Decisions Environment Variables

Prev Next

Breaking Changes

The Azure Monitor HTTP Data Collector API will be deprecated on September 14th, 2026.
Affected Areas: Legacy (9.22 and below), Azure Log Analytics will no longer work upon upgrade to 9.23.

Overview

Environment variables provide a way to configure and customize the behavior of applications inside containers. These variables align with the settings outlined in the Settings.xml file, encompassing tasks such as setting up a container's database connection or configuring HTTPS.

Decisions, when deployed in Containers, follow a pre-configured settings.xml file to deploy it successfully. Although users cannot directly modify the values in the settings.xml, they can override the properties by using environment variables.


Example YAML File

Refer to the following YAML file, which includes all the required environment variables to successfully host a container.

services:
    decisions-1:
        env_file: 
            - 940.env
        container_name: ${CONNAME}
        image: ${DECIMAGE}
        ports:
          - ${PORT80}
          - ${PORT443}
        environment:
          - DECISIONS_DATABASETYPE=MSSQL
          - DECISIONS_DATABASECONNECTSTRING=${DBSTRING}
          - DECISIONS_PORTALBASEURL=${BASEPORTAL}
          - DECISIONS_ENVIRONMENTNAME=${CONNAME}
          - DECISIONS_HTTPSCERTIFICATEPATH=${CERTPATH}
          - DECISIONS_ENABLEHTTPS=${HTTPSONOROFF} 
          - DECISIONS_FILESTORAGELOCATION=/opt/decisions/data
          - DECISIONS_DEFAULTSAMESITECOOKIEMODE=${COOKIEMODE} 
          - DECISIONS_ENABLESINGLESIGNON=${SSO_TORF}
          - DECISIONS_DISABLEAUTOSSOSIGNINPARAMETER=${SSOBYPASS_TORF}
          - DECISIONS_SERVERTYPE=${DECISIONS_SERVERTYPE}
          - DECISIONS_LICENSECOMPANYID=${DECISIONS_LICENSECOMPANYID}
          - DECISIONS_LICENSECOMPANYNAME=${DECISIONS_LICENSECOMPANYNAME}
          - DECISIONS_LICENSECONTACTEMAIL=${DECISIONS_LICENSECONTACTEMAIL}
          - DECISIONS_LICENSETYPE=${DECISIONS_LICENSETYPE}
          - DECISIONS_ADMINISTRATOR_EMAIL=${DECISIONS_ADMINISTRATOR_EMAIL}
          - DECISIONS_ADMINISTRATOR_PASSWORD=${DECISIONS_ADMINISTRATOR_PASSWORD}
          - DECISIONS_MAIL_BYPASSSMTPSERVER=${DECISIONS_MAIL_BYPASSSMTPSERVER}
          - DECISIONS_MAIL_SMTPSERVER_SERVERADDRESS=${DECISIONS_MAIL_SMTPSERVER_SERVERADDRESS}
          - DECISIONS_MAIL_SMTPSERVER_PORT=${DECISIONS_MAIL_SMTPSERVER_PORT}
          - DECISIONS_MAIL_SMTPSERVER_REQUIRESAUTHENTICATION=${DECISIONS_MAIL_SMTPSERVER_REQUIRESAUTHENTICATION}
          - DECISIONS_MAIL_SMTPSERVER_USERNAME=${DECISIONS_MAIL_SMTPSERVER_USERNAME}
          - DECISIONS_MAIL_SMTPSERVER_PASSWORD=${DECISIONS_MAIL_SMTPSERVER_PASSWORD}
          - DECISIONS_MAIL_SMTPSERVER_USESSL=${DECISIONS_MAIL_SMTPSERVER_USESSL}
          - DECISIONS_MAIL_SMTPSERVER_USEIMPLICITSSL=${DECISIONS_MAIL_SMTPSERVER_USEIMPLICITSSL}
          - DECISIONS_MAIL_SMTPSERVER_SKIPCERTIFICATEREVOCATIONCHECK=${DECISIONS_MAIL_SMTPSERVER_SKIPCERTIFICATEREVOCATIONCHECK}
          - DECISIONS_ALLOWCOMMANDEXECUTIONINSTEPS=true
          - LANG=en_US.UTF-8
          - LANGUAGE=en_US:en
          - LC_ALL=en_US.UTF-8
          - LOG_FILEPATH=/opt/decisions/logs
        volumes:
          - ${VOL_FILESTORAGE}
          - ${VOL_CERT}  

"UserBrowserTimezoneForTranslation" has been added to the Settings.xml file for v9.14 and above. Users who want to use this setting in a container will need to add Decisions_USEBROWSERTIMEZONEFORTRANSLATION=true to the YAML file. 


