Configuration

💡 TIP

For VS Code editor settings (JSON-based), see Editor Settings.

Dotenv logo

Kloud Workspace follows the convention over configuration principle, shipping with sensible defaults.

Nearly every setting can be overridden with environment variables, giving you maximum flexibility.

All configuration is supplied exclusively through environment variables. No JSON, YAML, or CLI flags required. This makes the workspace fully stateless and cloud-friendly.

WS_<GROUP> Prefix Convention

Variables that are consumed solely by Kloud Workspace start with WS_<GROUP>_ followed by the name (example: WS_ZSH_PLUGINS).

When a variable is also consumed by an underlying tool, we keep its original name. Such variables can be reviewed in the global variables section.

Boolean Values

To enable a boolean environment variable, set it to a truthy value, either 1 or true.

APT

`WS_APT_ADDITIONAL_GPG_KEYS`

List of trusted GPG pairs.

Accepts a space-delimited list of name:url pairs installed to /etc/apt/keyrings.

The key file is downloaded and saved as /etc/apt/keyrings/<name>.gpg. If you list more than one URL, separate them with spaces.

Type: string
Default: null

WS_APT_ADDITIONAL_GPG_KEYS="name1:keys.example.com/key1.asc \
                            name2:keys.example.com/key2.gpg"

Read More →

`WS_APT_ADDITIONAL_INSECURE_GPG_KEYS`

List of trusted GPG pairs (HTTP or insecure HTTPS).

Accepts a space-delimited list of name:url pairs installed to /etc/apt/keyrings.

Supports both HTTP and HTTPS URLs. For HTTPS URLs, certificate validation is bypassed using insecure connections.

The key file is downloaded and saved as /etc/apt/keyrings/<name>.gpg. If you list more than one URL, separate them with spaces.

Use only in fully trusted network environments.

Type: string
Default: null
Since: v0.1.0

WS_APT_ADDITIONAL_INSECURE_GPG_KEYS=" \
                                     name1:http://keys.example.com/key1.asc \
                                     name2:https://untrusted.com/key2.gpg"

Read More →

`WS_APT_ADDITIONAL_PACKAGES`

Additional APT packages installed during startup.

Accepts a space-delimited package list.

Type: string
Default: null

WS_APT_ADDITIONAL_PACKAGES="cmake nano"

Read More →

`WS_APT_ADDITIONAL_REPOS`

Appends additional repository lines to /etc/apt/sources.list.

Accepts a semicolon-delimited list of full deb entries.

Each entry is copied as is, you're responsible for correct suite (trixie) and component names (main, contrib, ...).

Type: string
Default: null

WS_APT_ADDITIONAL_REPOS="deb http://one.test trixie main; deb \
                         http://two.test trixie main"

Read More →

`WS_APT_DISABLE_REPOS`

Disables specified APT repositories or all repositories.

This is useful when you rely exclusively on a private mirror.

Accepts either:

A space-delimited list of repository names (debian, additional, trixie).
A boolean true or * value to disable all repositories.

Type: string
Default: null
Since: v0.0.22

WS_APT_DISABLE_REPOS="debian additional"

Read More →

`WS_APT_UPDATE_CACHE`

Forces apt-get update before any package action.

Type: boolean
Default: false
Since: v0.0.20

Read More →

Auth

`WS_AUTH_DISABLE_SUDO`

Disables password-less sudo.

Type: boolean
Default: false
Since: v0.0.20

`WS_AUTH_PASSWORD`

Plaintext password for web login.

Use only in ephemeral or local environments, never in shared or production deployments.

Type: string
Default: null
Since: v0.0.20

WS_AUTH_PASSWORD="super_duper_secret"

Read More →

`WS_AUTH_PASSWORD_FILE`

Path to a file containing the plaintext password.

Password lookup precedence:

WS_AUTH_PASSWORD_HASHED_FILE (hashed file).
WS_AUTH_PASSWORD_HASHED (hashed env var).
WS_AUTH_PASSWORD_FILE (this variable).
WS_AUTH_PASSWORD (plaintext env var).

Type: string
Default: /run/secrets/workspace/auth_password
Since: v0.1.3

Read More →

`WS_AUTH_PASSWORD_HASHED`

Argon2 hash used for web login.

Takes precedence over plaintext password when both are set.

Type: string
Default: null
Since: v0.0.20

WS_AUTH_PASSWORD_HASHED="$argon2i$v=19$m=4096,t=3,p=1$...$..."

