> ## Documentation Index > Fetch the complete documentation index at: https://mintlify.com/calcom/cal.com/llms.txt > Use this file to discover all available pages before exploring further. # Configuration > Complete guide to Cal.com environment variables and configuration options Cal.com is configured primarily through environment variables defined in a `.env` file. This guide documents all available configuration options. ## Quick Setup 1. Copy the example environment file: ```bash theme={null} cp .env.example .env ``` 2. Generate required secrets: ```bash theme={null} # NextAuth secret (32 bytes) openssl rand -base64 32 # Encryption key (24 bytes for AES256) openssl rand -base64 24 # VAPID keys for push notifications npx web-push generate-vapid-keys ``` 3. Configure essential variables in `.env` ## Essential Configuration ### Database PostgreSQL connection string with credentials. Used by the application and connection poolers. ```bash theme={null} DATABASE_URL="postgresql://postgres:password@localhost:5432/calendso" ``` Direct PostgreSQL connection for migrations. Use the same as `DATABASE_URL` if not using a connection pooler like PgBouncer. ```bash theme={null} DATABASE_DIRECT_URL="postgresql://postgres:password@localhost:5432/calendso" ``` Optional separate database for analytics and insights data. SSL mode for PostgreSQL connection. Use `no-verify` for self-signed certificates (Heroku, etc.). ```bash theme={null} PGSSLMODE="no-verify" ``` ### Application URLs Base URL where your Cal.com instance is hosted. Must include protocol. ```bash theme={null} NEXT_PUBLIC_WEBAPP_URL="https://cal.yourdomain.com" ``` For organizations feature, use app subdomain: `http://app.cal.local:3000` Marketing website URL. Defaults to `NEXT_PUBLIC_WEBAPP_URL`. ```bash theme={null} NEXT_PUBLIC_WEBSITE_URL="https://yourdomain.com" ``` URL for Cal.com embed library. ```bash theme={null} NEXT_PUBLIC_EMBED_LIB_URL="http://localhost:3000/embed/embed.js" ``` ### Authentication (NextAuth) Full URL to NextAuth API endpoint. Required for Vercel deployments. ```bash theme={null} NEXTAUTH_URL="https://cal.yourdomain.com" ``` Secret for encrypting session cookies. Generate with `openssl rand -base64 32`. ```bash theme={null} NEXTAUTH_SECRET="your-generated-secret-here" ``` Domain for cross-domain cookie authentication. ```bash theme={null} NEXTAUTH_COOKIE_DOMAIN=".yourdomain.com" ``` ### Encryption 32-byte key for AES256 encryption. Generate with `openssl rand -base64 24`. ```bash theme={null} CALENDSO_ENCRYPTION_KEY="your-24-character-key" ``` 24-byte key for app credential encryption in credential sync. ```bash theme={null} CALCOM_APP_CREDENTIAL_ENCRYPTION_KEY="$(openssl rand -base64 24)" ``` 24-byte key for service account encryption. ```bash theme={null} CALCOM_SERVICE_ACCOUNT_ENCRYPTION_KEY="$(openssl rand -base64 24)" ``` ## Security ### Content Security Policy Enable Content Security Policy. Set to `non-strict` for enhanced security. ```bash theme={null} CSP_POLICY="non-strict" ``` Strict CSP enables on login pages; report-only mode on SSR pages ### Rate Limiting Root key from [Unkey](https://unkey.com) for rate limiting. Optional but recommended for production. Requires permissions: `ratelimit.create_namespace` and `ratelimit.limit` ### Allowed Hostnames JSON array of allowed hostnames for the application. ```bash theme={null} ALLOWED_HOSTNAMES='"cal.com","cal.dev","localhost:3000"' ``` Reserved organization subdomain names. ```bash theme={null} RESERVED_SUBDOMAINS='"app","auth","docs","api","www"' ``` ## Email Configuration ### SMTP Settings Sender email address for all outgoing emails. ```bash theme={null} EMAIL_FROM="notifications@yourdomain.com" ``` Display name for sender. ```bash theme={null} EMAIL_FROM_NAME="Cal.com" ``` SMTP server hostname. ```bash theme={null} # Gmail EMAIL_SERVER_HOST="smtp.gmail.com" # Office 365 EMAIL_SERVER_HOST="smtp.office365.com" # Local development (Mailhog) EMAIL_SERVER_HOST="localhost" ``` SMTP server port. ```bash theme={null} EMAIL_SERVER_PORT=587 # TLS EMAIL_SERVER_PORT=465 # SSL (Gmail) EMAIL_SERVER_PORT=1025 # Mailhog (development) ``` SMTP authentication username. SMTP authentication password or app-specific