Environment Variables

OWNCLOUD_ACCESSLOG_LOCATION=/dev/stdout
Location of the access log.

OWNCLOUD_ACCOUNTS_ENABLE_MEDIAL_SEARCH=
Allow medial search on user account properties (see documentation).

OWNCLOUD_ACTIVITY_EXPIRE_DAYS=
Activity expiration in days (see documentation).

OWNCLOUD_ADMIN_AUDIT_GROUPS=
Restrict audit logging to specific groups. Comma-separated list of group names (see documentation).

OWNCLOUD_ANTIVIRUS_AV_CMD_OPTIONS=
Command line options for the clamscan antivirus scanner (see documentation).

OWNCLOUD_ANTIVIRUS_AV_PATH=
Path to the clamscan binary in the container (see documentation).

OWNCLOUD_ADMIN_PASSWORD=admin
ownCloud admin password.

OWNCLOUD_ADMIN_USERNAME=admin
ownCloud admin username.

OWNCLOUD_ALLOW_SUBADMINS=
Enable or disable the subadmin (group admin) feature. Set to true to enable; unset leaves it disabled (ownCloud core default) (see documentation).

OWNCLOUD_ALLOW_USER_TO_CHANGE_DISPLAY_NAME=
Allow or disallow users to change their display names (see documentation).

OWNCLOUD_ALLOW_USER_TO_CHANGE_MAIL_ADDRESS=
Allow or disallow users to change their email addresses (see documentation).

OWNCLOUD_APPS_DEPRECATED=
List of deprecated apps that must be removed (automatically) before performing an ownCloud upgrade to avoid upgrade issues.

OWNCLOUD_APPS_DISABLE=
List of apps to disable on container startup.

OWNCLOUD_APPS_ENABLE=${OWNCLOUD_APPS_INSTALL}
List of apps to enable on container startup.

OWNCLOUD_APPS_INSTALL=
List of apps to install on container startup.

OWNCLOUD_APPS_INSTALL_MAJOR=false
By default ownCloud will not install a new major version of an already installed app. To enforce major updates for apps this option needs to be set to true.

OWNCLOUD_APPS_UNINSTALL=
List of apps to remove on container startup.

OWNCLOUD_BACKGROUND_MODE=cron
Service to execute ownCloud background jobs. It is recommended to keep the default (see documentation).

OWNCLOUD_BLACKLISTED_FILES=
Define blacklisted files (see documentation).

OWNCLOUD_BLACKLISTED_FILES_REGEX=
Define blacklisted files using regular expressions. Comma-separated list of regex patterns (see documentation).

OWNCLOUD_CACHE_CHUNK_GC_TTL=
Define the TTL for garbage collection (see documentation).

OWNCLOUD_CACHE_PATH=
Define the location of the cache folder (see documentation).

OWNCLOUD_CHECK_FOR_WORKING_WELLKNOWN_SETUP=
Check for a .well-known setup (see documentation).

OWNCLOUD_CIPHER=
Define the default cipher for encrypting files (see documentation).

OWNCLOUD_COLLABORA_GROUP=
Restrict access to Collabora/Richdocuments to a specific group. Only one group can be defined. Default is empty (no restriction) (see documentation).

OWNCLOUD_COMMENTS_MANAGER_FACTORY=
Define an alternative Comments Manager (see documentation).

OWNCLOUD_CORS_ALLOWED_DOMAINS=
Define global list of CORS domains (see documentation).

OWNCLOUD_CROND_ENABLED=true
Enable or disable the system cron service. Required for OWNCLOUD_BACKGROUND_MODE=cron.

OWNCLOUD_CROND_SCHEDULE="*/1 * * * *"
Cron schedule to run ownCloud background jobs.

OWNCLOUD_CRON_LOG=
Define logging if cron ran successfully (see documentation).

OWNCLOUD_CSRF_DISABLED=
Enable or disable ownCloud’s built-in CSRF protection mechanism (see documentation).

OWNCLOUD_CUSTOMCLIENT_ANDROID=
Override the Android client download URL shown in the first-run wizard (see documentation).

OWNCLOUD_CUSTOMCLIENT_DESKTOP=
Override the desktop client download URL shown in the first-run wizard (see documentation).

OWNCLOUD_CUSTOMCLIENT_IOS=
Override the iOS client download URL shown in the first-run wizard (see documentation).

OWNCLOUD_CUSTOMGROUPS_DISALLOWED_GROUPS=
Groups whose members have the Custom Groups app hidden from their personal settings. Comma-separated list of group names (see documentation).