Read More →

`WS_AUTH_PASSWORD_HASHED_FILE`

Path to a file containing the Argon2 hashed password.

Password lookup precedence:

WS_AUTH_PASSWORD_HASHED_FILE (this variable).
WS_AUTH_PASSWORD_HASHED (hashed env var).
WS_AUTH_PASSWORD_FILE (plaintext file).
WS_AUTH_PASSWORD (plaintext env var).

Type: string
Default: /run/secrets/workspace/auth_password_hashed
Since: v0.1.3

Read More →

Enterprise CA

`WS_CA_ADDITIONAL_CERT_ENDPOINTS`

URLs of additional CA certificates to trust (HTTPS only).

Accepts a space-delimited URL list pointing to a PEM-encoded certificate. Only HTTPS URLs are supported for secure certificate retrieval.

Type: string
Default: null
Since: v0.0.20

WS_CA_ADDITIONAL_CERT_ENDPOINTS="https://corp.com/ca.pem \
                                 https://alt.com/root.crt"

Read More →

`WS_CA_ADDITIONAL_CERT_INSECURE_ENDPOINTS`

URLs of additional CA certificates to trust (HTTP or insecure HTTPS).

Accepts a space-delimited URL list pointing to a PEM-encoded certificate. Supports both HTTP and HTTPS URLs. For HTTPS URLs, certificate validation is bypassed using insecure connections.

Use only in fully trusted network environments.

Type: string
Default: null
Since: v0.0.22

WS_CA_ADDITIONAL_CERT_INSECURE_ENDPOINTS="http://corp.com/ca.pem \
                                          https://untrusted.com/root.crt"

Read More →

Claude

`WS_CLAUDE_STATUSLINE_DISABLE`

Disables the Claude Code statusline.

Type: boolean
Default: false
Since: v0.1.3

Read More →

`WS_CLAUDE_STATUSLINE_HIDE_CONTEXT_BAR`

Hides the context usage bar in the Claude statusline.

Type: boolean
Default: false
Since: v0.1.3

Read More →

`WS_CLAUDE_STATUSLINE_HIDE_GIT`

Hides git branch and status in the Claude statusline.

Type: boolean
Default: false
Since: v0.1.3

Read More →

`WS_CLAUDE_STATUSLINE_HIDE_LINES_CHANGED`

Hides lines added/removed in the Claude statusline.

Type: boolean
Default: false
Since: v0.1.3

Read More →

`WS_CLAUDE_STATUSLINE_HIDE_MODEL`

Hides the model name in the Claude statusline.

Type: boolean
Default: false
Since: v0.1.3

Read More →

`WS_CLAUDE_STATUSLINE_SCRIPT`

Path to the statusline script.

Type: string
Default: /etc/claude-code/statusline.zsh
Since: v0.1.3

Read More →

`WS_CLAUDE_STATUSLINE_SHELL`

Shell used to execute the statusline script.

Type: string
Default: zsh
Since: v0.1.3

Read More →

Docker

`WS_DOCKER_ENABLE_CLIENT`

Enables Docker inside the container.

Type: boolean
Default: false
Since: v0.0.20

Read More →

Editor

`WS_EDITOR_ADDITIONAL_VS_EXTENSIONS`

Installs these Marketplace extension IDs at startup.

Accepts a space-delimited list of extensions.

Type: string
Default: null
Since: v0.0.20

WS_EDITOR_ADDITIONAL_VS_EXTENSIONS="dbaeumer.vscode-eslint \
                                    esbenp.prettier-vscode"

Read More →

`WS_EDITOR_ADDITIONAL_VS_EXTENSIONS_DIR`Deprecated

Installs .vsix file found in this directory.

Use this when you package proprietary or pre-downloaded extensions.

Type: string
Default: null
Deprecated: v0.2.0

WS_EDITOR_ADDITIONAL_VS_EXTENSIONS_DIR="/additional-extensions"

Read More →

`WS_EDITOR_COMMENTS_DISABLE_FONT`

Disables the custom font used for code comments.

Type: boolean
Default: false
Since: v0.0.20

Read More →

`WS_EDITOR_SCROLLBAR_SIZE`

Editor's scrollbar size.

You may pass either a bare number (6, becomes 6px) or the full CSS value with the px suffix (i.e. 6px).

Type: string
Default: 2px
Since: v0.0.21

`WS_EDITOR_SETTINGS_MERGE`

JSON object to deep merge into VSCode settings.json.

Values are merged recursively, existing settings not specified are preserved.

