Configuration reference

All configuration is environment-driven; there are no hardcoded secrets. Settings live in three env files (backend, frontend, db) plus an optional esign.env for the signing service. This page lists the variables grouped by purpose and marks each Required or Optional. Optional integrations are disabled simply by leaving their variables unset.

Security: treat every value here as sensitive. Restrict the env files to chmod 600, keep them out of version control, and rotate SECRET_KEY / BACKEND_LOGIN_PASSWORD_KEY / DB credentials on a schedule.

Backend (`config/backend.env`)

Core (Required)

Variable	Purpose
`SECRET_KEY`	Django cryptographic secret (session/CSRF/JWT signing). Use 50+ random chars. The platform fails to start without it.
`DEBUG`	`False` in production.
`DJANGO_SETTINGS_MODULE`	Settings module (e.g. `quoqo_dr.settings.base`).
`ALLOWED_HOSTS`	Comma-separated hostnames the backend will serve (e.g. `sign.example.com`).
`SERVER_BASE_URL`	Public base URL of the backend API (used in email links). e.g. `https://sign.example.com/backend`.
`FRONTEND_URL`	Public base URL of the web app, e.g. `https://sign.example.com`.
`BACKEND_LOGIN_PASSWORD_KEY`	Key used to decode the login password transport encoding. Must exactly equal the frontend’s `REACT_APP_LOGIN_PASSWORD_KEY`, or logins fail.

Database — MySQL (Required)

Variable	Purpose
`DB_HOST` / `DB_PORT`	MySQL host/port (`db` / `3306` in the bundled stack).
`DB_NAME`	Database name.
`qsign_DB_NAME`	QSign schema name (typically the same DB).
`DB_USER` / `DB_PASSWORD`	MySQL credentials (match `config/db.env`).

Cache / Search (Required)

Variable	Purpose
`REDIS_SERVER_URL`	Redis URL, e.g. `redis://redis:6379`. Powers the cache, API throttle counter, and task broker.
`SOLR_BASE_URL`	Solr base URL, e.g. `http://solr:8983/solr/`.
`SOLR_CORE`	Solr core name (e.g. `qsign`).

Document storage (Required — choose local or cloud)

Variable	Purpose
`LOCAL_STORAGE_PATH`	Filesystem path inside the container for document storage (default local mode), e.g. `/app/secure_storage/qsigncontainer`.
`STORAGE_SERVER_URL`	URL the backend serves authenticated downloads from, e.g. `https://sign.example.com/backend/contract/storage`.
`AZURE_STORAGE_ACCOUNT`, `AZURE_STORAGE_KEY_NAME`, `AZURE_CONTAINER_NAME`	(Optional) Use Azure Blob Storage instead of local disk. Leave unset for local.

Email (Recommended — required for invitations/reminders)

QSign sends transactional email via an HTTP email API. Configure at least one:

Variable	Purpose
`RESEND_API_KEY`	Resend API key.
`ZEPTOMAIL_TOKEN`	Zeptomail API key (primary path when set).
`DEFAULT_FROM_EMAIL`	From-address (must be a domain verified with your provider).

The backend’s mail helper tries the primary provider and falls back to the secondary on failure. If you require SMTP instead of an HTTP API, request the SMTP build option from Quoqo. Without email, signing invitations and reminders cannot be delivered.

Notifications / cron

Variable	Purpose
`NOTIFICATION_HOUR`, `NOTIFICATION_MINUTE`	Time-of-day for the daily reminder cron.
`TIME_ZONE`	Timezone for timestamps (default `UTC`). Set to your operating timezone.

Optional integrations (backend)

Aadhaar eSign (India only)

Enable only if you offer Aadhaar-based signing. Requires a registered Protean/NSDL ASP.

Variable	Purpose
`response_url_esign`	Callback URL the gateway returns the signed response to.
`AADHAR_SIGNATURE_PRICE_ID*`	Plan price identifiers (only relevant if billing is enabled).
`AADHAR_WIDTH`, `AADHAR_HEIGHT`	Rendered Aadhaar signature dimensions.

The Aadhaar gateway hosts are allow-listed in the platform. The ASP ID, gateway URLs, and the signing certificate are configured on the e-signature service (see below).

DSC signing

Enable for PKI/X.509 signing. Configure the certificate on the e-signature service. RFC-3161 timestamping is optional (set a TSA URL to enable trusted timestamps).

Billing — Stripe / Razorpay (Optional; usually OFF on-prem)

For a flat-licensed on-prem deployment you typically do not enable billing; plans and quotas are provisioned directly (setup_core_pro_plans / setup_api_plans / super-admin console). If you do integrate billing:

Variable	Purpose
`STRIPE_BEARER_ID` (+ `_US`)	Stripe secret API key(s).
`STRIPE_PUBLISHABLE_KEY`	Stripe publishable key (also needed on the frontend).
`STRIPE_SIGNUP_WEBHOOK_SECRET`, `STRIPE_RENEWAL_WEBHOOK_SECRET`	Webhook signing secrets.
`RAZORPAY_KEY_ID`, `RAZORPAY_KEY_SECRET`	Razorpay credentials (alternative gateway).