password. ### SendGrid SendGrid API key for transactional emails and reminders. ```bash theme={null} SENDGRID_API_KEY="SG.xxxxxxxxxxxx" ``` Verified sender email in SendGrid. ```bash theme={null} SENDGRID_EMAIL="noreply@yourdomain.com" ``` Display name for SendGrid emails. ```bash theme={null} NEXT_PUBLIC_SENDGRID_SENDER_NAME="Cal.com Notifications" ``` ### Resend Resend API key for transactional emails (alternative to SendGrid). ```bash theme={null} RESEND_API_KEY="re_xxxxxxxxxxxx" ``` ## License & Enterprise Enterprise license key. Required for enterprise features. ```bash theme={null} CALCOM_LICENSE_KEY="your-license-key" ``` Signature token for Cal.com License API authentication. Route to Cal.com License API. ## Integrations ### Google Calendar Google OAuth credentials JSON for Calendar and Meet integration. ```bash theme={null} GOOGLE_API_CREDENTIALS='{"web":{"client_id":"...","client_secret":"..."}}' ``` See [Obtaining Google API Credentials](#) for setup instructions. Enable "Sign in with Google". ```bash theme={null} GOOGLE_LOGIN_ENABLED=true ``` Configure as Internal app to prevent unauthorized access Google Calendar API key for holidays feature. Token to verify incoming webhooks from Google Calendar. Override URL for Google Calendar webhooks. Defaults to `NEXT_PUBLIC_WEBAPP_URL`. ### Microsoft 365 Microsoft Graph Application (client) ID. Microsoft Graph client secret. Token to verify incoming webhooks from Microsoft Calendar. Override URL for Microsoft Calendar webhooks. ### Zoom Zoom OAuth client ID. Zoom OAuth client secret. ### Daily.co Video Daily.co API key for video conferencing. Enable Daily Scale Plan features (recording, etc.). ```bash theme={null} DAILY_SCALE_PLAN=true ``` ### Stripe Stripe secret key for payment processing. Stripe client ID for Connect. Stripe webhook signing secret. Stripe webhook secret for app store integrations. ## SMS & WhatsApp ### Twilio Twilio Account SID. Twilio Auth Token. Twilio Messaging Service SID. Twilio phone number for SMS. ```bash theme={null} TWILIO_PHONE_NUMBER="+1234567890" ``` Twilio WhatsApp-enabled phone number. ```bash theme={null} TWILIO_WHATSAPP_PHONE_NUMBER="whatsapp:+1234567890" ``` SMS sender ID (max 11 characters, letters, numbers, and spaces only). Twilio Verify Service SID for phone verification. ## Push Notifications VAPID public key for browser push notifications. Generate with: `npx web-push generate-vapid-keys` ```bash theme={null} NEXT_PUBLIC_VAPID_PUBLIC_KEY="BKxxx..." ``` VAPID private key for push notifications. ```bash theme={null} VAPID_PRIVATE_KEY="xxx..." ``` ## Branding & Customization Application name displayed throughout the UI. ```bash theme={null} NEXT_PUBLIC_APP_NAME="Your Company Scheduler" ``` Support email address. ```bash theme={null} NEXT_PUBLIC_SUPPORT_MAIL_ADDRESS="support@yourdomain.com" ``` Company name for legal pages. ```bash theme={null} NEXT_PUBLIC_COMPANY_NAME="Your Company, Inc." ``` URL to your privacy policy. ```bash theme={null} NEXT_PUBLIC_WEBSITE_PRIVACY_POLICY_URL="https://yourdomain.com/privacy" ``` URL to your terms of service. ```bash theme={null} NEXT_PUBLIC_WEBSITE_TERMS_URL="https://yourdomain.com/terms" ``` Disable new user signups. ```bash theme={null} NEXT_PUBLIC_DISABLE_SIGNUP=true ``` ## Analytics & Monitoring ### Telemetry Disable anonymous usage analytics. ```bash theme={null} CALCOM_TELEMETRY_DISABLED=1 ``` ### Sentry Sentry DSN for error tracking. ```bash theme={null} NEXT_PUBLIC_SENTRY_DSN="https://xxx@sentry.io/xxx" ``` Sentry organization slug. Sentry project name. Sentry authentication token for releases. ### PostHog PostHog project API key. PostHog instance URL. ```bash theme={null} NEXT_PUBLIC_POSTHOG_HOST="https://app.posthog.com" ``` ### Logging Logging verbosity level: * `0`: silly & upwards * `1`: trace & upwards * `2`: debug & upwards * `3`: info & upwards (recommended) * `4`: warn & upwards * `5`: error & fatal * `6`: fatal only ```bash theme={null} NEXT_PUBLIC_LOGGER_LEVEL=3 ``` ## Organizations (Enterprise) Enable organizations feature (requires full domain setup). ```bash theme={null} ORGANIZATIONS_ENABLED=true NEXT_PUBLIC_WEBAPP_URL="http://app.cal.local:3000" ``` Serve only one