Required Environment Variables

To successfully host a container instance, the following environment variables are necessary.

Note: To configure the Container as required, refer to the later sections in the article.

Environment Variable Description Example Value
DECISIONS_DATABASETYPE Configures what type of database the Container uses. For more information, refer to Database Server and Configuration. MSSQL / POSTGRES / AZURE
DECISIONS_DATABASECONNECTSTRING Configures the Container's connection to its database. Data Source=[systemIP];Initial Catalog=11_07;Integrated Security=false;User ID=[user];Password=[password];
DECISIONS_ADMINISTRATOR_EMAIL Allows the creation of an administrator account that will be used to log in to the Portal after completing the hosting process.
Note: This email address will be set as the default email address for sending notification emails. This default email address can be modified in the Portal settings.
roy@decisions.com
DECISIONS_ADMINISTRATOR_PASSWORD Provide the password to the admin email. --
DECISIONS_PORTALBASEURL This sets up the URL of the Container, which may include the Fully Qualified Domain Address (FQDA). https://decisions.com/

Additional Environment Variables

The following section demonstrates additional, optional environment variables users may need to configure based on their application's use case.

Securing Decisions Container Environment

To enhance the security of a Decisions Environment within containers, users can set various environment variables, including HTTPS, ForceBaseURI, and more. For more information, refer to Securing Decisions Container Environment.

Allow installing/updating Python packages in Containers

Decisions Containers run as a non-root user. If a Flow needs to install or update Python packages using the Execute Command step, users must enable command execution in steps by setting the following environment variable in the YAML file.

Environment Variable Description Example Value
DECISIONS_ALLOWCOMMANDEXECUTIONINSTEPS Enables execution of the Execute Command step inside Containers. This is required when installing or updating Python packages via a Flow. true

Note: Enabling command execution allows shell commands to run from Flows. Only enable this when required, and restrict access to only those who can configure/run the related Flows.

Changing the default file storage location

The default file storage location of the Decisions Container is at /opt/decisions/data. Users can use the following variable to change the default location.

Environment Variable Description Example Value
DECISIONS_FILESTORAGELOCATION Configures the location to allow containers to preserve data.
Since containers are Linux-based, file paths will be case-sensitive.
Users must volume-map the new storage location to the physical file path to ensure it is persistent.
[PhysicalFilePath]:[FileStorageLocation]
Refer to the YAML file above for volume mapping.

Changing the default log file location

By default, Decisions writes log files under the instance base directory. In container deployments, this typically aligns with the file storage location. In Linux environments where file storage is hosted remotely (e.g., cloud file shares), frequent log writes can impact performance. The LOG_FILEPATH environment variable redirects Decisions log output to a specified path to avoid writing logs to a remote file storage location.

Environment Variable Description Example Value
LOG_FILEPATH Writes the Decisions log files to the specified path. This value takes precedence over the default log location (for example, FileStorage/BaseDirectory in the respective environment).

On clean installs or upgrades, log files in the default location remain unchanged; new log files are written to the specified path.

If the specified path is not present when the application starts, Decisions continues writing logs to the default location.
/opt/decisions/logs (Linux)
C:\Decisions\Logs (Windows)
Container notes for LOG_FILEPATH
Logs written inside the container: The path specified in LOG_FILEPATH must exist inside the container before logs are written to it. If the folder does not exist, logs are written to the default location. After creating the folder (and setting the variable), restart the container to begin writing logs to the new location.

Logs written outside the container: The host folder must exist and must be volume-mapped to the container path specified in LOG_FILEPATH. If the folder is missing or not mapped, logs are written to the default location. After creating the folder, mapping the volume, and setting the variable, restart the container to begin writing logs to the new location.

Licensing

The following variables are used to license the Decisions environment. Without a License, users cannot log into the containerized environment. For more information, refer to the Decisions License.

