Configuring settings via environment variables

General settings

Environment Variable Default Description

TNGRI_AUTH_TOKEN_DURATION

1h

Time-to-live (TTL) of the access token and session. Interpreted as a duration in the Go style and applied to JWTs and Max-Age authentication cookies.

TNGRI_DEBUG

False

Sets the logging level to DEBUG (instead of INFO) and enables web server access logging.

TENGRI_MASTER_KEY

""

Deployment master key (hex).
No command-line flag; excluded from --show-config; masked in logs.

Catalog

Environment variable Default Description

TNGRI_WAREHOUSE_PATH

(not set)

Location prefix in S3, where Iceberg table data files are written.

TNGRI_CATALOG_URI

(not set)

The URI PostgreSQL for the metadata repository of the Iceberg catalogue (used by the catalogue and the DDL log).

Compute

Environment variable Default Description

TNGRI_CACHE_DIR

/tmp/tngri-server

Root of the disk cache (query and file cache, session data; also the Python environment and language server root on the server). Created at startup. The agent overrides this to /tmp/tngri-agent.

TNGRI_DEFAULT_MEM_PER_CORE

4

Memory (GB) per core, used to calculate the memory limit for each worker.

TNGRI_DEDICATED_RAM_RATIO

0.75

The proportion of total RAM reserved for the needs of the worker.

TNGRI_PIP_INDEX_URL

https://pypi.org/simple/

Python packages repository URL.

TNGRI_USE_FILE_CACHE

True

Use file cache.

TNGRI_USE_DECODE_CACHE

True

Use decode cache.

Endpoint settings

Environment variable Default Description

TNGRI_ENDPOINT_HOST

<advertized name>

Endpoint host name.

TNGRI_INTERNAL_HOST

<local net ip>

Internal host name.

TNGRI_CORS

http://<local net ip>:3000
http://<advertized name>
http://<advertized name>.<domain>

List of allowed CORS.

S3 storage

Environment variable Default Description

TNGRI_S3_REGION

eu-central-1

S3 region for all clients (boto3 / PyArrow / PyIceberg).
Exported as AWS_REGION to Python containers.

TNGRI_S3_DEFAULT_REGION

eu-central-1

Exported as AWS_DEFAULT_REGION for compatibility with boto3 / PyArrow.

TNGRI_S3_ACCESS_KEY_ID

(not set)

S3 access key ID, used by all clients and Python containers.

TNGRI_S3_SECRET_ACCESS_KEY

(not set)

S3 secret access key, used by all clients and Python containers.

TNGRI_S3_BUCKET_NAME

(not set)

The bucket containing the Iceberg storage data.
Exported to containers as TNGRI_S3_BUCKET_NAME.

TNGRI_S3_CONNECT_TIMEOUT

30

Connection timeout for S3 (seconds).

TNGRI_S3_REQUEST_TIMEOUT

30

Request timeout for S3 (seconds)

TNGRI_S3_MAX_ATTEMPTS

20

Maximum number of connection retries to S3.

TNGRI_S3_HTTP_KEEP_ALIVE

True

Using open connections for subsequent requests.

TNGRI_S3_MULTIPART_CONCURRENCY

10

The number of concurrent connections for multipart transfers (boto3).

Web applications TLS

Environment Variable Default Description

TNGRI_WEB_SSL_ENABLED

True if ssl_key is set

Serve the web application over HTTPS.

TNGRI_WEB_SSL_KEY

= ssl_key

TLS key for the web application.

TNGRI_WEB_SSL_CERT

= ssl_cert

TLS certificate for the web application.

TNGRI_WEB_SSL_CA

= ssl_ca

TLS CA (Certificate Authority) for the web application.

PostgreSQL TLS protocol

Environment Variable Default Description

TNGRI_PSQL_SSL_ENABLED

True if psql_ssl_key is set

Enable TLS for the PostgreSQL protocol.

TNGRI_PSQL_SSL_KEY

= ssl_key

TLS key for PostgreSQL.

TNGRI_PSQL_SSL_CERT

= ssl_cert

TLS certificate for PostgreSQL.

TNGRI_PSQL_SSL_CA

= ssl_ca

CA (Certificate Authority) for PostgreSQL; enables client certificate verification (mutual authentication).

WebSocket TLS

Environment Variable Default Description

TNGRI_WEBSOCKET_SSL_ENABLED

True if websocket_ssl_key is set

Serve WebSocket over WSS.

TNGRI_WEBSOCKET_SSL_KEY

= ssl_key

TLS key for WebSocket.

TNGRI_WEBSOCKET_SSL_CERT

= ssl_cert

TLS certificate for WebSocket.

TNGRI_WEBSOCKET_SSL_CA

= ssl_ca

TLS CA (Certificate Authority) for WebSocket.