Server & runtime

General settings for the Norish server process. Most of these do not require editing; MASTER_KEY is mandatory to generate.

Core

Variable	Description	Default
MASTER_KEY	32+ character key for encryption derivation	(required)
AUTH_URL	Public URL used for auth callbacks and links	http://localhost:3000
NODE_ENV	Runtime environment	production (set by the Docker image)
HOST	Server bind address	0.0.0.0
PORT	Server port	3000
REDIS_URL	Redis connection URL for events and jobs	redis://localhost:6379

Generate a MASTER_KEY

MASTER_KEY derives the encryption keys used to protect stored secrets. changing it invalidates previously encrypted data. Generate with:

openssl rand -base64 32

Networking & origins

Variable	Description	Default
TRUSTED_ORIGINS	Comma-separated additional trusted origins	(empty)

TRUSTED_ORIGINS is useful when the instance is reached from more than one origin, for example http://192.168.1.100:3000,https://norish.example.com. The WebSocket refuses an upgrade from a browser origin it does not trust. WebSocket & realtime.

Auth rate limiting

Variable	Description	Default
AUTH_RATE_LIMIT_ENABLED	Enable auth endpoint rate limiting	true
AUTH_RATE_LIMIT_WINDOW	Window length in seconds	60
AUTH_RATE_LIMIT_MAX	Requests allowed per window	20

Warning

Turning this off removes brute-force protection from sign-in.

Registration

Variable	Description	Default
ENABLE_REGISTRATION	Allow new-user registration	false

After the first user signs in, registration is disabled automatically. See Authentication.

Logging

Variable	Description	Default
NEXT_PUBLIC_LOG_LEVEL	Log verbosity (debug, info, warn, error)	info

Uploads

Variable	Description	Default
UPLOADS_DIR	Upload storage directory	./.runtime/uploads (dev), /app/uploads (prod)
MAX_AVATAR_FILE_SIZE	Max avatar upload size (bytes)	5242880
MAX_IMAGE_FILE_SIZE	Max image upload size (bytes)	10485760
MAX_VIDEO_FILE_SIZE	Max video upload size (bytes)	104857600

Scheduler

Variable	Description	Default
SCHEDULER_CLEANUP_MONTHS	Cleanup retention period in months	3

Ingredient catalogue

Variable	Description	Default
INGREDIENT_CATALOGUE_URL	Where the ingredient catalogue seed is fetched from, nightly and at startup. Empty turns the fetch off	The Open Food Facts ingredients taxonomy
INGREDIENT_REVIEW_CONCURRENCY	How many ingredients are asked at once, from 1 to 50. Lower it when a self-hosted model struggles with parallel requests	10

Norish seeds its catalogue of ingredients from the Open Food Facts ingredients taxonomy. The ingredient taxonomy is refreshed at midnight every night.

On a server without internet, serve a copy of ingredients.txt from a local mirror and point INGREDIENT_CATALOGUE_URL at it, or leave it empty. Full functionallity will remain.

The taxonomy is available under the Open Database License (ODbL). Downloadable under: Settings => Ingredients => Data sources.