Skip to content

docs(migration): Add the other v1.56.0 upgrade notes #775

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
groyoh merged 6 commits into from
Nov 3, 2026
Merged

docs(migration): Add the other v1.56.0 upgrade notes #775

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
2430dd7
docs(migration): Add the other v1.56.0 upgrade notes
groyoh Nov 2, 2026
6bb6601
docs(migration): Name the event timestamp variables
groyoh Nov 2, 2026
b29d2ba
docs(self-hosted): Document the v1.56.0 environment variables
groyoh Nov 2, 2026
be7528b
docs(migration): Add the front port change to v1.56.0
groyoh Nov 2, 2026
e491d91
docs(migration): Mark the front port step as self-hosted only
groyoh Nov 2, 2026
5c4e595
docs(migration): Remove the webhook alert worker from v1.56.0
groyoh Nov 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 11 additions & 1 deletion guide/lago-self-hosted/docker.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -113,6 +113,7 @@ application. You can override them to customize your setup.
| `FRONT_PORT` | 80 | Port the front-end application listens to |
| `GOOGLE_AUTH_CLIENT_ID` | | Client ID for Google auth Single Sign On |
| `GOOGLE_AUTH_CLIENT_SECRET` | | Client Secret for Google auth Single Sign On |
| `LAGO_API_PAGINATION_MAX_PAGE_SIZE` | 200 | Largest `per_page` accepted by the `/api/v1` list endpoints. A larger value is rejected with a `422`. An organization can set its own limit with `pagination_max_page_size`. See [Migration to v1.56.0](/guide/migration/migration-to-v1.56.0) |
| `LAGO_API_URL` | [http://localhost:3000](http://localhost:3000) | URL of the Lago back-end application |
| `LAGO_AWS_S3_ACCESS_KEY_ID` | azerty123456 | AWS Access Key id that has access to S3 |
| `LAGO_AWS_S3_BUCKET` | bucket | AWS S3 Bucket name |
Expand All @@ -137,15 +138,21 @@ application. You can override them to customize your setup.
| `LAGO_ENCRYPTION_DETERMINISTIC_KEY` | your-encryption-deterministic-key | Encryption deterministic key used to secure sensitive values stored in the database |
| `LAGO_ENCRYPTION_KEY_DERIVATION_SALT` | your-encryption-derivation-salt | Encryption key salt used to secure sensitive values stored in the database |
| `LAGO_ENCRYPTION_PRIMARY_KEY` | your-encryption-primary-key | Encryption primary key used to secure sensitive values stored in the database |
| `LAGO_FRONT_URL` | [http://localhost](http://localhost) | URL of the Lago front-end application. Used for CORS configuration |
| `LAGO_EVENTS_MAX_FUTURE_HOURS` | | Rejects events with a `timestamp` more than this number of hours in the future. Not set: no limit |
| `LAGO_EVENTS_MAX_PAST_DAYS` | | Rejects events with a `timestamp` more than this number of days in the past. Not set: no limit |
| `LAGO_FRONT_URL` | [http://localhost](http://localhost) | URL of the Lago front-end application. Used for CORS configuration and to check the origin of WebSocket connections |
| `LAGO_GCS_BUCKET` | | GCS Bucket Name |
| `LAGO_GCS_CREDENTIALS` | | GCS Credentials JSON file path |
| `LAGO_GCS_GSA_EMAIL` | | GCS GSA Email |
| `LAGO_GCS_IAM` | false | GCS IAM Authentication |
| `LAGO_GCS_PROJECT` | | GCS Project name |
| `LAGO_GRAPHQL_INTROSPECTION_ENABLED` | false | Lets clients read the GraphQL schema (`__schema` and `__type` queries) in production |
| `LAGO_LEGACY_DOCUMENT_URLS_EXPIRE_AT` | | Date (for example `2027-01-31`, read as UTC) after which the document links generated before v1.56.0 return a `410`. Not set: these links never expire. An invalid date stops the API from starting. See [Migration to v1.56.0](/guide/migration/migration-to-v1.56.0) |
| `LAGO_MEMCACHE_SERVERS` | | Comma-separated list of memcache servers |
| `LAGO_PDF_URL` | [http://pdf:3000](http://pdf:3000) | PDF Service URL on your infrastructure |
| `LAGO_RAILS_STDOUT` | true | Set to true to activate logs on containers |
| `LAGO_REDIS_CABLE_PASSWORD` | | Password of `LAGO_REDIS_CABLE_URL`. Only used when that URL is set |
| `LAGO_REDIS_CABLE_URL` | `REDIS_URL` | Redis used by the WebSocket connections (Action Cable) |
| `LAGO_REDIS_CACHE_HOST` | redis | Host name of the redis cache server. See [Configuring Redis](#configuring-redis). |
| `LAGO_REDIS_CACHE_MASTER_NAME` | master | Name of the Redis Sentinel master instance. Only used when `LAGO_REDIS_CACHE_SENTINELS` is set. See [Configuring Redis](#configuring-redis). |
| `LAGO_REDIS_CACHE_PASSWORD` | | Password of the redis cache server. See [Configuring Redis](#configuring-redis). |
Expand All @@ -154,8 +161,11 @@ application. You can override them to customize your setup.
| `LAGO_REDIS_CACHE_SENTINELS` | | Comma-separated list of [Redis **Sentinel**](https://redis.io/docs/latest/operate/oss_and_stack/management/sentinel/) addresses for Redis cache high availability (e.g., `sentinel-1:26379,sentinel-2:26379,sentinel-3:26379`). Only applies to the cache, not Sidekiq |
| `LAGO_REDIS_SIDEKIQ_MASTER_NAME` | master | Name of the Redis Sentinel master instance. Only used when `LAGO_REDIS_SIDEKIQ_SENTINELS` is set. See [Configuring Redis](#configuring-redis). |
| `LAGO_REDIS_SIDEKIQ_SENTINELS` | | Comma-separated list of [Redis Sentinel](https://redis.io/docs/latest/operate/oss_and_stack/management/sentinel/) addresses for Sidekiq high availability (e.g., `sentinel-1:26379,sentinel-2:26379,sentinel-3:26379`). Only applies to Sidekiq, not the cache |
| `LAGO_REDIS_THROTTLING_PASSWORD` | | Password of `LAGO_REDIS_THROTTLING_URL`. Only used when that URL is set |
| `LAGO_REDIS_THROTTLING_URL` | `REDIS_URL` | Redis used for the login attempt counters |
| `LAGO_RSA_PRIVATE_KEY` | | Private key used for webhook signatures |
| `LAGO_SIDEKIQ_WEB` | | Activate the Sidekiq web UI, disabled by default |
| `LAGO_TRUSTED_PROXIES` | | Comma-separated IP addresses or CIDR ranges of reverse proxies with a public address, so the login limits see the client IP. Proxies on private addresses are trusted by default. An invalid entry stops the API from starting. See [Migration to v1.56.0](/guide/migration/migration-to-v1.56.0) |
| `LAGO_USE_AWS_S3` | false | Use AWS S3 for files storage |
| `LAGO_USE_GCS` | false | Use Google Cloud Service Cloud Storage for file storage, ⚠️ If you want to use GCS, you have to pass the credentials json key file to the api and worker service |
| `LAGO_WEBHOOK_ALLOW_PRIVATE_URLS` | false | Allow webhook endpoints, and the Okta and Entra ID hosts, to resolve to private, loopback or link-local addresses. See [Migration to v1.54.0](/guide/migration/migration-to-v1.54.0) |
Expand Down
Loading
Loading