Configuration Reference

This page covers the host package configuration that a Laravel app may need to set directly. Install-facing setup lives in the install guide; this page is for maintainers checking env vars, published config, disks, logs, and panel wiring.

Publishable Config

Capell host packages publish config by package tag:

php artisan vendor:publish --tag=capell-core-config
php artisan vendor:publish --tag=capell-admin-config
php artisan vendor:publish --tag=capell-frontend-config

Installer and Marketplace config are loaded from their packages. Publish or override them only when the app has a real deployment reason to do so.

Application Baseline

Variable	Default	Used for
`APP_URL`	`http://localhost` in Laravel	Default site URL, install prompts, generated callbacks, Marketplace webhook fallback
`APP_KEY`	(empty until generated)	Laravel encryption, signed URLs, cookies, and sessions
`APP_ENV`	Laravel app default	Runtime environment; live public domains should normally use `production`
`APP_DEBUG`	Laravel app default	Exception rendering; must be `false` before public traffic
`CACHE_STORE`	Laravel app default	Cache backend for runtime state, package flows, locks, and database-backed diagnostics
`QUEUE_CONNECTION`	`sync` in a fresh Laravel app	Background jobs and package workflows; production installs should normally use `database` or `redis`
`SESSION_DRIVER`	Laravel app default	Session persistence for admins and authenticated users
`LOG_LEVEL`	Laravel default	Capell log channel level when the app adds the recommended `capell` channel