organization's booking pages. ```bash theme={null} NEXT_PUBLIC_SINGLE_ORG_SLUG="your-org" ``` Auto-link external signups to organizations by email domain. Minimum seats for self-serve organizations. ### Vercel Domain Management Vercel project ID for subdomain management. Vercel team ID. Vercel API token for domain management. ### Cloudflare DNS Management Use Cloudflare for DNS management. ```bash theme={null} CLOUDFLARE_DNS=1 ``` Cloudflare API token with Zone Edit permissions. Cloudflare Zone ID for your domain. CNAME target for Vercel domains. ## SAML SSO (Enterprise) Separate PostgreSQL database for SAML data. ```bash theme={null} SAML_DATABASE_URL="postgresql://user:pass@host:5432/cal-saml" ``` Comma-separated list of admin emails. ```bash theme={null} SAML_ADMINS="admin@company.com,admin2@company.com" ``` Random secret for OAuth 2.0 SAML flow. ## API V2 URL for Cal.com Platform API v2. ```bash theme={null} NEXT_PUBLIC_API_V2_URL="http://localhost:5555/api/v2" ``` Port for API v2 service. ```bash theme={null} API_PORT=5555 ``` Full URL to API v2 service. Web application URL for API callbacks. Prefix for API keys. ```bash theme={null} API_KEY_PREFIX="cal_" ``` ## Cron Jobs API key for authenticating cron job requests. ```bash theme={null} CRON_API_KEY="$(openssl rand -hex 16)" ``` Auto-sync app metadata from config files. ```bash theme={null} CRON_ENABLE_APP_SYNC=true ``` ## Redis Redis connection string for caching and queues. ```bash theme={null} REDIS_URL="redis://localhost:6379" ``` Redis port (used in docker-compose). ## Performance & Optimization Node.js runtime options. ```bash theme={null} NODE_OPTIONS="--max-old-space-size=16384" ``` Memory limit for build process (in MB). Batch size for database operations. Process timezone. Always use UTC. ```bash theme={null} TZ=UTC ``` ## Development & Testing Node environment. ```bash theme={null} NODE_ENV="production" # or "development" ``` Enable E2E testing mode. ```bash theme={null} NEXT_PUBLIC_IS_E2E=1 ``` Enable Mailhog for email testing. ```bash theme={null} E2E_TEST_MAILHOG_ENABLED=1 ``` ## Example Configurations ### Minimal Production Setup ```bash theme={null} # Database DATABASE_URL="postgresql://user:pass@db.example.com:5432/calendso" DATABASE_DIRECT_URL="postgresql://user:pass@db.example.com:5432/calendso" # URLs NEXT_PUBLIC_WEBAPP_URL="https://cal.yourdomain.com" NEXTAUTH_URL="https://cal.yourdomain.com" # Secrets (generate these!) NEXTAUTH_SECRET="generated-with-openssl-rand" CALENDSO_ENCRYPTION_KEY="generated-24-byte-key" CRON_API_KEY="generated-cron-key" # VAPID (generate with npx web-push generate-vapid-keys) NEXT_PUBLIC_VAPID_PUBLIC_KEY="your-public-key" VAPID_PRIVATE_KEY="your-private-key" # Email EMAIL_FROM="noreply@yourdomain.com" SENDGRID_API_KEY="SG.xxxxx" SENDGRID_EMAIL="noreply@yourdomain.com" # Disable telemetry CALCOM_TELEMETRY_DISABLED=1 ``` ### Docker Compose Setup ```bash theme={null} # Docker-managed services DATABASE_URL="postgresql://unicorn_user:magical_password@database:5432/calendso" REDIS_URL="redis://redis:6379" # Application NEXT_PUBLIC_WEBAPP_URL="http://localhost:3000" NEXTAUTH_URL="http://localhost:3000" NEXTAUTH_SECRET="secret-for-dev" CALENDSO_ENCRYPTION_KEY="encryption-key-for-dev" # VAPID keys NEXT_PUBLIC_VAPID_PUBLIC_KEY="your-public-key" VAPID_PRIVATE_KEY="your-private-key" # Email (development with Mailhog) EMAIL_SERVER_HOST="localhost" EMAIL_SERVER_PORT=1025 EMAIL_FROM="dev@cal.local" ``` ### Enterprise with Organizations ```bash theme={null} # Enable organizations ORGANIZATIONS_ENABLED=true NEXT_PUBLIC_WEBAPP_URL="https://app.yourcompany.com" # License CALCOM_LICENSE_KEY="your-enterprise-license" CAL_SIGNATURE_TOKEN="your-signature-token" # SAML SSO SAML_DATABASE_URL="postgresql://user:pass@host:5432/cal-saml" SAML_ADMINS="admin@yourcompany.com" # Domain management (Cloudflare) CLOUDFLARE_DNS=1 AUTH_BEARER_TOKEN_CLOUDFLARE="your-api-token" CLOUDFLARE_ZONE_ID="your-zone-id" ``` ## Next Steps * Review [Database Setup](/self-hosting/database) for connection pooling and migrations * See [Docker Configuration](/self-hosting/docker) for container-specific options * Configure [Deployment](/self-hosting/deployment) for your platform