| Profile and listener | PORT, NAVIGATOR_ENVIRONMENT, NAVIGATOR_CI_HARNESS |
| Repository writer | NAVIGATOR_GIT_REPO_ROOT |
| Store | NAVIGATOR_SURREAL_ENDPOINT, NAVIGATOR_SURREAL_NAMESPACE, NAVIGATOR_SURREAL_DATABASE |
| Store credentials | NAVIGATOR_SURREAL_USER, NAVIGATOR_SURREAL_PASSWORD |
| Storage driver | NAVIGATOR_STORAGE_BACKEND, NAVIGATOR_STORAGE_ENDPOINT |
| Storage buckets | NAVIGATOR_STORAGE_BUCKET, NAVIGATOR_ASSETS_BUCKET, NAVIGATOR_LFS_BUCKET |
| Applications bucket | NAVIGATOR_APPLICATIONS_BUCKET |
| SurrealDB operational archive bucket | NAVIGATOR_SURREAL_ARCHIVES_BUCKET |
| Iceberg-archive bucket | NAVIGATOR_ARCHIVES_BUCKET |
Cloud-only archive buckets (ops gcp setup, not locally generated) | NAVIGATOR_TELEMETRY_BUCKET |
| Storage region | NAVIGATOR_STORAGE_REGION |
| Documents credentials | NAVIGATOR_STORAGE_ACCESS_KEY, NAVIGATOR_STORAGE_SECRET_KEY |
| Assets credentials | NAVIGATOR_ASSETS_ACCESS_KEY, NAVIGATOR_ASSETS_SECRET_KEY |
| Applications credentials | NAVIGATOR_APPLICATIONS_ACCESS_KEY, NAVIGATOR_APPLICATIONS_SECRET_KEY |
| LFS credentials | NAVIGATOR_LFS_ACCESS_KEY, NAVIGATOR_LFS_SECRET_KEY |
| Iceberg-archive credentials | NAVIGATOR_ARCHIVES_ACCESS_KEY, NAVIGATOR_ARCHIVES_SECRET_KEY |
| Browser OIDC | OAUTH_ISSUER_URL, OAUTH_CLIENT_ID, OAUTH_CLIENT_SECRET, OAUTH_REDIRECT_URI, SESSION_SECRET |
| Sign in with Microsoft | OAUTH_MICROSOFT_CLIENT_ID, OAUTH_MICROSOFT_CLIENT_SECRET |
| Microsoft tenant gate | OAUTH_MICROSOFT_ALLOWED_TENANTS, OAUTH_MICROSOFT_ISSUER_URL |
| Sign in with Apple | OAUTH_APPLE_CLIENT_ID, OAUTH_APPLE_TEAM_ID, OAUTH_APPLE_KEY_ID, OAUTH_APPLE_PRIVATE_KEY |
| Policy and workflows | RESTATE_BROKER_URL |
| Attachment scanner | NAVIGATOR_CLAMD_ADDR |
| Harness-only integration placeholders | SENDGRID_API_KEY, SENDGRID_INBOUND_SECRET |
| Harness sink URL | SENDGRID_BASE_URL, NAVIGATOR_SENDGRID_HARNESS_SECRET |
| Telemetry endpoint and UI | OTEL_EXPORTER_OTLP_ENDPOINT, NAVIGATOR_OPENOBSERVE_URL |
| Telemetry credentials | NAVIGATOR_OPENOBSERVE_USERNAME, NAVIGATOR_OPENOBSERVE_PASSWORD |
| Telemetry routing | NAVIGATOR_OPENOBSERVE_ORGANIZATION, NAVIGATOR_OPENOBSERVE_STREAM |