Environment Variable Description Example Value
DECISIONS_LICENSECOMPANYID Enter the license ID for the Container's instance. xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
DECISIONS_LICENSECOMPANYNAME Enter the company name attached to the license's ID. Decisions
DECISIONS_LICENSECONTACTEMAIL Enter a contact email for the provided license. example@email.com
DECISIONS_ENVIRONMENTNAME Enter the name of the Container to license. This can be specified during container creation or afterward. TestingEnvironment
DECISIONS_LICENSETYPE Enter the Container's license type.
This will likely be either 'Enterprise Production' or 'EnterpriseNonProduction'.
EnterpriseProduction

Clustering

The following optional environment variables are required to set up a clustered environment.

Environment Variable Description Example Value
DECISIONS_CLUSTERING_TURNONCLUSTERING Toggles whether the containers support clustering. true
DECISIONS_CLUSTERING_REDISBASEURL Prompts for the Redis URL of the Redis server. localhost:6379
DECISIONS_CAN_BE_JOB_SERVER Toggles whether the server can be a job server. Ensure to mark it True when running the servers in clustering. For more information, refer to Setting the Primary Job Server for a Cluster. true

Non-root Users

The following optional variable will allow support for non-root users. This is only available in v9.8+. This should be added under the services section of the YAML file.

Environment Variable Description Value
user: Adds support for non-root users. 1000

Integration

The following optional variables allow users to configure Integration settings within the Portal.

For more information, refer to Integration Settings and How to Set Up and Use JWT.

Environment Variable Description Example Value
DECISIONS_INTEGRATION_
USEASYMMETRICKEY
Enables the Container to use the Public Key for JSON Web Token (JWT).
true
DECISIONS_INTEGRATION_JWTSECRETKEY Enter the Secret Key for the JSON Web Token (JWT) --
DECISIONS_INTEGRATION_JWTPUBLICKEY Enter the Public Key for the JSON Web Token (JWT) --

Azure Logging

The following environment variables can be used to configure the Azure Log Analytics.

Environment Variable Description Example Value
DECISIONS_AZURE_LOG_INGESTIONENDPOINT
Logs Ingestion URL for data collection endpoint
--
DECISIONS_AZURE_LOG_IMMUTABLEID
ImmutableId for Data Collection Rules (DCR)
--
DECISIONS_AZURE_LOG_STREAMNAME
Output stream name of target (Log Analytics API, can be accessed from DCR)
--
DECISIONS_AZURE_LOG_TENANTID
Directory (tenant) ID of registered application (Microsoft Entra ID)
--
DECISIONS_AZURE_LOG_CLIENTID
Application (client) ID of the Microsoft Entra application
--
DECISIONS_AZURE_LOG_CLIENTSECRET
Client secret for the registered Entra Application
--
DECISIONS_AZURE_LOG_BUFFERSIZE
Buffer for the logs to be stored in before they are successfully sent or batched.
--
DECISIONS_AZURE_LOG_BATCHSIZE
Number of log records sent in a request.
--

AWS Logging and IAM credentials

The following optional environment variables are recommended for setting up AWS CloudWatch Logging.

Environment Variable Description Example Value
DECISIONS_LOG_AWS_REGION Enter the address of the CloudWatch region. --
DECISIONS_LOG_AWS_LOG_GROUP_PATH Enter the log path. --
AWS_ACCESS_KEY_ID Enter the Access Key ID for the IAM Role. --
AWS_SECRET_ACCESS_KEY Enter the Secret Access Key for the IAM Role. --

Settings.xml and its corresponding Environment Variable

In Settings.xml, we modify the values between the tags to adjust the server settings. However, to configure the same settings in containers, we need to follow a naming convention: DECISIONS_<SettingName>=<Value of the setting>.

