When deploying SafeLine WAF in a containerized environment (v7.4.0+), you can fine-tune behavior by setting specific environment variables for each service.
Here’s a quick guide for common variables across the SafeLine WAF components, so you don’t have to dig through docs mid-deployment.
safeline-mgt
| Variable Name |
Default Value |
Description |
| MGT_PG |
postgres://safeline-ce:${POSTGRES_PASSWORD}@safeline-pg/safeline-ce?sslmode=disable |
PostgreSQL connection string |
| LUIGI_HOST |
safeline-luigi |
Luigi service hostname |
| CHAOS_SERVE_ADDR |
http://safeline-chaos:9000 |
Dynamic protection service address |
| CHAOS_CHALLENGE_ADDR |
http://safeline-chaos:8080 |
Human verification fallback address |
| CHAOS_AUTH_ADDR |
http://safeline-chaos:8088 |
Authentication service address |
| FVM_HOST |
safeline-fvm |
FVM service hostname |
| DETECTOR_HOST |
safeline-detector |
Detector service address |
| WAITING_ROOM_API |
/app/sock/waiting.sock |
Waiting room API socket path |
safeline-tengine
| Variable Name |
Default Value |
Description |
| TCD_MGT_API |
https://${SUBNET_PREFIX}.4:1443/api/open/publish/server |
Management task callback URL |
| TCD_TASK_ADDRESS |
/app/sock/tcd_error.sock |
TCD listening socket |
| TCD_SNSERVER |
${SUBNET_PREFIX}.5 |
Detector IP |
| CHAOS_ADDR |
${SUBNET_PREFIX}.10 |
safeline-chaos container IP |
| WAITING_ROOM_SOCKET |
unix:/app/sock/waiting.sock:/ws/waiting |
Waiting room WebSocket address |
| WAITING_ROOM_QUERY |
unix:/app/sock/waiting.sock:/api/waiting/query |
Waiting room query endpoint |
safeline-detector
| Variable Name |
Default Value |
Description |
| MGT_HOST |
safeline-mgt |
Management service hostname |
safeline-fvm
| Variable Name |
Default Value |
Description |
| MGT_HOST |
safeline-mgt |
Management service hostname |
| DETECTOR_HOST |
safeline-detector |
Detector service address |
safeline-luigi
| Variable Name |
Default Value |
Description |
| DETECTOR_HOST |
safeline-detector |
Detector service address |
| MGT_IP |
${SUBNET_PREFIX}.4 |
Management service IP |
| LUIGI_PG |
postgres://safeline-ce:${POSTGRES_PASSWORD}@safeline-pg/safeline-ce?sslmode=disable |
PostgreSQL connection string |
safeline-chaos
| Variable Name |
Default Value |
Description |
| DB_ADDR |
postgres://safeline-ce:${POSTGRES_PASSWORD}@safeline-pg/safeline-ce?sslmode=disable |
PostgreSQL connection string |
Why This Matters
These variables are especially useful for customizing networking, service discovery, and integration points when deploying SafeLine in Kubernetes, Docker Compose, or other container orchestration platforms.
Knowing them means faster troubleshooting and smoother scaling.
Join the SafeLine Community
If you continue to experience issues, feel free to contact SafeLine support for further assistance.
Top comments (0)