For large configs, use WS_EDITOR_SETTINGS_MERGE_FILE.

Type: string
Default: null
Since: v0.1.2

WS_EDITOR_SETTINGS_MERGE="{"editor.fontSize": 16, "[python]": \
                          {"editor.tabSize": 4}}"

Read More →

`WS_EDITOR_SETTINGS_MERGE_FILE`

Path to a JSON file to deep merge into VSCode settings.json.

Alternative to WS_EDITOR_SETTINGS_MERGE for larger configurations.

Type: string
Default: null
Since: v0.1.2

WS_EDITOR_SETTINGS_MERGE_FILE="/workspace/.settings-override.json"

Read More →

`WS_EDITOR_SETTINGS_OVERRIDE`

JSON object to completely replace VSCode settings.json.

WARNING: Removes all default workspace settings.

Use WS_EDITOR_SETTINGS_MERGE for partial updates.

Type: string
Default: null
Since: v0.1.2

WS_EDITOR_SETTINGS_OVERRIDE="{"editor.fontSize": 16}"

Read More →

`WS_EDITOR_SETTINGS_OVERRIDE_FILE`

Path to a JSON file to completely replace VSCode settings.json.

Alternative to WS_EDITOR_SETTINGS_OVERRIDE for larger configurations.

Type: string
Default: null
Since: v0.1.2

WS_EDITOR_SETTINGS_OVERRIDE_FILE="/workspace/.settings.json"

Read More →

`WS_EDITOR_TRUSTED_DOMAINS`

Comma-separated list of trusted domains that bypass link confirmation prompts.

When a link matching one of these domains is clicked in the editor, it opens directly in the browser without prompting for user confirmation.

Accepts a comma-delimited list of domain URL patterns.

The editor ships with https://open-vsx.org trusted by default (via product.json); entries from this variable are added on top.

Type: string
Default: null
Since: v0.1.3

WS_EDITOR_TRUSTED_DOMAINS=" \
                           https://github.com,https://stackoverflow.com"

Features

`WS_FEATURES_ADDITIONAL_FEATURES`

Installs additional feature at startup.

Accepts a space-delimited list of features.

Type: string
Default: null
Since: v0.0.20

WS_FEATURES_ADDITIONAL_FEATURES="dotnet jupyter"

Read More →

`WS_FEATURES_DIR`

Directory path where additional features are located.

Specify the full path to the directory containing the features to be loaded or referenced at startup.

Type: string
Default: /usr/share/workspace/features
Since: v0.20.0

Read More →

`WS_FEATURES_STORE_URL`

URL of a ws-feature-store instance used as a local mirror.

When set, workspace features that require third-party APT repositories (e.g. cloudflared, gcloud, gh, etc.) will fetch packages from this URL instead of enabling individual vendor repositories.

Type: string
Default: null
Since: v0.1.3

WS_FEATURES_STORE_URL="http://feature-store.local:8080"

Read More →

Git

`WS_GIT_CLEAR_NOTEBOOK_OUTPUT`

Clears outputs from Jupyter notebooks during git operations.

When true, the git filter removes execution outputs and execution counts from .ipynb files when they are staged for commit. This helps keep repository history clean by excluding dynamic output data.

Type: boolean
Default: false
Since: v0.0.22

Read More →

`WS_GIT_CLONE_REPO`

Clones this repository into ${WS_SERVER_ROOT} at startup.

The clone happens only if the target directory is empty. Supports HTTPS and SSH URLs (requires configured SSH keys).

Type: string
Default: null
Since: v0.0.20

WS_GIT_CLONE_REPO="https://github.com/example/repo.git"

Read More →

`WS_GIT_CREDENTIAL_CACHE_TIMEOUT`

Lifetime (seconds) of cached Git credentials.

Providing a value of -1 will set the cache timeout to 1 year (31536000 seconds).

Type: integer
Default: 3600

Read More →

Helm

`WS_HELM_PRELOAD_CACHE`

Restores the Helm repo cache.

Type: boolean
Default: false
Since: v0.0.20

Read More →

Logging

`WS_LOGGING_DIR`

Base directory for all workspace logs.

Type: string
Default: /var/log/workspace
Since: v0.0.21

`WS_LOGGING_DISABLE_CONSOLE_OUTPUT`

Disable console logging.

When true, console logging will not be redirected to stdout/stderr, however, logs will still be stored on disk at "${WS_LOGGING_DIR}/${WS_LOGGING_MAIN_FILE}".