OWNCLOUD_CUSTOMGROUPS_DISALLOW_ADMIN_ACCESS_ALL=
When set to true, ownCloud admins are denied access to custom groups they are not a member of (see documentation).

OWNCLOUD_DAV_CHUNK_BASE_DIR=
Define the DAV chunk base directory (see documentation).

OWNCLOUD_DAV_ENABLE_ASYNC=
Enable or disable async DAV extensions (see documentation).

OWNCLOUD_DAV_PROPFIND_DEPTH_INFINITY=
Allow Depth: infinity PROPFIND requests (see documentation).

OWNCLOUD_DB_FAIL=true
Exit container if the database can’t be reached during the startup.

OWNCLOUD_DB_HOST=
Define the database server host name (see documentation).

OWNCLOUD_DB_NAME=owncloud
Define the ownCloud database name (see documentation).

OWNCLOUD_DB_PASSWORD=
Define the password for the database user (see documentation).

OWNCLOUD_DB_PREFIX=oc_
Define the prefix for the ownCloud tables in the database (see documentation).

OWNCLOUD_DB_TIMEOUT=180
Time to wait for a successful connection to the database on container startup.

OWNCLOUD_DB_PLATFORM=
Force a specific Doctrine DBAL platform class, e.g. for MariaDB compatibility (see documentation).

OWNCLOUD_DB_TYPE=sqlite
Identify the database used with this installation (see documentation).

OWNCLOUD_DB_USERNAME=
Define the ownCloud database user (see documentation).

OWNCLOUD_DEBUG=
Place this ownCloud instance into debugging mode (see documentation).

OWNCLOUD_DEFAULT_APP=
Define the default app to open on user login (see documentation).

OWNCLOUD_DEFAULT_LANGUAGE=en
Define the default language of your ownCloud instance (see documentation).

OWNCLOUD_DOMAIN=localhost
Base domain used in OWNCLOUD_OVERWRITE_CLI_URL by default.

OWNCLOUD_TRUSTED_DOMAINS=${OWNCLOUD_DOMAIN}
List of trusted domains to prevent host header poisoning (see documentation). Multiple domains need to be comma-separated.

OWNCLOUD_ENABLED_PREVIEW_PROVIDERS=
Define preview providers (see documentation).

OWNCLOUD_ENABLE_AVATARS=
Enable or disable avatars or user profile photos (see documentation).

OWNCLOUD_ENABLE_CERTIFICATE_MANAGEMENT=
Allow the configuration of system-wide trusted certificates (see documentation).

OWNCLOUD_ENABLE_PREVIEWS=
Enable preview generation (see documentation).

OWNCLOUD_ENABLE_OIDC_REWRITE_URL=false
Rewrites OpenID Connect wellknown URL .well-known/openid-configuration to the ownCloud OIDC configuration endpoint (see documentation).

OWNCLOUD_ENTRYPOINT_INITIALIZED=true
Enable or disable loading of files from /etc/entrypoint.d. It is recommended to keep the default.

OWNCLOUD_ERRORLOG_LOCATION=/dev/stderr
Output location for the Apache error log.

OWNCLOUD_EXCLUDED_DIRECTORIES=
Define excluded directories (see documentation).

OWNCLOUD_EXCLUDED_DIRECTORIES_REGEX=
Define excluded directories using regular expressions. Comma-separated list of regex patterns (see documentation).

OWNCLOUD_FILELOCKING_ENABLED=${OWNCLOUD_LOCKING_ENABLED:-true}
Enable transactional file locking (see documentation).

OWNCLOUD_FILELOCKING_TTL=
Define the TTL for file locking (see documentation).

OWNCLOUD_FILESYSTEM_CACHE_READONLY=
Prevent cache changes due to changes in the filesystem (see documentation).

OWNCLOUD_FILESYSTEM_CHECK_CHANGES=
Define how often filesystem changes are detected (see documentation).

OWNCLOUD_FILESYSTEM_MAX_MOUNTPOINT_MOVE_ATTEMPTS=
Maximum number of failed mountpoint rename attempts before giving up (see documentation).

OWNCLOUD_FILES_EXTERNAL_ALLOW_NEW_LOCAL=${OWNCLOUD_ALLOW_EXTERNAL_LOCAL_STORAGE}
Enable or disable the files_external local mount option (see documentation).

OWNCLOUD_GRACE_PERIOD_DEMO_KEY_LINK=
Override the link shown in the grace period popup (see documentation).

OWNCLOUD_GRACE_PERIOD_DEMO_KEY_SHOW_POPUP=
Show or hide the grace period demo key popup (see documentation).

OWNCLOUD_FORWARDED_FOR_HEADERS=
Define forwarded_for_headers (see documentation).

