Skip to main content

Cookies environment variables

Reference documentation for cookie-related environment variables.

Cookies environment variables available for use with self-hosted Retool deployments.

Only configure environment variables when needed. You can configure many environment variables from your organization's Settings rather than directly editing your deployment's configuration file.

Environment variables take effect only once the change is applied to your deployment, and where you set them depends on how Retool was deployed.

  • Terraform blueprints. Set the variable in retool_helm_extra_values in main.tf, then run terraform apply. Editing Helm values directly on a blueprint-managed instance is overwritten by the next apply.
  • Helm. Set the variable in your values.yaml, then run helm upgrade. That command restarts the affected pods as part of applying the new values, so restarting pods without re-running it doesn't pick up the change.
  • Docker Compose. Set the variable in docker.env, then run sudo docker compose up -d.

Whether to send authentication requests using insecure cookies. Enable this if your Retool deployment uses a non-HTTPS URL or IP address. This is typically used when a Retool deployment is not yet configured with a custom domain. Do not enable this on SAML deployments — SP-initiated SAML logins require HTTPS and will fail when this is set to true.

Type boolean
ConfigurabilityUpdate the deployment's configuration file.
Required Optional
Defaulttrue
Examples
COOKIE_INSECURE=true

Whether to disable decoding of forwardable cookies.

Type boolean
ConfigurabilityUpdate the deployment's configuration file.
Required Optional
Defaultfalse
Examples
DISABLE_FORWARDABLE_COOKIE_DECODING=true

FORWARDABLE_SAME_DOMAIN_COOKIES_ALLOWLIST​

Whether to send authentication requests using insecure cookies. When you have cookies scoped to your primary domain, you can use this variable to include those cookies in requests from the subdomain you host Retool on to your primary domain.

Type string
Format Plain Text
ConfigurabilityUpdate the deployment's configuration file.
Required Optional
Defaultnull
Examples
FORWARDABLE_SAME_DOMAIN_COOKIES_ALLOWLIST=cookieName