Core Config

Source: packages/core/config/capell.php

Variable	Default	Used for
`CAPELL_SKIP_TWO_FACTOR_WHEN_LOCAL`	`true`	Sets `capell.auth.skip_two_factor_when_local`; consumers may skip 2FA only when the application environment is `local`. Set to `false` to exercise local 2FA.
`CAPELL_VERSION`	(null)	Optional Capell version override for Marketplace health reports
`CAPELL_RUNTIME_ROLE`	`combined`	Immutable process composition: `combined`, `public`, or `authoring`; see Runtime roles
`CAPELL_CACHE_PATH`	`bootstrap/cache/capell`	Directory used for Capell component cache files
`CAPELL_CACHE_TTL`	`60`	Default TTL in seconds for Capell’s general cache helpers
`CAPELL_CACHE_LOCK_SECONDS`	`30`	Lifetime in seconds of the lock Capell holds while filling a cache entry, preventing stampedes
`CAPELL_CACHE_LOCK_WAIT_SECONDS`	`10`	How long a request waits for another process to finish filling the same cache entry before failing
`CAPELL_MULTI_NODE`	`false`	Declare a multi-node deployment so Doctor requires a shared cache store
`CAPELL_RELEASE_ROOT_MODE`	`mutable`	`mutable` permits guarded release-root writes; `immutable` and `atomic` require Composer and migration publication during the release build
`CAPELL_SERVER_SIDE_TOOLING`	`false`	Declare that this server installs extensions and builds assets itself, so Doctor requires Composer, Node, and `proc_open`
`CAPELL_PHP_BINARY`	(null)	CLI PHP binary used for every Capell subprocess; falls back to `CAPELL_SETUP_PHP_BINARY`, then `PHP_BINARY`, then the executable search path
`CAPELL_COMPOSER_BINARY`	(null)	Composer binary, `composer.phar`, or wrapper script used for every Capell subprocess; falls back to `CAPELL_SETUP_COMPOSER_BINARY`, then the executable search path
`CAPELL_COMPOSER_TIMEOUT_SECONDS`	`600`	How long one Composer run may take; the Marketplace install job timeout is this plus the buffer below, and the queue `retry_after` must exceed that total
`CAPELL_COMPOSER_JOB_TIMEOUT_BUFFER_SECONDS`	`120`	Extra time the Marketplace install job keeps after Composer returns, for finalizing the attempt and recording telemetry
`CAPELL_COMPOSER_NO_CACHE`	`false`	Run Composer with `--no-cache`, re-downloading every dependency on every install; leave off unless a shared cache cannot be trusted
`CAPELL_COMPOSER_CACHE_DIR`	`storage/framework/composer/cache`	Where Composer keeps its download cache for Capell-run installs
`CAPELL_COMPOSER_MEMORY_LIMIT`	`-1`	Value passed to Composer as `COMPOSER_MEMORY_LIMIT`
`CAPELL_ASSETS_DISK`	`local`	Filesystem disk checked by Capell Doctor for writable asset storage
`CAPELL_SITEMAP_MAX_URLS_PER_FILE`	`50000`	Maximum URLs per generated sitemap file
`CAPELL_SITEMAP_XML_PATH`	`/sitemap-xml`	Public path used for sitemap index entries
`CAPELL_STATIC_SITE_INTERNAL_REQUESTS`	`false`	Allows static-site generation to use internal request handling
`CAPELL_BLAZE_ENABLED`	`BLAZE_ENABLED`, then `true`	Enables Blaze support where installed
`BLAZE_DEBUG`	`false`	Enables Blaze debug behaviour
`CAPELL_BLAZE_THROW`	`false`	Throws during Blaze candidate auditing
`CAPELL_DISABLE_CACHE`	`false`	Disables Capell’s general cache layer; set to `true` only for explicit uncached operation
`CAPELL_ANALYTICS_COLLECTION_ENABLED`	`true`	Collects public page-view activity; when `false`, the beacon script is not injected and the collection endpoint discards hits
`CAPELL_ANALYTICS_SEARCH_COLLECTION_ENABLED`	`false`	Permits recording normalized, filtered on-site search terms; opt-in, and inert until a package calls the recording Action
`CAPELL_ANALYTICS_ACTIVITY_RETENTION_DAYS`	`1`	Age, clamped to 1–7, after which raw activity rows are pruned by the daily `capell:activity:prune` schedule
`CAPELL_ANALYTICS_VISITOR_RETENTION_DAYS`	`30`	Age, clamped to 14–400, after which visitor-day markers are pruned by the daily `capell:activity:prune-visitors` schedule
`CAPELL_ANALYTICS_RATE_LIMIT_PER_MINUTE`	`30`	Per-IP limit on the activity collection endpoint; requests over the limit are dropped silently with a `204`
`CAPELL_DISABLE_CACHE_SAVE_KEYS`	`[]`	Cache keys or patterns that should not be saved
`CAPELL_RELATIONSHIP_DIAGNOSTICS`	`false`	Enables extra relationship diagnostics for page URL/site-domain checks
`CAPELL_WORKSPACES_PRUNE_SCHEDULE`	`false`	Enables the publishing workspace prune schedule
`CAPELL_WORKSPACES_PRUNE_CRON`	`15 3 * * *`	Cron expression for workspace pruning
`CAPELL_WORKSPACE_PREVIEW_HOME_ROUTE`	`capell-frontend.home`	Route used for workspace home previews
`CAPELL_WORKSPACE_NOTIFICATIONS`	`true`	Enables workspace state-change notifications
`CAPELL_RELEASE_WINDOWS`	`false`	Enforces configured release windows during publishing
`CAPELL_RELEASE_WINDOWS_TZ`	`UTC`	Timezone used for release windows
`CAPELL_PLUGINS_SOURCE_URL`	`https://plugin.capell.app/packages.json`	Legacy plugin source URL
`CAPELL_PLUGINS_CACHE_TTL`	`3600`	Legacy plugin cache TTL in seconds
`CAPELL_PLUGINS_RETRY_TIMES`	`3`	Maximum attempts for the idempotent plugin catalogue read
`CAPELL_PLUGINS_RETRY_DELAY_MS`	`500`	Base delay in milliseconds between plugin catalogue read attempts
`CAPELL_PLUGINS_RETRY_AFTER_MAX_MS`	`60000`	Maximum accepted Retry-After delay in milliseconds for plugin catalogue reads
`CAPELL_MARKETPLACE_READ_RETRY_TIMES`	`3`	Maximum attempts for idempotent Marketplace catalogue and extension reads
`CAPELL_MARKETPLACE_READ_RETRY_DELAY_MS`	`500`	Base delay in milliseconds between Marketplace read attempts
`CAPELL_MARKETPLACE_READ_RETRY_AFTER_MAX_MS`	`60000`	Maximum accepted Retry-After delay in milliseconds for Marketplace reads
`CAPELL_MEDIA_BACKEND`	`spatie`	Media backend resolver key, such as `spatie` or `curator`
`CAPELL_SUPER_ADMIN_ROLE`	`super_admin`	Role name used for the highest admin role
`CAPELL_ADMIN_ROLE`	`admin`	Role name used for admin users
`CAPELL_EDITOR_ROLE`	`editor`	Role name used for editor users
`CAPELL_DEVELOPER_ROLE`	`developer`	Role name used by developer-focused admin widgets
`CAPELL_INSTALL_DEBUG`	`false`	Logs installer events for support debugging
`CAPELL_INSTALL_DEBUG_PACKAGE_SELECTION`	`false`	Logs installer package-selection mode, prompt defaults, and selected packages for support debugging
`CAPELL_INSTALL_WELCOME_ROUTES_WEB_PATH`	`routes/web.php`	Routes file patched when the installer toggles the welcome route
`CAPELL_INSTALL_WELCOME_ENV_PATH`	`.env`	Env file patched when the installer toggles the welcome route
`CAPELL_INSTALL_MODE`	(null)	Enables `capell:cloud-bootstrap` when set to `cloud`
`CAPELL_CLOUD_REGISTRATION_URL`	(null)	Capell Cloud registration endpoint used by `capell:cloud-bootstrap`
`CAPELL_REGISTRATION_TOKEN`	(null)	Secret token for Capell Cloud registration
`CAPELL_SITE_URL`	(null)	Public site URL assigned by the cloud host; never falls back to `APP_URL`
`CAPELL_INSTALL_PACKAGES`	(empty)	Comma-separated package list for cloud bootstrap installs
`CAPELL_INSTALL_THEME`	`default`	Theme key used by cloud bootstrap installs
`CAPELL_ADMIN_NAME`	`Admin`	Bootstrap admin name fallback when cloud credentials omit a name
`CAPELL_ADMIN_EMAIL`	(empty)	Bootstrap admin email fallback when cloud credentials omit an email
`CAPELL_LOCKDOWN_FILE`	`storage/framework/capell-lockdown.json`	Lockdown state file path
`CAPELL_LOCKDOWN_USER_IDS`	(empty)	Comma-separated user IDs allowed to bypass Lockdown
`CAPELL_LOCKDOWN_EMAILS`	(empty)	Comma-separated user emails allowed to bypass Lockdown
`CAPELL_DEVELOPER_PAGE`	`true`	Shows the developer dashboard page
`CAPELL_SYSTEM_HEALTH_PAGE`	`true`	Shows the system health dashboard page
`CAPELL_DEVELOPER_TOOLS_PHP_WRITES`	`local_only`	Controls developer tooling PHP file writes
`CAPELL_DEVELOPER_TOOLS_DATABASE_WRITES`	`local_only`	Controls developer tooling database writes
`CAPELL_DEVELOPER_TOOLS_READONLY_PREVIEW`	`true`	Keeps developer tooling previews read-only
`CAPELL_DEVELOPER_TOOLS_EDITOR_URL_TEMPLATE`	(null)	Editor URL template for opening local files