OWNCLOUD_GROUPS_ENABLE_MEDIAL_SEARCH=
Allow medial search on group IDs (see documentation).

OWNCLOUD_HASHING_COST=
Define the hashing cost (see documentation).

OWNCLOUD_HAS_INTERNET_CONNECTION=
Check for an internet connection (see documentation).

OWNCLOUD_INTERNET_CONNECTIVITY_DETECT_URL=
URL used to detect internet connectivity (see documentation).

OWNCLOUD_HTACCESS_REWRITE_BASE=${OWNCLOUD_SUB_URL}
Define clean URLs without /index.php (see documentation).

OWNCLOUD_HTTP_COOKIE_SAMESITE=
Define how to relax same site cookie settings (see documentation).

OWNCLOUD_INTEGRITY_EXCLUDED_FILES=
Define files that are excluded from integrity checking (see documentation).

OWNCLOUD_INTEGRITY_IGNORE_MISSING_APP_SIGNATURE=
Define apps or themes that are excluded from integrity checking (see documentation).

OWNCLOUD_LDAP_IGNORE_NAMING_RULES=
Ignore LDAP naming rules (see documentation).

OWNCLOUD_LICENSE_KEY=
ownCloud Enterprise License Key (see documentation).

OWNCLOUD_LOGIN_ALTERNATIVES=
Define additional login buttons on the logon screen (see documentation).

OWNCLOUD_LOGIN_POLICY_GROUP_FORBID_MAP=
Group login policy rules as a JSON-encoded map keyed by login type (e.g. password, token), each holding allowOnly/reject lists of group names, e.g. {"password":{"reject":["admin"]}}. Requires the group login policy in OWNCLOUD_LOGIN_POLICY_ORDER (see documentation).

OWNCLOUD_LOGIN_POLICY_ORDER=
Ordered list of login policy class names. Comma-separated (see documentation).

OWNCLOUD_LOG_CONDITIONS=
Define conditional logging rules as a JSON-encoded array of condition objects, e.g. [{"apps":["files_external"],"loglevel":0}] (see documentation).

OWNCLOUD_LOG_DATE_FORMAT=
Define the log date format (see documentation).

OWNCLOUD_LOG_FILE=${OWNCLOUD_VOLUME_FILES}/owncloud.log
Define the log path (see documentation).

OWNCLOUD_LOG_LEVEL=
Define the log level (see documentation).

OWNCLOUD_LOG_ROTATE_SIZE=${OWNCLOUD_LOGSIZE}
Define the maximum log rotation file size (see documentation).

OWNCLOUD_LOG_TIMEZONE=
Define the log timezone (see documentation).

OWNCLOUD_LOST_PASSWORD_LINK=
Define a custom link to reset passwords (see documentation).

OWNCLOUD_MAIL_DOMAIN=
Define the email RETURN address (see documentation).

OWNCLOUD_MAIL_FROM_ADDRESS=
Define the email FROM address (see documentation).

OWNCLOUD_MAIL_REMOVE_SENDER_DISPLAY_NAME=
Strip the display name from the From header in sharing notification emails (see documentation).

OWNCLOUD_MAIL_SMTP_AUTH=
Define the SMTP authentication (see documentation).

OWNCLOUD_MAIL_SMTP_AUTH_TYPE=
Define the SMTP authentication type (see documentation).

OWNCLOUD_MAIL_SMTP_DEBUG=
Enable or disable SMTP class debugging (see documentation).

OWNCLOUD_MAIL_SMTP_HOST=
Define the IP address of your mail server host (see documentation).

OWNCLOUD_MAIL_SMTP_MODE=
Define the mode for sending an email (see documentation).

OWNCLOUD_MAIL_SMTP_NAME=
Define the SMTP authentication username (see documentation).

OWNCLOUD_MAIL_SMTP_PASSWORD=
Define the SMTP authentication password (see documentation).

OWNCLOUD_MAIL_SMTP_PORT=
Define the port for sending an email (see documentation).

OWNCLOUD_MAIL_SMTP_SECURE=
Define the SMTP security style (see documentation).

OWNCLOUD_MAIL_SMTP_TIMEOUT=
Define the SMTP server timeout (see documentation).

OWNCLOUD_MAINTENANCE=${OWNCLOUD_MAINTENANCE_MODE}
Enable maintenance mode to disable ownCloud (see documentation).

OWNCLOUD_MARKETPLACE_CA=
Developer option to connect to Marketplace testing instances.

OWNCLOUD_MARKETPLACE_KEY=${OWNCLOUD_MARKETPLACE_APIKEY}
Developer option to get access to unreleased Apps in your Marketplace account.