Type: boolean
Default: false
Since: v0.0.22

`WS_LOGGING_MAIN_FILE`

Combined log file for stdout and stderr.

Type: string
Default: workspace.log
Since: v0.0.21

Metrics

`WS_METRICS_COLLECTORS`

Comma-separated list of metric collectors to enable.

Accepts a comma-delimited list of collectors with dot-notation for granularity.

Available collectors:

Collector	Description
`workspace`	All workspace metrics
`workspace.info`	Workspace build info
`workspace.session`	Session timestamp and uptime
`workspace.extensions`	Installed extensions count
`container`	All container metrics
`container.cpu`	CPU usage metrics
`container.memory`	Memory usage metrics
`container.fs`	Filesystem usage metrics
`container.fd`	File descriptor metrics
`container.pids`	Process metrics
`pressure`	All pressure metrics
`pressure.cpu`	CPU pressure metrics
`pressure.memory`	Memory pressure metrics
`pressure.io`	IO pressure metrics
`network`	Network metrics
`sockets`	Socket metrics
`io`	IO metrics
`gpu`	GPU metrics (requires nvidia-smi)

When unset or *, all collectors are enabled (gpu, if available).

Type: string
Default: *
Since: v0.1.2

WS_METRICS_COLLECTORS="workspace,container.cpu,gpu"

`WS_METRICS_ENABLE`

Enables the Prometheus metrics exporter.

When true, starts a metrics server that exposes Prometheus-compatible metrics at / on the configured port.

Metrics include workspace info, session data, extensions count, and container resource usage (CPU, memory, disk, file descriptors).

Type: boolean
Default: false
Since: v0.1.2

`WS_METRICS_PORT`

Port on which the metrics endpoint listens.

The metrics server exposes a / endpoint on this port. Default port 9100 follows the node_exporter convention.

Type: integer
Default: 9100
Since: v0.1.2

Secrets

`WS_SECRETS_MASTER_KEY`

Master encryption key for secrets vault.

Used to encrypt and decrypt secrets in the vault. Can be provided as:

A base64-encoded string.
A plaintext string.

Master key lookup precedence:

CLI --master flag (if provided).
WS_SECRETS_MASTER_KEY (this variable).
WS_SECRETS_MASTER_KEY_FILE.
/etc/workspace/master.key (default path).

Type: string
Default: null
Since: v0.1.1

WS_SECRETS_MASTER_KEY="dGhpcyBpcyBhIHNlY3JldCBrZXkgZXhhbXBsZQ=="

`WS_SECRETS_MASTER_KEY_FILE`

Path to file containing the master encryption key.

Used to encrypt and decrypt secrets in the vault. Can be provided as:

A base64-encoded string.
A plaintext string.

Master key lookup precedence:

CLI --master flag (if provided).
WS_SECRETS_MASTER_KEY.
WS_SECRETS_MASTER_KEY_FILE (this variable).
/etc/workspace/master.key (default path).

Type: string
Default: /etc/workspace/master.key
Since: v0.1.1

WS_SECRETS_MASTER_KEY_FILE="/etc/workspace/custom-master.key"

`WS_SECRETS_VAULT`

Path to the secrets vault manifest file.

A YAML file containing encrypted secrets that can be decrypted and deployed to various destinations during startup.

Type: string
Default: ~/.ws/vault/secrets.yaml
Since: v0.1.1

WS_SECRETS_VAULT="/custom/path/vault/secrets.yaml"

Server

`WS_SERVER_PORT`

Port on which the web server listens.

Type: integer
Default: 8080
Since: v0.0.20

`WS_SERVER_PROXY_DOMAIN`

Domain suffix used to expose server's forwarded ports.

Accepts either a single domain suffix or multiple space-delimited suffixes. > Multiple domain support was added in v0.0.22.

Type: string
Default: null
Since: v0.0.20

WS_SERVER_PROXY_DOMAIN="ws.dev local.ws.dev"

Read More →

`WS_SERVER_ROOT_DIR`

Root directory for the workspace.

This should only be overridden in extreme cases.

Type: string
Default: /workspace
Since: v0.0.20

`WS_SERVER_SSL_CERT`

Path or inline PEM for the server certificate.

Accepts either:

A full path to the mounted PEM-encoded certificate
Literal certificate body starting with -----BEGIN CERTIFICATE----- (newline characters may be provided as \n escapes).

When this is unset but WS_SERVER_SSL_KEY is provided, the key is reused to mint a self-signed certificate for WS_SERVER_SSL_HOSTS (or localhost).

