens local backups — avoid on Production
SOVIEZ_LOG_LEVEL	Logging verbosity

Most day-to-day operators should use soviez.sh commands rather than editing environment files by hand.

Related: CONFIGURATION_REFERENCE.md, CLI_REFERENCE.md.