OWNCLOUD_MEMCACHED_ENABLED=false
Enable memory caching via memcached (see documentation).

OWNCLOUD_MEMCACHED_HOST=memcached
Defines the hosts for memcached (see documentation).

OWNCLOUD_MEMCACHED_OPTIONS=
Define connection options for memcached (see documentation).

OWNCLOUD_MEMCACHED_PORT=11211
Defines the ports for memcached (see documentation).

OWNCLOUD_MEMCACHED_SERVERS=
Define multiple memcached servers as a JSON-encoded list of [host, port] or [host, port, weight] tuples, e.g. [["mem1",11211,33],["mem2",11211]]. Overrides the single-server OWNCLOUD_MEMCACHED_HOST/OWNCLOUD_MEMCACHED_PORT pair when set (see documentation).

OWNCLOUD_MEMCACHED_STARTUP_TIMEOUT=180
Time to wait for a successful connection to the memcached service on container startup.

OWNCLOUD_MEMCACHE_LOCAL=${OWNCLOUD_CACHING_CLASS:-\\OC\\Memcache\\APCu}
Memory caching backend for locally stored data (see documentation).

OWNCLOUD_MEMCACHE_LOCKING=
Define the memory caching backend for file locking (see documentation).

OWNCLOUD_METRICS_SHARED_SECRET=
Secret required to access the Metrics dashboard (Enterprise only) (see documentation).

OWNCLOUD_MAX_EXECUTION_TIME=3600
Sets PHP option max_execution_time. It is recommended to keep the default (see documentation).

OWNCLOUD_MAX_FILESIZE_ANIMATED_GIFS_PUBLIC_SHARING=
Define the maximum filesize for animated GIFs (see documentation).

OWNCLOUD_MAX_INPUT_TIME=3600
Sets PHP option max_input_time. It is recommended to keep the default (see documentation).

OWNCLOUD_MAX_UPLOAD=20G
Sets PHP option upload_max_filesize and post_max_size. It is recommended to keep the default (see documentation).

OWNCLOUD_MEMORY_LIMIT=512M
Sets PHP option memory_limit. It is recommended to keep the default (see documentation).

OWNCLOUD_MINIMUM_SUPPORTED_DESKTOP_VERSION=
Define the minimum supported ownCloud desktop client version (see documentation).

OWNCLOUD_MYSQL_UTF8MB4=${owncloud_utf8mb4_enabled}
Define MySQL 3/4 byte character handling (see documentation).

OWNCLOUD_OBJECTSTORE_BUCKET=owncloud
Bucket name to store data.

OWNCLOUD_OBJECTSTORE_CLASS=OCA\Files_Primary_S3\S3Storage
Class to use for the objectstore. It is recommended to keep the default (see documentation).

OWNCLOUD_OBJECTSTORE_ENABLED=false
Enables or disables the objectstore configuration.

OWNCLOUD_OBJECTSTORE_ENDPOINT=https://s3.${OWNCLOUD_OBJECTSTORE_REGION}.amazonaws.com
Endpoint of the objectstore provider (see documentation).

OWNCLOUD_OBJECTSTORE_KEY=
Access key for the objectstore (see documentation).

OWNCLOUD_OBJECTSTORE_PATHSTYLE=false
Enables or disables path style for the objectstore (see documentation).

OWNCLOUD_OBJECTSTORE_REGION=us-east-1
Objectstore region to use (see documentation).

OWNCLOUD_OBJECTSTORE_SECRET=
Secret key for the objectstore (see documentation).

OWNCLOUD_OBJECTSTORE_VERSION=2006-03-01
Objectstore version to use (see documentation).

OWNCLOUD_OBJECTSTORE_PART_SIZE=5242880
Part size, in bytes, applies to uploads between ownCloud and S3 (see documentation).

OWNCLOUD_OBJECTSTORE_CONCURRENCY=3
Maximum number of concurrent UploadPart operations allowed during the multipart upload (see documentation).

OWNCLOUD_OBJECTSTORE_AVAILABLE_STORAGE=
Indicates available storage size in the objectstore in bytes (see documentation).

OWNCLOUD_OPENID_CONNECT=
OpenID Connect (openid-connect) app configuration as a JSON-encoded object, e.g. {"provider-url":"https://idp.example.net","client-id":"…​","client-secret":"…​","loginButtonName":"OpenID Connect"}. Supports the full nested structure (provider-params, auto-provision, …​) (see documentation).

OWNCLOUD_OPENSSL_CONFIG=
Path to a custom openssl.cnf file, e.g. when using a custom PKI or CA in the container (see documentation).