The three activity-collection env vars above are read only when the Capell Admin package is absent. With Admin present — the normal case — Admin’s own Settings → Dashboard values (analytics_collection_enabled, analytics_search_collection_enabled, analytics_activity_retention_days) take over instead, and the env vars are silently ignored. If the settings table is unreadable, Admin falls back to its own field defaults, not to these env vars. Configure activity collection through Admin in a normal install; the env vars exist for Admin-less or headless deployments. CAPELL_ANALYTICS_RATE_LIMIT_PER_MINUTE has no Admin equivalent and is always read from config.

Search-term recording is opt-in and currently has no built-in caller: enabling CAPELL_ANALYTICS_SEARCH_COLLECTION_ENABLED (or the Admin equivalent) does nothing on its own until a package records searches through RecordSearchActivityAction. When it does, the term is lowercased, whitespace-collapsed, and dropped if empty, over 160 characters, or the entire term matches an email, URL, or phone-number pattern — a query only containing an address, such as a bare email, is filtered; the same address inside a longer sentence is not.

Raw activity rows are pruned daily by capell:activity:prune, scheduled at 00:35 UTC. CAPELL_ANALYTICS_ACTIVITY_RETENTION_DAYS (or its Admin equivalent) is clamped to 1–7 regardless of what is configured.

Visitor-day markers are separate rows with their own schedule, capell:activity:prune-visitors at 00:45 UTC, and their own window: CAPELL_ANALYTICS_VISITOR_RETENTION_DAYS is clamped to 14–400 and has no Admin settings equivalent. The floor of 14 is deliberate — the dashboard compares the last seven days against the seven before them, and a multi-day visitor count cannot be rebuilt from daily rollups once the rows are gone. Each marker is a truncated HMAC of site, address and user agent, salted with the application key and the UTC day; the daily rotation means the same person is unlinkable across days, so a multi-day figure counts a returning visitor once per day.

