| Profile and listener | PORT, NAVIGATOR_ENVIRONMENT, NAVIGATOR_CI_HARNESS |
| Repository writer | NAVIGATOR_GIT_REPO_ROOT |
| Store | NAVIGATOR_SURREAL_ENDPOINT, NAVIGATOR_SURREAL_NAMESPACE, NAVIGATOR_SURREAL_DATABASE |
| Store credentials | NAVIGATOR_SURREAL_USER, NAVIGATOR_SURREAL_PASSWORD |
| Storage driver | NAVIGATOR_STORAGE_BACKEND, NAVIGATOR_STORAGE_ENDPOINT |
| Storage buckets | NAVIGATOR_STORAGE_BUCKET, NAVIGATOR_ASSETS_BUCKET, NAVIGATOR_LFS_BUCKET |
| Applications bucket | NAVIGATOR_APPLICATIONS_BUCKET |
| Archive buckets | NAVIGATOR_ICEBERG_BUCKET, NAVIGATOR_TELEMETRY_BUCKET |
| Storage region | NAVIGATOR_STORAGE_REGION |
| Documents credentials | NAVIGATOR_STORAGE_ACCESS_KEY, NAVIGATOR_STORAGE_SECRET_KEY |
| Assets credentials | NAVIGATOR_ASSETS_ACCESS_KEY, NAVIGATOR_ASSETS_SECRET_KEY |
| Applications credentials | NAVIGATOR_APPLICATIONS_ACCESS_KEY, NAVIGATOR_APPLICATIONS_SECRET_KEY |
| LFS credentials | NAVIGATOR_LFS_ACCESS_KEY, NAVIGATOR_LFS_SECRET_KEY |
| Browser OIDC | OAUTH_ISSUER_URL, OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, OAUTH_REDIRECT_URI, SESSION_SECRET |
| Policy and workflows | RESTATE_BROKER_URL |
| Attachment scanner | NAVIGATOR_CLAMD_ADDR |
| Harness-only integration placeholders | SENDGRID_API_KEY, SENDGRID_INBOUND_SECRET |
| Harness sink URL | SENDGRID_BASE_URL, NAVIGATOR_SENDGRID_HARNESS_SECRET |
| Telemetry endpoint and UI | OTEL_EXPORTER_OTLP_ENDPOINT, NAVIGATOR_OPENOBSERVE_URL |
| Telemetry credentials | NAVIGATOR_OPENOBSERVE_USERNAME, NAVIGATOR_OPENOBSERVE_PASSWORD |
| Telemetry routing | NAVIGATOR_OPENOBSERVE_ORGANIZATION, NAVIGATOR_OPENOBSERVE_STREAM |