Build your first agent in just a few minutes with [Rasa Copilot](https://hello.rasa.com/?utm_source=docs&utm_medium=referral&utm_campaign=docs_cta).

When running Rasa, the `RASA_LICENSE` environment variable needs to contain the Rasa license key.

### Backing services

| Environment Variable | Description | Default |
| --- | --- | --- |
| `POSTGRESQL_SCHEMA` | The postgres schema for the [`SQLTrackerStore`](/content/docs/reference/integrations/tracker-stores/#sqltrackerstore/index.html). | `"public"` |
| `POSTGRESQL_POOL_SIZE` | The limit of the number of open connections for the [`SQLTrackerStore`](/content/docs/reference/integrations/tracker-stores/#sqltrackerstore/index.html). | `50` |
| `POSTGRESQL_MAX_OVERFLOW` | The [maximum overflow](https://docs.sqlalchemy.org/en/13/core/pooling.html#sqlalchemy.pool.QueuePool.params.max_overflow) of pool size for the [`SQLTrackerStore`](/content/docs/reference/integrations/tracker-stores/#sqltrackerstore/index.html). | `100` |
| `RABBITMQ_SSL_CLIENT_CERTIFICATE` | The path to the SSL client certificate for the [`PikaEventBroker`](/content/docs/reference/integrations/event-brokers/#pika-event-broker-for-rabbitmq/index.html). |  |
| `RABBITMQ_SSL_CLIENT_KEY` | The path to the SSL client key for the [`PikaEventBroker`](/content/docs/reference/integrations/event-brokers/#pika-event-broker-for-rabbitmq/index.html). |  |
| `RASA_ENVIRONMENT` | The Rasa environment for the [`PikaEventBroker`](/content/docs/reference/integrations/event-brokers/#pika-event-broker-for-rabbitmq/index.html) and the [`KafkaEventBroker`](/content/docs/reference/integrations/event-brokers/#kafka-event-broker/index.html). |  |
| `SECRET_MANAGER` | The type of [secret manager](/content/docs/reference/integrations/secrets-managers/index.html). | `"vault"` |
| `TICKET_LOCK_LIFETIME` | The lifetime of ticket locks, in seconds. It configures the [lock store](/content/docs/reference/integrations/lock-stores/index.html). | `60` |
| `VAULT_URL` | The URl of the [HashiCorp Vault](/content/docs/reference/integrations/secrets-managers/#hashicorp-vault-secrets-manager/index.html). |  |
| `VAULT_TOKEN` | The token to authenticate to the [HashiCorp Vault](/content/docs/reference/integrations/secrets-managers/#hashicorp-vault-secrets-manager/index.html). |  |
| `VAULT_NAMESPACE` | The namespace of the [HashiCorp Vault](/content/docs/reference/integrations/secrets-managers/#hashicorp-vault-secrets-manager/index.html). |  |
| `VAULT_RASA_SECRETS_PATH` | The path to Rasa secrets in the [HashiCorp Vault](/content/docs/reference/integrations/secrets-managers/#hashicorp-vault-secrets-manager/index.html). | `"rasa-secrets"` |
| `VAULT_TRANSIT_MOUNT_POINT` | The mount point of the [HashiCorp Vault](/content/docs/reference/integrations/secrets-managers/#hashicorp-vault-secrets-manager/index.html). |  |
| `IAM_CLOUD_PROVIDER` | The cloud provider for IAM authentication. Supported value is `aws`. |  |
| `AWS_DEFAULT_REGION` | The AWS region for IAM authentication. Required if `IAM_CLOUD_PROVIDER` is set to `aws`. |  |
| `ELASTICACHE_REDIS_AWS_IAM_ENABLED` | Set to `true` to enable IAM authentication for ElastiCache Redis connections. |  |
| `AWS_ELASTICACHE_CLUSTER_NAME` | The AWS ElastiCache Redis cluster or replication group name. Required if `IAM_CLOUD_PROVIDER` is set to `aws`. |  |
| `RDS_SQL_DB_AWS_IAM_ENABLED` | Set to `true` to enable IAM authentication for RDS connections. |  |
| `SQL_TRACKER_STORE_SSL_MODE` | The SSL mode for the [`SQLTrackerStore`](/content/docs/reference/integrations/tracker-stores/#sqltrackerstore/index.html). Check your deployed SQL database documentation for supported values. For example: see [PostgreSQL SSL Mode descriptions](https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-PROTECTION-MODES) |  |
| `SQL_TRACKER_STORE_SSL_ROOT_CERTIFICATE` | The path to the root certificate for the [`SQLTrackerStore`](/content/docs/reference/integrations/tracker-stores/#sqltrackerstore/index.html). |  |
| `KAFKA_MSK_AWS_IAM_ENABLED` | Set to `true` to enable IAM authentication for MSK connections. |  |

