| Profile fence | NAVIGATOR_ENVIRONMENT, NAVIGATOR_CI_HARNESS, NAVIGATOR_CREDENTIAL_ENVIRONMENT |
| HTTP identity | PORT, NAV_BASE_URL, CANONICAL_HOST, NAVIGATOR_RATE_LIMIT_PER_MIN |
| Branding and public assets | NAVIGATOR_CUSTOM_BRANDING, NAVIGATOR_ASSET_BASE_URL |
| Store | NAVIGATOR_SURREAL_ENDPOINT, NAVIGATOR_SURREAL_NAMESPACE, NAVIGATOR_SURREAL_DATABASE |
| Storage driver | NAVIGATOR_STORAGE_BACKEND, NAVIGATOR_STORAGE_ENDPOINT, NAVIGATOR_STORAGE_REGION |
| Documents/exports | NAVIGATOR_DOCUMENTS_BUCKET, NAVIGATOR_STORAGE_BUCKET, NAVIGATOR_EXPORTS_BUCKET |
| Other buckets | NAVIGATOR_ASSETS_BUCKET, NAVIGATOR_LFS_BUCKET |
| Filesystem storage | NAVIGATOR_STORAGE_FS_ROOT |
| Entity Workspace Drive | Per-Workspace Drive coordinates listed below |
| Generic S3 key | NAVIGATOR_STORAGE_ACCESS_KEY, NAVIGATOR_STORAGE_SECRET_KEY |
| Temporary S3 token | NAVIGATOR_STORAGE_SESSION_TOKEN |
| Assets S3 key | NAVIGATOR_ASSETS_ACCESS_KEY, NAVIGATOR_ASSETS_SECRET_KEY |
| LFS S3 key | NAVIGATOR_LFS_ACCESS_KEY, NAVIGATOR_LFS_SECRET_KEY |
| Exports S3 key | NAVIGATOR_EXPORTS_ACCESS_KEY, NAVIGATOR_EXPORTS_SECRET_KEY |
| Sessions | SESSION_SECRET |
| Restate client | RESTATE_BROKER_URL, RESTATE_AUTH_TOKEN, RESTATE_SERVICE |
| Trigger ingress | RESTATE_INGRESS_URL |
| Worker listener | WORKFLOWS_SERVICE_LISTEN |
| Telemetry and log filtering | OTEL_EXPORTER_OTLP_ENDPOINT, OTEL_SERVICE_NAME, RUST_LOG |
| Image-baked release identity | NAVIGATOR_RELEASE_TAG, NAVIGATOR_GIT_SHA, NAVIGATOR_BUILD_TIME |