Setting from Settings.xml Environment Variable Description Default Value
HideSystemValidationWarning DECISIONS_HIDESYSTEMVALIDATIONWARNING Controls whether System validation warnings are hidden. false
DynamicLocalModuleLoading DECISIONS_DYNAMICLOCALMODULELOADING Toggles loading local module libraries and their functions into memory. true
MaxWritableSizeInBytes DECISIONS_MAXWRITABLESIZEINBYTES  Specifies the maximum size, in bytes, for writable operations. 'MaxWritableSizeInBytes' is set to -1, which suggests that there is no maximum size imposed on writable operations -1
 MaxRequestBodySizeInMegabytes
DECISIONS_MAXREQUESTBODYSIZEINMEGABYTES
Sets the maximum request body size (in megabytes). This can be used to limit the maximum file size when sending a file in an API call.
30
NoLockReads DECISIONS_NOLOCKREAD Toggles No Lock allows SQL to read data without regard to locks and other blockers. false
OptimizeDataMemberAccess DECISIONS_OPTIMIZEMEMBERACCESS Controls optimization of data member access. false
NumberOfExclusiveApiThreads DECISIONS_NUMBEROFEXCLUSIVEAPITHREADS
Number of exclusive API threads.
1
HideCreatedByOnImport DECISIONS_HIDECREATEDBYONIMPORT Determines whether to hide the 'created by' information on import. true
MaintenanceMode DECISIONS_MAINTENANCEMODE Toggles setting the server into Maintenance Mode. Any jobs will pause, and only Administrators can log in until this is turned off. For more information refer to Maintenance Mode. false
ShareAccountSessions DECISIONS_SHAREACCOUNTSESSIONS When a user logs in and ShareAccountSessions is enabled, if that user has an active session on another device, Decisions will reuse the existing session ID instead of generating a new one. false
ShowUnhandledExceptionDialog DECISIONS_SHOWUNHANDLEDEXCEPTIONDIALOG Toggles display an error window when catching an unhandled exception. false
ClientStorageQuota DECISIONS_CLIENTSTORAGEQUOTA Specifies the client storage quota, limiting the amount of data stored on the client side. 1
UserIdCaseSensitive DECISIONS_USERIDCASESENSITIVE Toggles case sensitivity for username during login. false
LogFileMaxSize DECISIONS_LOGFILEMAXSIZE Prompts for the maximum size of a log file. A log that exceeds this size then rolls over into a new file. 10485760
LogMaxBackups DECISIONS_LOGMAXBACKUPS Prompts for the maximum number of log files to keep. 10
UseTimeZoneTranslation DECISIONS_USETIMEZONETRANSLATION Toggles time zone translation false
EnvironmentName DECISIONS_ENVIRONMENTNAME Prompts for the environment name of the installed instance. "Environment Name" can be any value that the user wants to specify; it does not alter the behavior of the platform. This name is primarily used for licensing purposes and is particularly helpful in a container environment to identify the type of environment in use. Possible values are Production, Development and Testing. Production
LogSqlStatements
TakingMoreThanSeconds
DECISIONS_LOGSQLSTATEMENTSTAKINGMORETHANSECONDS Configures the system to log SQL statements that take more than a specified execution time.  5
OutputSQLProfileLog DECISIONS_OUTPUTSQLPROFILELOG This variable activates the output of SQL profile logs. SQL profiling provides detailed insights into the execution of SQL queries false
LogAPICallsTaking
MoreThanSeconds
DECISIONS_LOGAPICALLSTAKINGMORETHANSECONDS Logs API calls that take more than a specified time to complete 5
LogFlowStepsTaking
MoreThanMilliseconds
DECISIONS_LOGFLOWSTEPSTAKINGMORETHANMILLISECONDS Logs Flow steps that take more than a specified time (in milliseconds) to execute 1000
IgnoreAllCertificateErrors DECISIONS_IGNOREALLCERTIFICATEERRORS Toggles respecting certificate errors such as trust errors from self-signed licenses. false
LaunchDebugger
OnUnitTestFail
DECISIONS_LAUNCHDEBUGGERONUNITTESTFAIL Toggles initializing the Debugger upon unit test failure false
DatabaseConnectString DECISIONS_DATABASECONNECTSTRING Configures the Container's connection to its database. A few example connection string has been listed at the end of the table.
InstanceDatabase
ConnectionStringTemplate
DECISIONS_INSTANCEDATABASECONNECTIONSTRINGTEMPLATE Provides a template for instance-specific database connection strings. This allows for dynamic configuration of database connections based on specific instances or deployments of the Decisions platform. --
DefaultDatabaseQueryTimeout DECISIONS_DEFAULTDATABASEQUERYTIMEOUT Prompts for a time duration for database queries that, if exceeded, will automatically fail. 60
Secondary
DatabaseConnectString
DECISIONS_SECONDARYDATABASECONNECTSTRING Specifies the connection string for the secondary database. In environments with multiple databases, this variable enables the configuration of a secondary database for specific purposes, such as redundancy or failover.
DataBaseType DECISIONS_DATABASETYPE Configures what type of database the Container uses. For more information, refer to Database Server and Configuration. MSSQL/
POSTGRES/
AZURE
WatcherSocketPort DECISIONS_WATCHERSOCKETPORT Sets the port for the watcher socket. The watcher socket facilitates communication and coordination between different components of the Decisions system, and configuring the port allows for proper network communication. 20999