OWNCLOUD_OPERATION_MODE=
Define ownCloud operation modes (see documentation).

OWNCLOUD_OVERWRITE_CLI_URL=${OWNCLOUD_PROTOCOL}://${OWNCLOUD_DOMAIN}${OWNCLOUD_SUB_URL}
Override cli URL (see documentation).

OWNCLOUD_OVERWRITE_COND_ADDR=
Override condition for the remote IP address with a regular expression (see documentation).

OWNCLOUD_OVERWRITE_HOST=
Override automatic proxy detection (see documentation).

OWNCLOUD_OVERWRITE_PROTOCOL=
Override protocol (http/https) usage (see documentation).

OWNCLOUD_OVERWRITE_WEBROOT=
Override ownCloud’s webroot (see documentation).

OWNCLOUD_PDF_VIEWER_ENABLE_SCRIPTING=
Allow JavaScript execution in PDF files. Security risk — only enable if required (see documentation).

OWNCLOUD_PART_FILE_IN_STORAGE=
Define where part files are located (see documentation).

OWNCLOUD_POLLINTERVAL=
Suggested client polling interval in milliseconds (see documentation).

OWNCLOUD_POST_CRONJOB_PATH=/etc/post_cronjob.d
Path to custom scripts that need to be executed after a cron run.

OWNCLOUD_POST_INSTALL_PATH=/etc/post_install.d
Path to custom scripts that need to be executed after an ownCloud installation command.

OWNCLOUD_POST_SERVER_PATH=/etc/post_server.d
Path to custom scripts that need to be executed after an ownCloud server startup.

OWNCLOUD_PREVIEW_JPEG_IMAGE_DISPLAY_QUALITY=
JPEG preview display quality from 1 to 100 (-1 uses the PHP default of ~75%) (see documentation).

OWNCLOUD_PREVIEW_LIBREOFFICE_PATH=
Define the custom path for the LibreOffice / OpenOffice binary (see documentation).

OWNCLOUD_PREVIEW_MAX_DIMENSIONS=
Define the maximum dimensions of the original image for preview generation (see documentation).

OWNCLOUD_PREVIEW_MAX_FILESIZE_IMAGE=
Define the maximum preview filesize limit (see documentation).

OWNCLOUD_PREVIEW_MAX_SCALE_FACTOR=
Define the maximum preview scale factor (see documentation).

OWNCLOUD_PREVIEW_MAX_X=
Define the maximum x-axis width for previews (see documentation).

OWNCLOUD_PREVIEW_MAX_Y=
Define the maximum y-axis width for previews (see documentation).

OWNCLOUD_PREVIEW_OFFICE_CL_PARAMETERS=
Define additional arguments for LibreOffice / OpenOffice (see documentation).

OWNCLOUD_PRE_CRONJOB_PATH=/etc/pre_cronjob.d
Path to custom scripts that need to be executed before a cron run.

OWNCLOUD_PRE_INSTALL_PATH=/etc/pre_install.d
Path to custom scripts that need to be executed before an ownCloud installation command.

OWNCLOUD_PRE_SERVER_PATH=/etc/pre_server.d
Path to custom scripts that need to be executed before an ownCloud server startup.

OWNCLOUD_PROTOCOL=http
Protocol used in OWNCLOUD_OVERWRITE_CLI_URL by default.

OWNCLOUD_PROXY_IGNORE=
Comma-separated list of hostnames that bypass the proxy (see documentation).

OWNCLOUD_PROXY=
Define the URL of your proxy server (see documentation).

OWNCLOUD_PROXY_USERPWD=
Define proxy authentication (see documentation).

OWNCLOUD_QUOTA_INCLUDE_EXTERNAL_STORAGE=
Define whether to include external storage in quota calculation (see documentation).

OWNCLOUD_REDIS_DB=
Define Redis connection details. Sets the dbindex (see documentation).

OWNCLOUD_REDIS_ENABLED=false
Sets memcache to Redis (see documentation). If sessions need to be stored in redis as well, you must also set OWNCLOUD_SESSION_SAVE_HANDLER=redis.

OWNCLOUD_REDIS_FAILOVER_MODE=
Sets redis failover mode (see documentation). Possible values: FAILOVER_NONE for \RedisCluster::FAILOVER_NONE, FAILOVER_ERROR for \RedisCluster::FAILOVER_ERROR or FAILOVER_DISTRIBUTE for \RedisCluster::FAILOVER_DISTRIBUTE.

OWNCLOUD_REDIS_HOST=redis
Sets redis host (see documentation).

OWNCLOUD_REDIS_PASSWORD=
Set redis password (see documentation).