CAPELL_DISABLE_CACHE_SAVE_KEYS accepts exact keys, wildcard patterns, or regex patterns:

CAPELL_DISABLE_CACHE_SAVE_KEYS=page-*,/^user-\d+$/,my-key

Source: packages/core/config/redirects.php

Variable	Default	Used for
`CAPELL_REDIRECTS_AUTO_ENABLED`	`true`	Enables automatic redirect behaviour

Admin Config

Source: packages/admin/config/capell-admin.php

Variable	Default	Used for
`CAPELL_ADMIN_PATH`	`admin`	Filament panel path and admin-owned route prefix
`CAPELL_ADMIN_DOMAIN`	(null)	Optional host restriction for admin panel and admin-owned routes
`CAPELL_AUTO_CLEAR_CACHE`	`true`	Clears relevant caches after admin writes
`CAPELL_AUTO_REFRESH_CACHE`	`false`	Refreshes page cache after admin writes where supported
`CAPELL_ADMIN_SECURITY_HEADERS_ENABLED`	`true`	Adds admin response security headers
`CAPELL_AUTO_TRANSLATE_LANGUAGE_TEXT`	`true`	Shows the auto-translate action on language repeater tabs
`CAPELL_SHOW_CONFIGURATOR_TYPE_HINT`	`false`	Allows developer-only configurator class path hints in blueprint selectors when the admin setting also enables them
`CAPELL_LAYOUT_BUILDER_DEFAULT_EDITOR_MODE`	`content_first`	Default Layout Builder editor mode
`CAPELL_LAYOUT_BUILDER_PREVIEW_MATCH_FRONTEND_CONTAINER_LAYOUT`	`true`	Keeps admin layout previews aligned with frontend container behaviour
`CAPELL_UPDATE_DANGER_THRESHOLD`	`3`	Version-behind count treated as dangerous in upgrade notices
`CAPELL_UPDATE_API_ENABLED`	`true`	Enables update checks against the Capell update API
`CAPELL_UPDATE_API_URL`	`https://capell.app/api/updates/check`	Update API endpoint
`CAPELL_UPDATE_API_TIMEOUT_SECONDS`	`10`	Update API timeout
`CAPELL_UPDATE_API_ENFORCE_HTTPS`	`true`	Requires HTTPS for update API calls
`CAPELL_UPDATE_NOTIFICATIONS_ENABLED`	`true`	Enables scheduled upgrade summary notifications
`CAPELL_UPDATE_NOTIFICATION_FREQUENCY`	`weekly`	Schedule frequency for upgrade summary notifications
`CAPELL_UPDATE_NOTIFICATION_EMAILS`	(empty)	Comma-separated email recipients for upgrade summaries
`CAPELL_EXTENSIONS_COMPOSER_DRIFT_AUTO_FIX`	`false`	Allows all-package Composer drift repair through `capell:extensions:repair-composer-drift --all`; dashboard reads never run Composer

Use the shared admin entrypoint helper when configuring Filament:

use Capell\Admin\Support\AdminPanelEntrypoint;

return $panel
    ->domain(AdminPanelEntrypoint::domain())
    ->path(AdminPanelEntrypoint::path());

See Admin domain and path for path-only and subdomain examples.