### Model Storage

Environment variables that configure model storage on cloud providers are described in the following sections:

- [Amazon S3 Storage](/content/docs/reference/integrations/model-storage/#amazon-s3-storage/index.html)
- [Google Cloud Storage](/content/docs/reference/integrations/model-storage/#google-cloud-storage/index.html)
- [Azure Storage](/content/docs/reference/integrations/model-storage/#azure-storage/index.html)

### Dialogue Management

| Environment Variable | Description | Default |
| --- | --- | --- |
| `RASA_DUCKLING_HTTP_URL` | The URL of the Duckling service powering the [`DucklingEntityExtractor`](/content/docs/reference/config/components/nlu-components/#ducklingentityextractor/index.html). |  |
| `MAX_NUMBER_OF_PREDICTIONS` | The maximum of predictions after each user message for a NLU-based assistant. See [Action Selection](/content/docs/reference/config/policies/overview/#action-selection/index.html). | `10` |
| `MAX_NUMBER_OF_PREDICTIONS_CALM` | The maximum of predictions after each user message for a CALM-based assistant. See [Action Selection](/content/docs/reference/config/policies/overview/#action-selection/index.html). | `1000` |

### Observability

| Environment Variable | Description | Default |
| --- | --- | --- |
| `LOG_LEVEL` | The log level for Rasa and Rasa Pro. | `"INFO"` |
| `LOG_LEVEL_LIBRARIES` | The log level for 3rd-party libraries. More info [here](/content/docs/reference/api/command-line-interface/#setting-log-levels/index.html). | `"ERROR"` |
| `LOG_LEVEL_KAFKA` | The log level for `kafka` library. More info [here](/content/docs/reference/api/command-line-interface/#setting-log-levels/index.html). | `"ERROR"` |
| `LOG_LEVEL_RABBITMQ` | The log level for `rabbitmq` library. More info [here](/content/docs/reference/api/command-line-interface/#setting-log-levels/index.html). | `"ERROR"` |
| `LOG_LEVEL_PYMONGO` | The log level for `pymongo` library. More info [here](/content/docs/reference/api/command-line-interface/#setting-log-levels/index.html). | `"ERROR"` |
| `LOG_LEVEL_LLM` | The log level for all `LLM` components. More info [here](/content/docs/reference/api/command-line-interface/#log-level-llm-components/index.html). | `"DEBUG"` |
| `LOG_LEVEL_LLM_COMMAND_GENERATOR` | The log level for `LLMCommandGenerator` prompt. More info [here](/content/docs/reference/api/command-line-interface/#log-level-llm-components/index.html). | `"DEBUG"` |
| `LOG_LEVEL_LLM_ENTERPRISE_SEARCH` | The log level for `EnterpriseSearchPolicy` prompt. More info [here](/content/docs/reference/api/command-line-interface/#log-level-llm-components/index.html). | `"DEBUG"` |
| `LOG_LEVEL_LLM_INTENTLESS_POLICY` | The log level for `IntentlessPolicy` prompt. More info [here](/content/docs/reference/api/command-line-interface/#log-level-llm-components/index.html). | `"DEBUG"` |
| `LOG_LEVEL_LLM_REPHRASER` | The log level for `ContextualResponseRephraser` prompt. More info [here](/content/docs/reference/api/command-line-interface/#log-level-llm-components/index.html). | `"DEBUG"` |
| `RASA_TELEMETRY_ENABLED` | Toggle telemetry reporting. More info [here](/content/docs/reference/telemetry/index.html) | `true` |
| `RASA_TELEMETRY_DEBUG` | Toggle debug information for telemetry reporting. | `false` |
| `TRACING_SERVICE_NAME` | The top-level service name when sending traces. More info [here](/content/docs/reference/integrations/tracing/index.html) | `"rasa"` |
| `RASA_TRACING_DEBUGGING_ENABLED` | Allow tracing of `action_metadata` attribute in traces of predicted actions by `EnterpriseSearchPolicy`. | `false` |