OWNCLOUD_REDIS_PORT=6379
Set redis port (see documentation).

OWNCLOUD_REDIS_READ_TIMEOUT=
Sets redis read timeout (see documentation).

OWNCLOUD_REDIS_SEEDS=
Sets the redis cluster servers (see documentation).

OWNCLOUD_REDIS_SESSION_LOCKING_ENABLED=1
Sets PHP option redis.session.locking_enabled if OWNCLOUD_SESSION_SAVE_HANDLER=redis.

OWNCLOUD_REDIS_SESSION_LOCK_RETRIES=750
Sets PHP option redis.session.lock_retries if OWNCLOUD_SESSION_SAVE_HANDLER=redis.

OWNCLOUD_REDIS_SESSION_LOCK_WAIT_TIME=20000
Sets PHP option redis.session.lock_wait_time if OWNCLOUD_SESSION_SAVE_HANDLER=redis.

OWNCLOUD_REDIS_STARTUP_TIMEOUT=180
Time to wait for a successful connection to the redis service on container startup.

OWNCLOUD_REDIS_TIMEOUT=
Sets the redis timeout value (see documentation).

OWNCLOUD_REDIS_TLS_ALLOW_SELF_SIGNED=
Allow self-signed certificates on the Redis server (true/false) (see the phpredis docs).

OWNCLOUD_REDIS_TLS_CAFILE=
Path to CA certificate file for TLS-secured Redis connections (see the phpredis docs).

OWNCLOUD_REDIS_TLS_CAPATH=
Directory containing CA certificates for TLS-secured Redis connections (see the phpredis docs).

OWNCLOUD_REDIS_TLS_CIPHERS=
OpenSSL cipher list for Redis TLS connections (see the phpredis docs).

OWNCLOUD_REDIS_TLS_LOCAL_CERT=
Path to client certificate file for mutual TLS to Redis (see the phpredis docs).

OWNCLOUD_REDIS_TLS_LOCAL_PK=
Path to client private key file for mutual TLS to Redis (see the phpredis docs).

OWNCLOUD_REDIS_TLS_PASSPHRASE=
Passphrase for an encrypted Redis client private key (see the phpredis docs).

OWNCLOUD_REDIS_TLS_PEER_NAME=
Expected hostname in the Redis server certificate, overrides the connection host for SNI (see the phpredis docs).

OWNCLOUD_REDIS_TLS_VERIFY_PEER=
Validate the Redis server certificate against the CA (true/false) (see the phpredis docs).

OWNCLOUD_REDIS_TLS_VERIFY_PEER_NAME=
Validate that the Redis server certificate CN/SAN matches the peer name (true/false) (see the phpredis docs).

OWNCLOUD_REMEMBER_LOGIN_COOKIE_LIFETIME=
Define the lifetime of the remember-login cookie (see documentation).

OWNCLOUD_SAVE_VERSION_METADATA=
Enable extended version metadata (see description and documentation).

OWNCLOUD_SECRET=
Define ownCloud’s internal secret (see documentation).

OWNCLOUD_SESSION_KEEPALIVE=
Enable or disable session keep-alive when a user is logged in to the Web UI (see documentation).

OWNCLOUD_SESSION_LIFETIME=
Define the lifetime of a session after inactivity (see documentation).

OWNCLOUD_SESSION_FORCED_LOGOUT_TIMEOUT=
Force the user to get logged out after the specified number of seconds when the tab or browser gets closed. Please read the documentation carefully before changing this option (see documentation).

OWNCLOUD_SESSION_SAVE_HANDLER=files
Sets PHP option session.save_handler.

OWNCLOUD_DEFAULT_SOCKET_TIMEOUT=60
Sets PHP option default_socket_timeout.

OWNCLOUD_SESSION_SAVE_PATH=${OWNCLOUD_VOLUME_SESSIONS}
Sets the PHP option session.save_path. If OWNCLOUD_SESSION_SAVE_HANDLER=redis is used, this must be set to a proper connection URL including authentication parameters if required by the redis server. It usually follows the following scheme: tcp://IPADDRESS:PORT?auth=REDISPASSWORD.

OWNCLOUD_SHARE_FOLDER=
Define a default folder for shared files and folders other than root (see documentation).

OWNCLOUD_SHARING_FEDERATION_ALLOW_HTTP_FALLBACK=
Allow schema fallback for federated sharing servers (see documentation).

OWNCLOUD_SHARING_MANAGER_FACTORY=
Define an alternative Share Provider (see documentation).

OWNCLOUD_SHARING_SHOW_PUBLIC_LINK_QUICK_ACTION=
Show a quick-action button for creating public links in the file list (see documentation).