Type: string
Default: null
Since: v0.0.21

WS_SERVER_SSL_CERT="/etc/workspace/ssl/server.crt"

Read More →

`WS_SERVER_SSL_HOSTS`

Space-delimited DNS names for self-signed certificate.

Type: string
Default: localhost
Since: v0.0.21

WS_SERVER_SSL_HOSTS="ws.dev *.ws.dev"

Read More →

`WS_SERVER_SSL_KEY`

Path or inline PEM for the private key.

Type: string
Default: null
Since: v0.0.21

WS_SERVER_SSL_KEY="/etc/workspace/ssl/server.key"

Read More →

Startup

`WS_STARTUP_FAIL_ON_ERROR`

Fail fast if any startup script exits non-zero.

When true, the autoloader stops at the first failing startup or entrypoint and the container startup exits non-zero.

Type: boolean
Default: false
Since: v0.0.21

Terminal

`WS_TERMINAL_PROMPT_HIDE_DOCKER_CONTEXT`

Hides Docker context info in the prompt.

Type: boolean
Default: false
Since: v0.0.20

Read More →

`WS_TERMINAL_PROMPT_HIDE_HOSTNAME`

Hides the container hostname in the prompt.

Type: boolean
Default: false
Since: v0.0.20

Read More →

`WS_TERMINAL_PROMPT_HIDE_KUBERNETES_CONTEXT`

Hides current Kubernetes context in the prompt.

Type: boolean
Default: false
Since: v0.0.20

Read More →

`WS_TERMINAL_PROMPT_HIDE_NODEJS_VERSION`

Hides active Node.js version in the prompt.

Type: boolean
Default: false
Since: v0.0.20

Read More →

`WS_TERMINAL_PROMPT_HIDE_PYTHON_VERSION`

Hides active Python version in the prompt.

Type: boolean
Default: false
Since: v0.0.20

Read More →

`WS_TERMINAL_PROMPT_HIDE_USER`

Hides the current user in the prompt.

Type: boolean
Default: false
Since: v0.0.20

Read More →

Zsh

`WS_ZSH_ADDITIONAL_PLUGINS`

Loads additional oh-my-zsh plugins.

Type: string
Default: null
Since: v0.0.20

WS_ZSH_ADDITIONAL_PLUGINS="php"

`WS_ZSH_FZF_HISTORY_ARGS`

Default arguments passed to fzf for history search.

Type: string
Default: +s +m -x -e --preview-window=hidden
Since: v0.1.1

Read More →

`WS_ZSH_FZF_HISTORY_BIND`

Key binding that triggers fzf history search.

Type: string
Default: ^r
Since: v0.1.1

Read More →

`WS_ZSH_FZF_HISTORY_DATES_IN_SEARCH`

Includes ISO 8601 date timestamps in search results.

Type: boolean
Default: false
Since: v0.1.1

Read More →

`WS_ZSH_FZF_HISTORY_END_OF_LINE`

Moves cursor to end-of-line after selecting a history entry.

Type: string
Default: null
Since: v0.1.1

Read More →

`WS_ZSH_FZF_HISTORY_EVENT_NUMBERS`

Shows event numbers in history search results.

Type: boolean
Default: false
Since: v0.1.1

Read More →

`WS_ZSH_FZF_HISTORY_EXTRA_ARGS`

Additional arguments appended to the default fzf arguments.

Type: string
Default: null
Since: v0.1.1

Read More →

`WS_ZSH_FZF_HISTORY_QUERY_PREFIX`

Prefix prepended to the fzf query when the buffer is non-empty.

Type: string
Default: null
Since: v0.1.1

Read More →

`WS_ZSH_FZF_HISTORY_REMOVE_DUPLICATES`

Removes duplicate entries from history search results.

Type: boolean
Default: true
Since: v0.1.1

Read More →

`WS_ZSH_PLUGINS`

Enables built-in oh-my-zsh plugins.

Type: string
Default: 1password auto-venv docker encode64 fzf-history git golang helm kubectl npm python pip safe-history ssh-agent yarn zsh-autosuggestions

WS_ZSH_PLUGINS="kubectl npm python pip"

`WS_ZSH_SAFE_HISTORY_IGNORE_FAILED`

Prevents failed commands from being persisted to history file.

When true, commands that exit with a non-zero status are kept in the current session's history (accessible via up-arrow) but are not written to $HISTFILE.

Only successful commands are persisted across sessions.