PortalBaseUrl DECISIONS_PORTALBASEURL Configures the URL of the Container consisting of the domain name and its port. --
ClusterAddressableIP DECISIONS_CLUSTERADDRESSABLEIP Prompts for IP addresses to allow cluster server connections. If blank, then the server is not clustered. --
ClusterPortalBaseUrl DECISIONS_CLUSTERPORTALBASEURL Prompts for the Portal base URL of the clustered environment. This should match the Instance URL generated from the Control instance's Add Instance window.
If blank, then the server is not clustered. For more information, refer to Setting Up A Cluster.
--
ServerAdministratorEmail DECISIONS_SERVERADMINISTRATOREMAIL Prompts for which email will be contacted by actions such as Send Logs to Support and Send Notification to Server Admin. support@
decisions.com
ServerType DECISIONS_SERVERTYPE Determines the Container's server type.
Without this variable, containers are installed as a standard Application server.
ControlInstanceURL DECISIONS_CONTROLINSTANCEURL Prompts for the control instance URL in multi-tenancy environments. https://decisions-control-instance/
InstanceAuthenticationKey DECISIONS_INSTANCEAUTHENTICATIONKEY Prompts for the instance Authorization Key. --
DeploymentLockEnabled DECISIONS_DEPLOYMENTLOCKENABLED Toggles block users from creating or modifying any Designer Elements in the server. false
ByPassSmtpServer DECISIONS_MAIL_BYPASSSMTPSERVER Toggles bypassing below SMTP settings instead of using direct mail. It is not recommended to set it to True unless for testing purposes.
Refer to the Email and SMTP in Decisions article for further information.
true
ServerAddress DECISIONS_MAIL_SMTPSERVER_SERVERADDRESS Enter the domain name of the SMTP service. --
Port DECISIONS_MAIL_SMTPSERVER_PORT Enter the port number of the SMTP server. 25
RequiresAuthentication DECISIONS_MAIL_SMTPSERVER_REQUIRESAUTHENTICATION Toggles if authentication is necessary to log in to the SMTP server. false
Username  DECISIONS_MAIL_SMTPSERVER_USERNAME Enter the username of the SMTP server. --
Password DECISIONS_MAIL_SMTPSERVER_PASSWORD Enter the password for the specified user. --
UseSSL DECISIONS_MAIL_SMTPSERVER_USESSL Toggles secure socket layer (SSL) encryption on SMTP mail. false
UseImplicitSSL DECISIONS_MAIL_SMTPSERVER_USEIMPLICITSSL By default Decisions expects an Explicit SSL TCP channel. However, if the mail server is using an Implicit channel, this may be set to True. --
SkipCertificateRevocationCheck DECISIONS_MAIL_SMTPSERVER_SKIPCERTIFICATEREVOCATIONCHECK This option will skip all certificate checks if set to True. In general, this is not recommended, but in certain test scenarios or for multi-environment configurations, this setting can be useful. false
ServerName DECISIONS_SERVERNAME Specifies the name of the Decisions server. This information is crucial for identification and management purposes in networked or distributed environments. --
RestartStoppedInstances DECISIONS_RESTARTSTOPPEDINSTANCES If set to true, enables the automatic restart of stopped instances. Automatic restart helps maintain continuous availability and responsiveness. true
ServerHeart
BeatIntervalInSeconds
DECISIONS_SERVERHEARTBEATINTERVALINSECONDS Configuring this interval influences the frequency of these health-check signals. 5
UseLuceneFullTextSearch DECISIONS_USELUCENEFULLTEXTSEARCH If set to true, enables the use of Lucene for full-text search capabilities. Lucene is a powerful search engine library, and activating this variable enhances the platform's ability to perform efficient full-text searches. false
SplashScreenText DECISIONS_SPLASHSCREENTEXT Prompts for text to display when the Portal loads/reloads. Decisions OS is Loading. . .
ProductTitle DECISIONS_PRODUCTTITLE Sets the title or name associated with the product --
FileStorageLocation DECISIONS_FILESTORAGELOCATION Configures location to allow containers to preserve data.
Since containers are Linux-based, paths for the file storage will be case-sensitive.
Users must volume map the default value with the physical file storage location to ensure it is persistent.
/opt/decisions/data
LogCheckFieldTypes DECISIONS_LOGCHECKFIELDTYPES If set to true, activates the logging of field types during checks. false
EnableSingleSignOn DECISIONS_ENABLESINGLESIGNON Toggles enable single-sign-on (SSO) for user logins for added security to the Container. false
AsyncCheckPeriod DECISIONS_ASYNCCHECKPERIOD This setting should not be modified by the user to ensure optimal performance and stability. 2000
AsyncNumChecks DECISIONS_ASYNNUMCHECKS This setting should not be modified by the user to ensure optimal performance and stability. 7
AutoStartProfiler DECISIONS_AUTOSTARTPROFILER Toggles automatically start the Profiler to capture the session. true
Recoverable
PasswordEncryptionType
DECISIONS_RECOVERABLEPASSWORDENCRYPTIONTYPE Sets the encryption type for recoverable passwords, such as DES. DES
PasswordHashEncryptionType DECISIONS_PASSWORDHASHENCRYPTIONTYPE Specifies the encryption algorithm used for hashing passwords within the Decisions system. SHA256