OWNCLOUD_SHOW_SERVER_HOSTNAME=
Show or hide the server hostname in status.php (see documentation).

OWNCLOUD_SINGLEUSER=
Enable or disable single user mode (see documentation).

OWNCLOUD_SKELETON_DIRECTORY=
Define the directory where the skeleton files are located (see documentation).

OWNCLOUD_SKIP_CHMOD=false
Enable or disable automatic file permissions correction on container startup.

OWNCLOUD_SKIP_CHOWN=false
Enable or disable automatic file ownership correction on container startup.

OWNCLOUD_SMB_LOGGING_ENABLE=
Enable or disable debug logging for SMB access (see documentation).

OWNCLOUD_SQLITE_JOURNAL_MODE=
Define sqlite3 journal mode (see documentation).

OWNCLOUD_STRICT_LOGIN_ENFORCED=
Only validate the exact login name entered by the user, not alternative formats (see documentation).

OWNCLOUD_SUB_URL=/
URL path if ownCloud is deployed to a URL sub-path of a domain.

OWNCLOUD_SYSTEMTAGS_MANAGER_FACTORY=
Define an alternative System Tags Manager (see documentation).

OWNCLOUD_TELEMETRY_ENABLED=
Send daily telemetry reports (Enterprise only) (see documentation).

OWNCLOUD_TEMP_DIRECTORY=
Define the location for temporary files (see documentation).

OWNCLOUD_TOKEN_AUTH_ENFORCED=
Enforce token only authentication for apps and clients connecting to ownCloud (see documentation).

OWNCLOUD_TRASHBIN_SKIP_DIRECTORIES=
Comma-separated list of directory names that bypass the trash bin (see documentation).

OWNCLOUD_TRASHBIN_SKIP_EXTENSIONS=
Comma-separated list of file extensions that bypass the trash bin (see documentation).

OWNCLOUD_TRASHBIN_SKIP_SIZE_THRESHOLD=
Files larger than this size bypass the trash bin (e.g. 1GB) (see documentation).

OWNCLOUD_TRASHBIN_PURGE_LIMIT=
Define the trashbin purge limit (see documentation).

OWNCLOUD_TRASHBIN_RETENTION_OBLIGATION=
Define the trashbin retention obligation (see documentation).

OWNCLOUD_TRUSTED_PROXIES=
Define list of trusted proxy servers (see documentation).

OWNCLOUD_UPDATER_SERVER_URL=
Define the updatechecker URL (see documentation).

OWNCLOUD_UPDATE_CHECKER=
Enable or disable updatechecker (see documentation).

OWNCLOUD_UPGRADE_AUTOMATIC_APP_UPDATES=
Define whether or not to enable automatic update of market apps (see documentation).

OWNCLOUD_USE_RELATIVE_DOMAIN_NAME=
Use only the short hostname (no FQDN) in status.php (see documentation).

OWNCLOUD_USER_BACKENDS=
External user authentication backends as a JSON-encoded list of {"class":…​, "arguments":[…​]} objects (provided by the user_external app), e.g. [{"class":"OC_User_IMAP","arguments":["{imap.example.com:993/imap/ssl}"]}] (see documentation).

OWNCLOUD_USER_LDAP_ENABLE_MEDIAL_SEARCH=
Enable medial search in the LDAP user backend (see documentation).

OWNCLOUD_USER_SEARCH_MIN_LENGTH=
Define minimum characters entered before a search returns results (see documentation).

OWNCLOUD_WEB_BASEURL=
Base URL for the ownCloud Web UI (see documentation).

OWNCLOUD_WEB_REWRITE_LINKS=
Redirect public/private links to the ownCloud Web UI (see documentation).

OWNCLOUD_WND_ACTIVITY_REGISTER_EXTENSION=
Register the Windows Network Drive app with the Activity app to report what wnd:process-queue is doing (true/false) (Enterprise only) (see documentation).

OWNCLOUD_WND_ACTIVITY_SEND_TO_SHAREES=
Send activity notifications to sharees of Windows Network Drive files and folders; requires OWNCLOUD_WND_ACTIVITY_REGISTER_EXTENSION (true/false) (Enterprise only) (see documentation).

OWNCLOUD_WND_CONNECTOR_OPTS_TIMEOUT=
Timeout in milliseconds applied to all Windows Network Drive backend operations and connections (default 20000) (Enterprise only) (see documentation).

OWNCLOUD_WND_ERROR_CODES_PASSWORD_RESET=
Comma-separated list of error codes that trigger a password reset for Windows Network Drive (default 13 = access denied); empty disables it (Enterprise only) (see documentation).

