Configuration reference

Build settings, runtime environment, and Helm values.

Build settings

Name	Default	Scope
EDITION	community	bun scripts/build.ts and Docker ARG EDITION; community or managed. Selects one backend adapter at bundle time.
Docker BUN_VERSION	1.4.0	Bun version used to build and run the server image.

Changing EDITION at runtime does not change the product. Switching edition requires a different artifact and a reviewed auth migration; it is not a safe live feature toggle.

Runtime environment

Name	Required	Notes
DATABASE_URL	Both editions	PostgreSQL URL; credentials and TLS options belong in a secret.
PUBLIC_URL	Both editions	Canonical origin without path/trailing slash; HTTPS for production.
AUTH_SECRET	Both editions	Strong, independent random secret; generate with openssl rand -hex 32.
SETTINGS_ENCRYPTION_KEY	Both editions	Independent encryption key; preserve through backups and restores.
GITHUB_CLIENT_ID	Managed	GitHub OAuth application client ID.
GITHUB_CLIENT_SECRET	Managed	GitHub OAuth secret; never ship to client bundles.
SESSION_IDLE_TTL_MS	Optional, 1800000	Agent sessions without calls for this long end: their tab locks are released and their temporary tabs are closed. Minimum 60 s in production.
TRANSFER_MEMORY_LIMIT_BYTES	Optional, 268435456	Legacy bounded result-buffer budget; native file/secret streaming quotas are documented separately in native data. Size the container memory limit accordingly.
RECEIPT_CONTENT_RETENTION_MS	Optional, 3600000	How long idempotency receipts keep complete results before reducing them to outcome-only records. Receipts are deleted after seven days.
LIVE_VIEW	Optional, enabled	disabled turns off the live-view relay: browser_watch reports it unavailable, and the viewer and media sockets and the dashboard ticket route return 404. Native runtimes still stream nothing unless the user opts in.

POSTGRES_PASSWORD in .env.example configures the bundled development database; the server itself consumes DATABASE_URL. Compose builds its internal URL with the hostname postgres; source development uses the host URL in .env.

Main Helm values

Path	Default	Purpose
replicaCount	1	Enforced; all other values rejected.
image.repository	ghcr.io/ricsam/browser-mcp-community	Community server image. Override to use your own registry.
image.tag	empty	Resolves to <appVersion>-community.
image.digest	empty	If set, takes precedence over the tag.
imagePullSecrets	[]	Existing pull secret references.
secrets.existingSecret	empty, required	Precreated secret in .Release.Namespace.
secrets.keys.*	uppercase env names	Custom key names for the existing secret.
config.publicUrl	empty, required	Canonical public origin.
ingress.enabled	false	Enable the public route.
ingress.className	empty	Ingress class; empty uses the cluster’s default IngressClass.
ingress.host	empty	Required when ingress is enabled.
ingress.tls	[]	Configure a TLS Secret and hosts for ingress HTTPS, or terminate HTTPS at an upstream proxy.
postgresql.enabled	true	Disable to use external PostgreSQL.
postgresql.existingSecret	empty	Defaults to the application secret for POSTGRES_PASSWORD.
postgresql.passwordKey	POSTGRES_PASSWORD	Bundled database’s password secret key.
postgresql.persistence.storageClass	empty	Storage class for bundled PostgreSQL; empty uses the cluster’s default StorageClass. Set it before the first install.
postgresql.persistence.size	10Gi	Requested persistent capacity.
migration.activeDeadlineSeconds	600	Overall migration Job deadline.
migration.backoffLimit	3	Job retries; migration remains mandatory.
resources	requests 100m/256Mi, limits 1 CPU/1Gi	Server resource budget.
migration.resources	requests 100m/128Mi, limits 1 CPU/512Mi	Migration and gate budgets.
postgresql.resources	requests 100m/128Mi, limits 1 CPU/512Mi	Bundled database budget.

The chart uses non-root pods, a read-only root filesystem, dropped capabilities, RuntimeDefault seccomp, and no privilege escalation. Writable paths are dedicated PVC/emptyDir mounts. The main application container has no Kubernetes service account token mount.

To inspect all defaults for the version you deploy, use the published community-only 0.3.6 chart. Its 0.3.6 change is version metadata only:

helm show values browser-mcp/browser-mcp --version 0.3.6