AllowedIPAddresses DECISIONS_ALLOWEDIPADDRESSES Permitted client IP addresses to access the server.
DeniedIPAddresses DECISIONS_DENIEDIPADDRESSES IP addresses to block access to the Decisions server.
InstanceName DECISIONS_INSTANCENAME Defines the name of the installed server instance referenced in the connection string, e.g., "localhost:80/Primary/" Primary
LoginPageAllowedIPs DECISIONS_LOGINPAGEALLOWEDIPS Permitted IP addresses for users to log in to the server.
ORMSaveByMerge DECISIONS_ORMSAVEBYMERGE Flags whether the Object-Relational Mapping (ORM) system should save data by merging changes. true
SkipEnforceDBExistsStep DECISIONS_SKIPENFORCEDBEXISTSSTEP When set to true, this variable instructs the server to skip enforcing the existence of the database during certain steps. This can be useful in scenarios where the database structure is managed externally or dynamically. false
UsePrototypeInstance DECISIONS_USEPROTOTYPEINSTANCE Toggles using a template instance. Mainly used for multitenant environments. true
FullTextSearch DECISIONS_FULLTEXTSEARCH Defines the status of full-text search within the platform, specifying whether it is enabled or disabled. Full-text search enhances the search capabilities, allowing for more comprehensive and efficient searching of textual data. Enabled
HideDetailedErrorMessages DECISIONS_HIDEDETAILEDERRORMESSAGES Controls whether detailed error messages are hidden. false
InterServer
CommunicationMode
DECISIONS_INTERSERVERCOMMUNICATIONMODE  Specifies the mode of communication between servers, such as using HTTP. This variable influences the underlying communication protocols employed for inter-server interactions. http
CaptureAspNetLogs DECISIONS_CAPTUREASPNETLOGS Toggles capturing HTTP requests and responses in a log file saved under /Logs/Asp.NET Core with the prefix "w3clog." false
AspNetLogsFileCountLimit DECISIONS_ASPNETLOGSFILECOUNTLIMIT Allows to configure the maximum number of ASP NET logs to store. Newer logs will override the oldest logs 30
AspNetLogsFileSizeLimit DECISIONS_ASPNETLOGSFILESIZELIMIT Allows to configure the maximum size of an ASP NET log file. A log that exceeds this size then rolls over into a new file. 104857600
CaptureW3CLogs DECISIONS_CAPTUREW3CLOGS Toggles capturing W3C logs in the log file false
DefaultSameSiteCookieMode DECISIONS_DEFAULTSAMESITECOOKIEMODE Allows selection of the cookie behavior for the server. SameSite attributes control how cookies are sent with cross-site requests, impacting security and privacy aspects. Lax
ForceBaseURI DECISIONS_FORCEBASEURI This environment variable must be used if SSL terminates at the Load Balancer.
AllowProxyFrom DECISIONS_ALLOWPROXYFROM Toggles permitting proxy headers false
HttpPort DECISIONS_HTTPPORT These variables allow the application to run on designated ports within the containers. By doing so, users can map the Container's port to a particular port on the host machine, facilitating access to the application running inside the Container from the host's network. 80
HttpsPort DECISIONS_HTTPSPORT 443
ProxyFromWhiteList DECISIONS_PROXYFROMWHITELIST This setting is a comma-separated list of "protocol://host" values that make up a whitelist. The whitelist defines the addresses (protocols and hosts) the platform allows proxying. If this list is empty and AllowProxyFrom is set to true, it allows proxying from any source.
CustomHeaders DECISIONS_CUSTOMHEADERS For Custom Headers, users need to set the value of the DECISIONS_CUSTOMHEADERS in a JSON String format. This JSON String gets automatically deserialized and converted in XML format in Settings.xml.
Example: [{"Name": "X-Frame-Options", "Value": "SAMEORIGIN"}]
[{"Name": "X-Frame-Options", "Value": "SAMEORIGIN"}]
ApplicationName DECISIONS_APPLICATIONNAME Prompts for a name that any created cookies can use.
Decisions
DisableAutoSSO
SignInParameter
DECISIONS_DISABLEAUTOSSOSIGNINPARAMETER When set to true, this variable disables the automatic inclusion of Single Sign-On (SSO) parameters during sign-in. This can be relevant for scenarios where custom handling of SSO parameters is required. false
HttpsCerificateLocation DECISIONS_HTTPSCERIFICATELOCATION Specifies the location of the HTTPS certificate used for securing communications over HTTPS PhysicalFilePath
CertificateThumbPrint DECISIONS_CERTIFICATETHUMBPRINT Prompts for certificate thumbprint of SSL certificate when using the certificate store option.
InstanceAuthenticationKey DECISIONS_INSTANCEAUTHENTICATIONKEY Prompts for the authentication key are generated from a Control instance's Add Instance window.
ObfuscateSessionIdInLogs DECISIONS_OBFUSCATESESSIONIDINLOGS When set to true, this variable instructs the system to obfuscate session IDs in logs. false
AllowedFileAccessPaths DECISIONS_ALLOWEDFILEACCESSPATHS Allows to specify File Paths to which the Decisions Server can write files. The primary purpose of this setting is to prevent File Path Traversal.
This setting should be used if users get an error "{FilePath} is outside the allowed directory paths.