OWNCLOUD_WND_FILE_INFO_PARSE_ATTRS_MODE=
How Windows Network Drive evaluates file attributes: none, stat (default) or getxattr (Enterprise only) (see documentation).

OWNCLOUD_WND_GROUP_MEMBERSHIP_CHECK_USER_FIRST=
Make the Windows Network Drive group membership component assume an ACL entry is a user and check users first (true/false) (Enterprise only) (see documentation).

OWNCLOUD_WND_IN_MEMORY_NOTIFIER_ENABLE=
Enable the in-memory notifier so Windows Network Drive storages reset passwords on detecting a wrong password (true/false, default true) (Enterprise only) (see documentation).

OWNCLOUD_WND_LISTEN_EVENTS_SMB_ACL=
Listen to events from the smb_acl app to update Windows Network Drive storages when an ACL changes (true/false) (Enterprise only) (see documentation).

OWNCLOUD_WND_LISTEN_RECONNECT_AFTER_TIME=
Interval in seconds after which the Windows Network Drive listener reconnects to the database to avoid crashes from idle connections (default 28800) (Enterprise only) (see documentation).

OWNCLOUD_WND_LOGGING_ENABLE=
Enable additional debug logging for the Windows Network Drive app (true/false) (Enterprise only) (see documentation).

OWNCLOUD_WND_PERMISSION_MANAGER_CACHE_SIZE=
Maximum number of items in the Windows Network Drive permission manager per-request cache (default 512) (Enterprise only) (see documentation).

OWNCLOUD_WND2_CACHE_WRAPPER_NORMALIZE=
Probe both NFC/NFD UTF-8 forms in the Windows Network Drive collaborative cache wrapper, needed for macOS HFS+ mounts (true/false) (Enterprise only) (see documentation).

OWNCLOUD_WND2_CACHE_WRAPPER_TTL=
TTL in seconds for the Windows Network Drive collaborative cache wrapper (default 1800); use a negative value to disable (Enterprise only) (see documentation).

OWNCLOUD_WORKFLOW_RETENTION_ENGINE=
Retention engine for the workflow/tagging app: tagbased (default) or userbased (Enterprise only) (see documentation).

OWNCLOUD_WOPI_BUSINESS_FLOW_ENABLED=
Enable the Microsoft Office 365 business flow for WOPI (yes/no) (Enterprise only) (see documentation).

OWNCLOUD_WOPI_GROUP=
Restrict Microsoft Office Online access to a specific group (Enterprise only) (see documentation).

OWNCLOUD_WOPI_OFFICE_ONLINE_SERVER=
URL of the Microsoft Office Online server (Enterprise only) (see documentation).

OWNCLOUD_WOPI_PROXY_URL=
Business proxy URL for Microsoft Office 365 (Enterprise only) (see documentation).

OWNCLOUD_WOPI_TOKEN_KEY=
Random key (minimum 32 bytes) used to sign WOPI JWT tokens (Enterprise only) (see documentation).

OWNCLOUD_VERSIONS_RETENTION_OBLIGATION=
Define the files versions retention obligation (see documentation).

OWNCLOUD_VERSION_HIDE=
Show or hide the ownCloud version information in status.php (see documentation).

OWNCLOUD_VOLUME_APPS=${OWNCLOUD_VOLUME_ROOT}/apps
Base directory used to store custom installed apps.

OWNCLOUD_VOLUME_CONFIG=${OWNCLOUD_VOLUME_ROOT}/config
Base directory used to store the ownCloud configuration.

OWNCLOUD_VOLUME_FILES=${OWNCLOUD_VOLUME_ROOT}/files
Define the directory where user files are stored (see documentation).

OWNCLOUD_VOLUME_ROOT=/mnt/data
Base data directory for ownCloud.

OWNCLOUD_VOLUME_SESSIONS=${OWNCLOUD_VOLUME_ROOT}/sessions
Base directory to store session files. Only used if OWNCLOUD_SESSION_SAVE_HANDLER=file.

OWNCLOUD_PHP_DISABLE_FUNCTIONS=pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,system,phpinfo,show_source,fopen_with_path,dbmopen,dbase_open,filepro_retrieve,posix_mkfifo
Some insecure PHP functions are disabled by default, and this option should not be changed for production setup. Use it with caution.

OWNCLOUD_IOC_SCANNER_CONFIRMATION=
To suppress Indicators of Compromise (IoC) messages the environment variable needs to be set to EXECUTED_ON_ALL_NODES. This feature requires a valid OWNCLOUD_LICENSE_KEY.