Type: boolean
Default: true

Read More →

`WS_ZSH_SAFE_HISTORY_IGNORE_SECRETS`

Prevents commands containing secrets from entering history.

When true, commands matching built-in secret patterns (e.g. TOKEN=..., --password=..., Authorization: headers, curl -u) are blocked entirely, they don't appear in the session history or on disk.

Type: boolean
Default: true

Read More →

`WS_ZSH_SAFE_HISTORY_SECRET_PATTERNS`

Additional pipe-delimited regex patterns treated as secrets.

Accepts a pipe-delimited list of regex patterns appended to the built-in secret patterns. Commands matching any pattern are excluded from history entirely.

Type: string
Default: null

WS_ZSH_SAFE_HISTORY_SECRET_PATTERNS="my-corp-token|INTERNAL_KEY="

Read More →

Deprecated

Name	Replacement	Since	Removal
~~`WS_APT_UPDATE_REPOS`~~	`WS_APT_UPDATE_CACHE`	v0.0.20	v0.1.0
~~`WS_CA_ADDITIONAL_CERT_ALLOW_INSECURE`~~	`WS_CA_ADDITIONAL_CERT_INSECURE_ENDPOINTS`	v0.0.22	v0.1.0
~~`WS_CLONE_WORKSPACE_REPO`~~	`WS_GIT_CLONE_REPO`	v0.0.20	v0.1.0
~~`WS_COMMENTS_DISABLE_FONT`~~	`WS_EDITOR_COMMENTS_DISABLE_FONT`	v0.0.20	v0.1.0
~~`WS_CONFIGURE_DOCKER`~~	`WS_DOCKER_ENABLE_CLIENT`	v0.0.20	v0.1.0
~~`WS_CONFIGURE_HELM`~~	`WS_HELM_PRELOAD_CACHE`	v0.0.20	v0.1.0
~~`WS_DISABLE_SUDO`~~	`WS_AUTH_DISABLE_SUDO`	v0.0.20	v0.1.0
~~`WS_EDITOR_ADDITIONAL_VS_EXTENSIONS_DIR`~~	place .vsix files in `~/.ws/extensions/` instead	v0.2.0	v0.3.0
~~`WS_EXTRA_CA_CERT_ENDPOINTS`~~	`WS_CA_ADDITIONAL_CERT_ENDPOINTS`	v0.0.20	v0.1.0
~~`WS_EXTRA_CA_CERT_INSECURE`~~	`WS_CA_ADDITIONAL_CERT_ALLOW_INSECURE`	v0.0.20	v0.1.0
~~`WS_EXTRA_FEATURES`~~	`WS_FEATURES_ADDITIONAL_FEATURES`	v0.0.20	v0.1.0
~~`WS_EXTRA_VS_EXTENSIONS`~~	`WS_EDITOR_ADDITIONAL_VS_EXTENSIONS`	v0.0.20	v0.1.0
~~`WS_EXTRA_VS_EXTENSIONS_DIR`~~	`WS_EDITOR_ADDITIONAL_VS_EXTENSIONS_DIR`	v0.0.20	v0.1.0
~~`WS_PASSWORD`~~	`WS_AUTH_PASSWORD`	v0.0.20	v0.1.0
~~`WS_PASSWORD_HASHED`~~	`WS_AUTH_PASSWORD_HASHED`	v0.0.20	v0.1.0
~~`WS_PORT`~~	`WS_SERVER_PORT`	v0.0.20	v0.1.0
~~`WS_PROMPT_DISABLE_DOCKER`~~	`WS_TERMINAL_PROMPT_HIDE_DOCKER_CONTEXT`	v0.0.20	v0.1.0
~~`WS_PROMPT_DISABLE_HOSTNAME`~~	`WS_TERMINAL_PROMPT_HIDE_HOSTNAME`	v0.0.20	v0.1.0
~~`WS_PROMPT_DISABLE_KUBERNETES`~~	`WS_TERMINAL_PROMPT_HIDE_KUBERNETES_CONTEXT`	v0.0.20	v0.1.0
~~`WS_PROMPT_DISABLE_NODEJS`~~	`WS_TERMINAL_PROMPT_HIDE_NODEJS_VERSION`	v0.0.20	v0.1.0
~~`WS_PROMPT_DISABLE_PYTHON`~~	`WS_TERMINAL_PROMPT_HIDE_PYTHON_VERSION`	v0.0.20	v0.1.0
~~`WS_PROMPT_DISABLE_USER`~~	`WS_TERMINAL_PROMPT_HIDE_USER`	v0.0.20	v0.1.0
~~`WS_PROXY_DOMAIN`~~	`WS_SERVER_PROXY_DOMAIN`	v0.0.20	v0.1.0
~~`WS_ROOT`~~	`WS_SERVER_ROOT`	v0.0.20	v0.1.0
~~`WS_ZSH_EXTRA_PLUGINS`~~	`WS_ZSH_ADDITIONAL_PLUGINS`	v0.0.20	v0.1.0

