Environment variables

Kanade reads environment variables at daemon or desktop-supervisor startup. Prefer the Settings UI for normal workstation configuration; use env vars for automation, private deploys, and diagnostics.

Variable	Purpose
`KANADE_HOST` / `KANADE_PORT`	Daemon bind address and port. Installed desktop uses loopback and a sticky 8200-range port.
`KANADE_HOME`	Alternate home root for Claude/Kanade paths.
`KANADE_DATA_DIR`	Base data directory. Derives database, accounts, transcripts, and memory paths when specific vars are unset.
`KANADE_SPOOL`	Hook JSONL spool path.
`KANADE_DB`	SQLite chronicle path.
`KANADE_SKILLS_DIR`	Skill catalog root.
`KANADE_MEMORY_DIR`	Kanade-owned markdown memory storage.
`KANADE_MEMORY_ROOTS`	Comma-separated markdown roots to index.
`KANADE_DEFAULT_MEMORY_ROOTS`	Onboarding defaults for memory roots.
`KANADE_DISABLE_DEFAULT_MEMORY_ROOTS`	Set to `1` to disable default root guesses.
`KANADE_VAULT_ROOTS`	Local reveal allowlist for private vault paths.
`KANADE_BUG_REPORT_URL`	Optional issue-tracker URL surfaced in About/Settings.
`KANADE_GITHUB_ORG_ALLOWLIST`	Safe GitHub org names for issue/repo handoff links.
`KANADE_UPDATE_CHANNEL_URL`	Override signed Tauri updater manifest URL.
`KANADE_WEB_BUILD`	Static web build directory for an unbundled daemon.
`KANADE_VERSION_OVERRIDE` / `KANADE_GIT_SHA`	Diagnostic version overrides.
`KANADE_LM_URL` / `KANADE_LM_MODEL`	LM Studio/OpenAI-compatible voice endpoint.
`KANADE_OLLAMA_URL` / `KANADE_OLLAMA_MODEL`	Ollama-compatible voice endpoint.
`KANADE_VOICE_BACKEND`	`lmstudio` or `ollama`.
`KANADE_LM_TIMEOUT_S`	Voice endpoint timeout.
`KANADE_DREAM_CRON` / `KANADE_DREAM_QUIET_MINUTES`	Dream Review schedule and idle window.
`KANADE_FORGE_BACKEND_URL` / `KANADE_FORGE_BACKEND_AUTH`	Forge bridge backend and server-side auth.
`KANADE_FORGE_PROJECT`	Forge project slug used by mission bridge requests.
`KANADE_DISCORD_BRIDGE_SECRET`	HMAC secret for signed Discord ingress.
`KANADE_ALLOWED_REMOTE_ADDRS`	Remote address allowlist for non-loopback daemon requests.
`KANADE_SEND_TURN_TIMEOUT_S`	Provider turn timeout.
`KANADE_SSE_BATCH_MS`	Daemon SSE delta batching interval.
`KANADE_STDERR_BUFFER_BYTES`	Per-lane stderr buffer cap.
`KANADE_LIVE_USAGE_MAX_ACCOUNTS`	Live usage/account status cap.
`KANADE_PASTE_RETENTION_DAYS` / `KANADE_PASTE_MAX_BYTES`	Pasted artifact retention and size guard.
`KANADE_SHUTDOWN_TOKEN`	Desktop supervisor one-shot daemon shutdown secret.

Secrets belong in the environment, a local config file, or a secret manager, not in public docs, git, screenshots, or issue reports.