Skip to content

Environment variables

Customer-side CLI variables:

VariablePurpose
QUOLLVAULT_TOKENAutomation Token bearer credential
QUOLLVAULT_SIGNING_PASSWORDlocal Android keystore or P12 password
QUOLLVAULT_KEY_PASSWORDoptional Android key password

Bearer/signing values are secrets. Keep them in a shell/CI secret store, never repository configuration or command-line arguments.

CI providers also expose their standard provenance variables; the CLI reads a narrow allowlist to identify the provider/repository/run metadata. It does not upload the full process environment.

Server-only variables such as Auth0, R2, install-ticket and email-service configuration are operational and are not CLI inputs.