Global Variables

ENV	Description	Read More
`EDITOR`	Default terminal editor (default: `code`)
`GIT_COMMITTER_NAME`	Name to be used in `~/.gitconfig`	→
`GIT_COMMITTER_EMAIL`	Email to be used in `~/.gitconfig`	→
`PAGER`	Default terminal pager (default: `less`)
`TZ`	Define the timezone

Configuration ​

APT ​

WS_APT_ADDITIONAL_GPG_KEYS

WS_APT_ADDITIONAL_INSECURE_GPG_KEYS

WS_APT_ADDITIONAL_PACKAGES

WS_APT_ADDITIONAL_REPOS

WS_APT_DISABLE_REPOS

WS_APT_UPDATE_CACHE

Auth ​

WS_AUTH_DISABLE_SUDO

WS_AUTH_PASSWORD

WS_AUTH_PASSWORD_FILE

WS_AUTH_PASSWORD_HASHED

WS_AUTH_PASSWORD_HASHED_FILE

Enterprise CA ​

WS_CA_ADDITIONAL_CERT_ENDPOINTS

WS_CA_ADDITIONAL_CERT_INSECURE_ENDPOINTS

Claude ​

WS_CLAUDE_STATUSLINE_DISABLE

WS_CLAUDE_STATUSLINE_HIDE_CONTEXT_BAR

WS_CLAUDE_STATUSLINE_HIDE_GIT

WS_CLAUDE_STATUSLINE_HIDE_LINES_CHANGED

WS_CLAUDE_STATUSLINE_HIDE_MODEL

WS_CLAUDE_STATUSLINE_SCRIPT

WS_CLAUDE_STATUSLINE_SHELL

Docker ​

WS_DOCKER_ENABLE_CLIENT

Editor ​

WS_EDITOR_ADDITIONAL_VS_EXTENSIONS

WS_EDITOR_ADDITIONAL_VS_EXTENSIONS_DIRDeprecated

WS_EDITOR_COMMENTS_DISABLE_FONT

WS_EDITOR_SCROLLBAR_SIZE

WS_EDITOR_SETTINGS_MERGE

WS_EDITOR_SETTINGS_MERGE_FILE

WS_EDITOR_SETTINGS_OVERRIDE

WS_EDITOR_SETTINGS_OVERRIDE_FILE

WS_EDITOR_TRUSTED_DOMAINS

Features ​

WS_FEATURES_ADDITIONAL_FEATURES

WS_FEATURES_DIR

WS_FEATURES_STORE_URL

Git ​

WS_GIT_CLEAR_NOTEBOOK_OUTPUT

WS_GIT_CLONE_REPO

WS_GIT_CREDENTIAL_CACHE_TIMEOUT

Helm ​

WS_HELM_PRELOAD_CACHE

Logging ​

WS_LOGGING_DIR

WS_LOGGING_DISABLE_CONSOLE_OUTPUT

WS_LOGGING_MAIN_FILE

Metrics ​

WS_METRICS_COLLECTORS

WS_METRICS_ENABLE

WS_METRICS_PORT

Secrets ​

WS_SECRETS_MASTER_KEY

WS_SECRETS_MASTER_KEY_FILE

WS_SECRETS_VAULT

Server ​

WS_SERVER_PORT

WS_SERVER_PROXY_DOMAIN

WS_SERVER_ROOT_DIR

WS_SERVER_SSL_CERT

WS_SERVER_SSL_HOSTS

WS_SERVER_SSL_KEY

Startup ​

WS_STARTUP_FAIL_ON_ERROR

Terminal ​

WS_TERMINAL_PROMPT_HIDE_DOCKER_CONTEXT

WS_TERMINAL_PROMPT_HIDE_HOSTNAME

WS_TERMINAL_PROMPT_HIDE_KUBERNETES_CONTEXT

WS_TERMINAL_PROMPT_HIDE_NODEJS_VERSION

WS_TERMINAL_PROMPT_HIDE_PYTHON_VERSION

WS_TERMINAL_PROMPT_HIDE_USER

Zsh ​

WS_ZSH_ADDITIONAL_PLUGINS

