WAF version WAF version >= 7.4.0
safeline-mgt Common variables MGT_PG: postgres://safeline-ce:${POSTGRES_PASSWORD}@safeline-pg/safeline-ce?sslmode=disable - PostgreSQL database address; LUIGI_HOST: safeline-luigi - luigi service host address; CHAOS_SERVE_ADDR: https://safeline-chaos:9000 - Dynamic protection address; CHAOS_CHALLENGE_ADDR: https://safeline-chaos:8080 - Fallback address for anti-bot challenges; CHAOS_AUTH_ADDR: https://safeline-chaos:8088 - Identity authentication service address; FVM_HOST: safeline-fvm - fvm service host; DETECTOR_HOST: safeline-detector - detector service address; WAITING_ROOM_API: /app/sock/waiting.sock - Waiting room API address
safeline-tengine Common variables TCD_MGT_API: https://${SUBNET_PREFIX}.4:1443/api/open/publish/server - mgt task callback address; TCD_TASK_ADDRESS: /app/sock/tcd_error.sock - tcd listening address; TCD_SNSERVER: ${SUBNET_PREFIX}.5 - Detector IP; CHAOS_ADDR: ${SUBNET_PREFIX}.10 - safeline-chaos container IP; WAITING_ROOM_SOCKET: unix:/app/sock/waiting.sock:/ws/waiting - Waiting room socket; WAITING_ROOM_QUERY: unix:/app/sock/waiting.sock:/api/waiting/query - Waiting room query path
safeline-detector Common variables MGT_HOST: safeline-mgt - mgt service address
safeline-fvm Common variables MGT_HOST: safeline-mgt - mgt service address; DETECTOR_HOST: safeline-detector - detector service address
safeline-luigi Common variables DETECTOR_HOST: safeline-detector - detector service address; MGT_IP: ${SUBNET_PREFIX}.4 - mgt service IP; LUIGI_PG: postgres://safeline-ce:${POSTGRES_PASSWORD}@safeline-pg/safeline-ce?sslmode=disable - PostgreSQL database address used by luigi
safeline-chaos Common variables DB_ADDR: postgres://safeline-ce:${POSTGRES_PASSWORD}@safeline-pg/safeline-ce?sslmode=disable - PostgreSQL database address
Article: Common Environment Variables in SafeLine WAF This article collects and explains the most commonly used environment variables in SafeLine WAF containers, their function, and best practices for handling them. The variables define connections to PostgreSQL databases, internal service addresses such as safeline-chaos, safeline-detector, safeline-fvm, and safeline-luigi, as well as sockets and endpoints for control modules such as waiting room and tcd. Key recommendations: use secret managers for credentials and do not expose passwords in configuration files, apply network restrictions and least-privilege access policies, validate and sanitize values before use, version configurations, and document variables per service. For deployments in cloud environments, consider integration with managed secret services on AWS and Azure and use private networks and secure load balancers.
About Q2BSTUDIO Q2BSTUDIO is a software development company specialized in custom applications and custom software. We offer artificial intelligence and AI services for businesses, AI agent development, cybersecurity, and AWS and Azure cloud services. We also implement business intelligence services and dashboards with Power BI to improve decision-making. Our experience combines security, scalability, and optimization for critical environments such as WAFs, APIs, and microservice architectures. If you need applied artificial intelligence integration, platform modernization, cybersecurity audits, or custom enterprise application development, Q2BSTUDIO can help you with personalized solutions and professional support.
Keywords and scopes custom applications, custom software, artificial intelligence, AI for businesses, AI agents, cybersecurity, AWS and Azure cloud services, business intelligence services, power bi