EnableHttp DECISIONS_ENABLEHTTP The Decisions application running inside a container listens to ports 80 and 443 by default, and these variables toggle the use of the default web traffic ports for connections to the server.
Note: Either HTTP or HTTPS must be marked True to access the application.
true
EnableHttps DECISIONS_ENABLEHTTPS false
HttpsCertificatePath DECISIONS_HTTPSCERTIFICATEPATH Enter the file path where the Container's certificate resides. This searches C:\Docker by default. Enter the certificate name at the end.
HttpsCertificatePassword DECISIONS_HTTPSCERTIFICATEPASSWORD Use this variable if the SSL certificate is password protected.
EnableHttpToHttpsRedirection DECISIONS_ENABLEHTTPTOHTTPSREDIRECTION This setting will redirect the connection from HTTP to HTTPS. false
WaitForDebugger DECISIONS_WAITFORDEBUGGER This variable is exclusively intended for use by Decisions developers for debugging purposes. false
AllowCommandExecutionInSteps DECISIONS_ALLOWCOMMANDEXECUTIONINSTEPS Enables execution of the Execute Command step inside Containers. Required for installing/updating Python packages via a Flow. false

Feature Changes

Description Version Release Date Developer Task
The Azure Monitor HTTP Data Collector API will be deprecated on September 14th, 2026.
9.23 April 2026 [DT-046947]
Added support for configuring the log output location using the LOG_FILEPATH environment variable (helps avoid performance issues when file storage is hosted remotely). 9.21 March 2026 [DT-046708]
Added support for enabling command execution in steps (required for installing/updating Python packages via Execute Command in Containers). 9.20 February 2026 [DT-046496]
Added a variable for non-root users. 9.8 March 2025 [DT-043658]