WS_ZSH_FZF_HISTORY_ARGS

WS_ZSH_FZF_HISTORY_BIND

WS_ZSH_FZF_HISTORY_DATES_IN_SEARCH

Configuration

APT

`WS_APT_ADDITIONAL_GPG_KEYS`

`WS_APT_ADDITIONAL_INSECURE_GPG_KEYS`

`WS_APT_ADDITIONAL_PACKAGES`

`WS_APT_ADDITIONAL_REPOS`

`WS_APT_DISABLE_REPOS`

`WS_APT_UPDATE_CACHE`

Auth

`WS_AUTH_DISABLE_SUDO`

`WS_AUTH_PASSWORD`

`WS_AUTH_PASSWORD_FILE`

`WS_AUTH_PASSWORD_HASHED`

`WS_AUTH_PASSWORD_HASHED_FILE`

Enterprise CA

`WS_CA_ADDITIONAL_CERT_ENDPOINTS`

`WS_CA_ADDITIONAL_CERT_INSECURE_ENDPOINTS`

Claude

`WS_CLAUDE_STATUSLINE_DISABLE`

`WS_CLAUDE_STATUSLINE_HIDE_CONTEXT_BAR`

`WS_CLAUDE_STATUSLINE_HIDE_GIT`

`WS_CLAUDE_STATUSLINE_HIDE_LINES_CHANGED`

`WS_CLAUDE_STATUSLINE_HIDE_MODEL`

`WS_CLAUDE_STATUSLINE_SCRIPT`

`WS_CLAUDE_STATUSLINE_SHELL`

Docker

`WS_DOCKER_ENABLE_CLIENT`

Editor

`WS_EDITOR_ADDITIONAL_VS_EXTENSIONS`

`WS_EDITOR_ADDITIONAL_VS_EXTENSIONS_DIR`Deprecated

`WS_EDITOR_COMMENTS_DISABLE_FONT`

`WS_EDITOR_SCROLLBAR_SIZE`

`WS_EDITOR_SETTINGS_MERGE`

`WS_EDITOR_SETTINGS_MERGE_FILE`

`WS_EDITOR_SETTINGS_OVERRIDE`

`WS_EDITOR_SETTINGS_OVERRIDE_FILE`

`WS_EDITOR_TRUSTED_DOMAINS`

Features

`WS_FEATURES_ADDITIONAL_FEATURES`

`WS_FEATURES_DIR`

`WS_FEATURES_STORE_URL`

Git

`WS_GIT_CLEAR_NOTEBOOK_OUTPUT`

`WS_GIT_CLONE_REPO`

`WS_GIT_CREDENTIAL_CACHE_TIMEOUT`

Helm

`WS_HELM_PRELOAD_CACHE`

Logging

`WS_LOGGING_DIR`

`WS_LOGGING_DISABLE_CONSOLE_OUTPUT`

`WS_LOGGING_MAIN_FILE`

Metrics

`WS_METRICS_COLLECTORS`

`WS_METRICS_ENABLE`

`WS_METRICS_PORT`

Secrets

`WS_SECRETS_MASTER_KEY`

`WS_SECRETS_MASTER_KEY_FILE`

`WS_SECRETS_VAULT`

Server

`WS_SERVER_PORT`

`WS_SERVER_PROXY_DOMAIN`

`WS_SERVER_ROOT_DIR`

`WS_SERVER_SSL_CERT`

`WS_SERVER_SSL_HOSTS`

`WS_SERVER_SSL_KEY`

Startup

`WS_STARTUP_FAIL_ON_ERROR`

Terminal

`WS_TERMINAL_PROMPT_HIDE_DOCKER_CONTEXT`

`WS_TERMINAL_PROMPT_HIDE_HOSTNAME`

`WS_TERMINAL_PROMPT_HIDE_KUBERNETES_CONTEXT`

`WS_TERMINAL_PROMPT_HIDE_NODEJS_VERSION`

`WS_TERMINAL_PROMPT_HIDE_PYTHON_VERSION`

`WS_TERMINAL_PROMPT_HIDE_USER`

Zsh

`WS_ZSH_ADDITIONAL_PLUGINS`

`WS_ZSH_FZF_HISTORY_ARGS`

`WS_ZSH_FZF_HISTORY_BIND`

`WS_ZSH_FZF_HISTORY_DATES_IN_SEARCH`