### Beta Feature Flags

| Environment Variable | Description | Default |
| --- | --- | --- |
| `RASA_PRO_BETA_STUB_CUSTOM_ACTION` | Stub custom actions during E2E Testing. More info [here](/content/docs/reference/testing/e2e/test-cases/#stubbing-custom-actions/index.html). | `false` |
| `RASA_PRO_BETA_E2E_CONVERSION` | Convert ideal sample conversations into e2e test cases. More info [here](/content/docs/reference/testing/e2e/test-case-conversion/index.html). | `false` |
| `RASA_PRO_BETA_FINE_TUNING_RECIPE` | Ensure comprehensive coverage of your system for fine-tuning. More info [here](/content/docs/pro/customize/fine-tuning-llm/index.html). | `false` |
| `RASA_PRO_BETA_REPEAT_COMMAND` | Voice conversational repair pattern which defines the behaviour when a user asks the assistant to repeat the last message. More info [here](/content/docs/reference/config/components/llm-command-generators/#command-reference/index.html). | `false` |
| `RASA_PRO_BETA_VIER` | Enables usage of the `vier_cvg` voice connector. | `false` |

### Advanced configuration

| Environment Variable | Description | Default |
| --- | --- | --- |
| `COMPRESS_ACTION_SERVER_REQUEST` | Toggle compression of HTTP requests sent to the [Action Server](/content/docs/reference/integrations/action-server/actions/index.html). | `false` |
| `RASA_MAX_CACHE_SIZE` | The maximum size of the training cache, in MB. | `1000` |
| `RASA_CACHE_NAME` | The filename of the training cache. | `"cache.db"` |
| `RASA_CACHE_DIRECTORY` | The directory for the training cache. | `".rasa/cache/"` |
| `RASA_SHELL_STREAM_READING_TIMEOUT_IN_SECONDS` | The stream reading timeout for [`rasa shell`](/content/docs/reference/api/command-line-interface/#rasa-shell/index.html), in seconds. | `10` |
| `SANIC_BACKLOG` | The number of unaccepted connections that the [HTTP server](/content/docs/reference/api/pro/rasa-pro-rest-api/index.html) and [NLG server](/content/docs/reference/integrations/nlg/index.html) will allow before refusing new connections. | `100` |
| `SANIC_WORKERS` | The number of HTTP workers when enabling the [HTTP server](/content/docs/reference/api/pro/rasa-pro-rest-api/index.html). | `1` |
| `READ_YAML_FILE_CACHE_MAXSIZE` | The maximum size of the LRU (Least Recently Used) cache for reading and parsing YAML files. | `256` |

## Rasa Pro Services

The Rasa Pro Services docker container supports configuration through several environment variables. The following table lists the available environment variables:

| Environment Variable | Description | Default |
| --- | --- | --- |
| `RASA_LICENSE` | **Required**. The license key for Rasa Pro Services. |  |
| `KAFKA_BROKER_ADDRESS` | **Required**. The address of the Kafka broker. |  |
| `KAFKA_TOPIC` | **Required**. The topic Rasa publishes events to and Rasa consumes from. | `rasa_core_events` |
| `LOGGING_LEVEL` | Set the log level of the application. Valid levels are DEBUG, INFO, WARNING, ERROR, CRITICAL. (Available from 3.0.2) | `INFO` |
| `FORCE_JSON_LOGGING` | Whether or not to use json logging. |  |
| `RASA_ANALYTICS_DB_URL` | The URL of the data lake to store analytics data in. |  |
| `RASA_ANALYTICS_CONSUMER_ID` | The Consumer group name used when registering the consumers with Kafka. | `rasa-analytics-group` |
| `RASA_ANALYTICS_CONSUMER_COUNT` | The number of Kafka consumers. | `1` |
| `RASA_ANALYTICS_DLQ` | The Queue used to publish events that resulted in a processing failure. | `rasa-analytics-dlq` |
| `KAFKA_SASL_MECHANISM` | The SASL mechanism to use for authentication. |  |
| `KAFKA_SASL_USERNAME` | The username for SASL authentication. |  |
| `KAFKA_SASL_PASSWORD` | The password for SASL authentication. |  |
| `KAFKA_SECURITY_PROTOCOL` | The security protocol to use for communication with Kafka. Supported mechanisms are `PLAINTEXT`, `SASL_PLAINTEXT`, `SASL_SSL` and `SSL` |  |
| `KAFKA_SSL_CA_LOCATION` | The filepath for SSL CA Certificate that will be used to connect with Kafka (Available from `3.1.0b1`) |  |
| `KAFKA_SSL_CERTFILE_LOCATION` | The filepath for SSL client Certificate that will be used to connect with Kafka (Available from `3.6.0`) |  |
| `KAFKA_SSL_KEYFILE_LOCATION` | The filepath for SSL Keyfile that will be used to connect with Kafka (Available from `3.6.0`) |  |
| `IAM_CLOUD_PROVIDER` | The cloud provider for IAM authentication. Supported value is `aws` (Available from `3.6.0`) |  |
| `AWS_DEFAULT_REGION` | The AWS region for IAM authentication. Required if `IAM_CLOUD_PROVIDER` is set to `aws`. (Available from `3.6.0`) |  |
| `RASA_ANALYTICS_DB_HOST_NAME` | The hostname of the PostgreSQL db to store analytics data in. Required if `IAM_CLOUD_PROVIDER` is set to `aws`. (Available from `3.6.0`) |  |
| `RASA_ANALYTICS_DB_PORT` | The port of the PostgreSQL db to store analytics data in. Required if `IAM_CLOUD_PROVIDER` is set to `aws`. (Available from `3.6.0`) |  |
| `RASA_ANALYTICS_DB_NAME` | The database name of the PostgreSQL db to store analytics data in. Required if `IAM_CLOUD_PROVIDER` is set to `aws`. (Available from `3.6.0`) |  |
| `RASA_ANALYTICS_DB_USERNAME` | The username of the PostgreSQL db to store analytics data in. Required if `IAM_CLOUD_PROVIDER` is set to `aws`. (Available from `3.6.0`) |  |
| `RASA_ANALYTICS_DB_SSL_MODE` | The SSL mode of the PostgreSQL db to store analytics data in. (Available from `3.6.0`) |  |
| `RASA_ANALYTICS_DB_SSL_CA_LOCATION` | The path to the root certificate of the PostgreSQL db to store analytics data in. (Available from `3.6.0`) |  |
| `RDS_SQL_DB_AWS_IAM_ENABLED` | Set to `true` to enable IAM authentication for RDS connections. |  |
| `KAFKA_MSK_AWS_IAM_ENABLED` | Set to `true` to enable IAM authentication for MSK connections. |  |
| `RUN_ANALYTICS_DB_MIGRATIONS` | Set to `false` to not run the analytics database migrations on startup. | `true` |

## Rasa Studio

These environment variables take precedence over the values in the `global.yml` file, that is created with `rasa studio config`.

| Environment Variable | Description | Default |
| --- | --- | --- |
| `RASA_STUDIO_AUTH_SERVER_URL` | (Rasa Pro) URL of the Authentication Server. |  |
| `RASA_STUDIO_CLI_STUDIO_URL` | (Rasa Pro) URL of the Studio Data Endpoint. |  |
| `RASA_STUDIO_CLI_REALM_NAME_KEY` | (Rasa Pro) Name of the Keycloak realm which hold the data about client ID and client secret. |  |
| `RASA_STUDIO_CLI_CLIENT_ID_KEY` | (Rasa Pro) Client ID used to authenticate `rasa studio` CLI tool with Keycloak |  |

## Rasa SDK

The Rasa SDK docker container supports configuration through several environment variables. The following table lists the available environment variables:

| Environment Variable | Description | Default |
| --- | --- | --- |
| `ACTION_SERVER_SANIC_WORKERS` | The number of Sanic HTTP workers in the Action server. | `1` |
| `LOG_LEVEL_LIBRARIES` | The log level of third-party libraries. See [Log level configuration](/content/docs/reference/api/command-line-interface/#setting-log-levels/index.html). | `ERROR` |