AI features (Optional)

Variable	Purpose
`GROQ_API_KEY`, `GROQ_MODEL`	LLM provider for document chat/summary (low-latency path).
`AZURE_OPENAI_ENDPOINT`, `AZURE_OPENAI_KEY`, `AZURE_OPENAI_ENGINE_4o_large`	Azure OpenAI alternative.
`OPENROUTER_URL`, `OPENROUTER_URL_TOKEN`	Generic LLM router alternative.

SMS (Optional — Twilio)

Variable	Purpose
`ACCOUNT_SID`, `AUTH_TOKEN`, `MESSAGING_SERVICE_SID`	Twilio credentials for SMS reminders.

Single sign-on (Optional)

Variable	Purpose
`GOOGLE_CLIENT_ID`	Google OAuth client (also set on the frontend).
`MICROSOFT_CLIENT_ID`, `MICROSOFT_PROVIDER_AUTHENTICATION_SECRET`	Microsoft/Entra SSO.

Antivirus (Recommended)

The bundled clamav service scans uploads before processing. Point the backend’s AV endpoint at it (request the exact variable name for your build from Quoqo; the stack ships ClamAV on clamav:3310). If unset, uploads are not AV-scanned.

Error monitoring (Optional)

Variable	Purpose
`SENTRY_DSN`	Your Sentry DSN. If unset, error reporting is silently disabled (no external calls).
`SENTRY_ENVIRONMENT`, `SENTRY_RELEASE`, `SENTRY_TRACES_SAMPLE_RATE`, `SENTRY_SEND_PII`	Tuning; keep `SENTRY_SEND_PII=false` unless required.

Signature/stamp rendering (Optional tuning)

SIGNATURE_WIDTH/HEIGHT, STAMP_WIDTH/HEIGHT, SEAL_WIDTH/HEIGHT, PHOTO_WIDTH/HEIGHT control rendered element sizes. AUTOMAGIC_DOCUSIGN_STYLE, AUTOMAGIC_EXPLICIT_ANCHORS, AUTOMAGIC_NATURAL_ANCHORS toggle automatic signature-placement strategies. Sensible defaults apply if unset.

Limits (Optional)

TOTAL_CONTRACTS_PER_COMPANY and TOTAL_CONTAINER_SPACE_MB cap documents and storage per company/tenant.

Variables you can ignore

Some variables are legacy/cloud-host artifacts and are not needed for an on-prem Docker deployment, e.g. SCM_DO_BUILD_DURING_DEPLOYMENT, WEBSITES_*, WEBSITE_HTTPLOGGING_RETENTION_DAYS, and the LEGACY_* URLs/Solr cores (only used by the deprecated legacy modules). Leave them unset unless Quoqo advises otherwise.

Frontend (`config/frontend.env`)

Frontend REACT_APP_* values are read at build/serve time. If your delivered frontend image bakes these at build time, Quoqo will build it with your values; otherwise they are supplied at container start. Confirm the delivery model with Quoqo.

Required

Variable	Purpose
`REACT_APP_BACKEND_BASE_URL`	Backend API base, e.g. `https://sign.example.com/backend`.
`REACT_APP_FRONT_END_BASE_URL`	The web app’s own base URL.
`REACT_APP_LOGIN_PASSWORD_KEY`	Must equal the backend `BACKEND_LOGIN_PASSWORD_KEY`.

Optional (match the backend integrations you enabled)

Variable	Purpose
`REACT_APP_GOOGLE_CLIENT_ID`, `REACT_APP_MICROSOFT_CLIENT_ID`	SSO buttons.
`REACT_APP_STRIPE_PUBLISHABLE_KEY`, `REACT_APP_STRIPE_*`	Billing UI (only if billing enabled).
`REACT_APP_AADHAR_*`	Aadhaar eSign signer flow (client id/secret, auth URL, signature URL, tenant/subscription). India only.
`REACT_APP_response_url_esign`	E-sign callback URL used by the signer UI.
`REACT_APP_VERSION`	Free-form build label.

If an optional REACT_APP_* value is genuinely unused, set it to a harmless placeholder rather than leaving it undefined — some screens parse these at load time. Quoqo’s delivered build handles this for you; ask if unsure.

E-signature service (`secrets/esign.env`) — only if Aadhaar/DSC enabled

Variable	Purpose
`ASP_ID`	Your Aadhaar eSign ASP identifier.
`ESIGN_PROD_URL`, `ESIGN_UAT_URL`	Gateway endpoints (production / test).
`ESIGN_RESPONSE_URL`	Where the gateway posts the signed response.
`P12_FILE`, `P12_ALIAS`, `P12_PASSWORD`	The signing certificate (PKCS#12) path/alias/password, mounted read-only into the container.
`TZ`	Service timezone.

Database (`config/db.env`)

Variable	Purpose
`MYSQL_DATABASE`	Initial database name (match `DB_NAME`).
`MYSQL_USER` / `MYSQL_PASSWORD`	App DB user (match `DB_USER`/`DB_PASSWORD`).
`MYSQL_ROOT_PASSWORD`	MySQL root password (admin/backup use).

Minimal vs full configuration

Minimal viable install (core e-signing only): the Required sections above + an email provider. Everything else unset.
Add Aadhaar: ASP credentials + cert on the esign service + the REACT_APP_AADHAR_* frontend values.
Add DSC: signing certificate on the esign service (+ optional TSA URL).
Add SSO / AI / SMS / billing / cloud storage / monitoring: set the corresponding optional groups on both backend and frontend as noted.