Frontend Config

Source: packages/frontend/config/capell-frontend.php

Variable	Default	Used for
`CAPELL_FRONTEND_LAYOUT_FILE`	`capell::app`	Default Blade layout for frontend page rendering
`CAPELL_FRONTEND_CONTAINER_WIDTH_DEFAULT`	(null)	Default layout container width key when the layout has no override
`CAPELL_FRONTEND_PUBLIC_AGGRESSIVE_PREFETCH`	`false`	Enables Laravel Vite aggressive prefetching for public assets
`CAPELL_FRONTEND_STYLESHEET_RECOVERY_ENABLED`	`true`	Enables stable fallback and bounded retry for failed critical stylesheets
`CAPELL_FRONTEND_STYLESHEET_FALLBACK_URL`	`/vendor/capell-frontend/capell-frontend.css`	Stable local stylesheet used while the intended asset is unavailable
`CAPELL_FRONTEND_STYLESHEET_RECOVERY_RUNTIME_URL`	`/vendor/capell-frontend/stylesheet-recovery.js`	Stable local URL for the recovery runtime
`CAPELL_HTML_CACHE`	`true`	Enables static HTML cache reads
`CAPELL_WRITE_HTML_CACHE`	`true`	Allows static HTML cache writes
`CAPELL_PUBLIC_RENDER_DATA_CACHE`	`true`	Caches hydrated public render payloads
`CAPELL_MINIFY_HTML`	`true`	Minifies rendered HTML before returning or caching
`CAPELL_MODEL_EVENT_REGISTRATION_MODE`	`deferred`	Cache event tracking mode: `sync`, `deferred`, or `async`
`CAPELL_FRONTEND_REGISTER_HOME_ROUTE`	`false`	Registers `/` to the Capell frontend controller
`CAPELL_FRONTEND_USE_SITE_DOMAIN_FOR_URLS`	`false`	Rewrites generated frontend URLs to the resolved site domain
`CAPELL_THROW_ON_NO_SITES`	`false`	Throws instead of returning 404 when no sites exist
`CAPELL_AUTO_CREATE_SYSTEM_PAGES`	`true`	Auto-creates missing system pages when resolving fallback pages
`CAPELL_FRONTEND_DEFAULT_SCHEME`	(null)	Optional forced scheme for generated frontend URLs, such as `https`
`CAPELL_SITE_BASE_URL`	(null)	Base URL override for generated site URLs
`CAPELL_FRONTEND_PURGE_QUEUE`	`default`	Queue used for CDN purge jobs
`CAPELL_FRONTEND_CDN_PROVIDER`	(null)	CDN purge provider: `cloudflare`, `fastly`, or `varnish`
`CAPELL_FRONTEND_CLOUDFLARE_PURGE_TOKEN`	(null)	Cloudflare API token for tag purges
`CAPELL_FRONTEND_CLOUDFLARE_ZONE_ID`	(null)	Cloudflare zone ID for tag purges
`CAPELL_FRONTEND_FASTLY_API_KEY`	(null)	Fastly API key for surrogate-key purges
`CAPELL_FRONTEND_VARNISH_URL`	(null)	Varnish endpoint used for BAN requests
`CAPELL_DEBUG_LOG`	`false`	Adds frontend resolution debug logging
`CAPELL_FRONTEND_STATIC_ARTIFACTS_PATH`	(null)	Override directory for `capell:generate-html` output; defaults to storage
`CAPELL_ERROR_PAGE_MANIFEST_DIRECTORY`	(null)	Directory for the generated error-page manifests; defaults to `storage/framework`
`CAPELL_FRONTEND_TAILWIND_OUTPUT_CSS`	`resources/css/capell/frontend.css`	Path the generated frontend Tailwind stylesheet is written to
`CAPELL_FRONTEND_EXTERNAL_INTEGRITY_POLICY`	`warn`	Subresource-integrity policy for external assets: `off`, `warn`, or `require`
`CAPELL_CACHE_INVALIDATION_GRAPH_MAX_DEPTH`	`20`	Maximum traversal depth when resolving which cache entries a change invalidates
`CAPELL_CACHE_INVALIDATION_GRAPH_MAX_NODES`	`5000`	Safety bound on nodes visited during cache-invalidation traversal
`CAPELL_CACHE_INVALIDATION_GRAPH_MAX_EDGES`	`10000`	Safety bound on edges walked during cache-invalidation traversal
`CAPELL_FRONTEND_PUBLIC_VIEW_QUERY_GUARD_ENABLED`	`true`	Detects database queries executed from public Blade views
`CAPELL_FRONTEND_PUBLIC_VIEW_QUERY_GUARD_MODE`	`exception`	Guard reaction: `exception` to fail loudly, or `log` to record and continue
`CAPELL_FRONTEND_PUBLIC_VIEW_QUERY_GUARD_DOCS_URL`	(docs.capell.app symptom table)	Help URL embedded in the guard’s error message
`CAPELL_FRONTEND_PUBLIC_RENDER_CONTRACT_RECORD_PASSED`	`false`	Records passing public render-contract checks as events
`CAPELL_FRONTEND_PUBLIC_RENDER_CONTRACT_RECORD_FAILED`	`true`	Records failing public render-contract checks as events

The public view query guard is a development safeguard: queries belong in the render pipeline, not in Blade. Set CAPELL_FRONTEND_PUBLIC_VIEW_QUERY_GUARD_MODE=log in production if you would rather record violations than return an error page. Any value other than log is treated as exception.

HTML content rendering is sanitized by RenderHtmlContentAction; Blade directives are not evaluated. Allow only attributes that are safe for public CMS output through capell-frontend.html_content_allowed_attributes. See packages/frontend/docs/security.md.

Installer Config

Source: packages/installer/config/capell-installer.php

Variable	Default	Used for
`CAPELL_SETUP_ALLOW_REINSTALL`	`APP_DEBUG`, then `false`	Allows the browser installer to run again after install
`CAPELL_SETUP_COMPOSER_BINARY`	`composer`	Composer binary used by the browser installer
`CAPELL_SETUP_PHP_BINARY`	`php`	CLI PHP binary used for fresh Artisan processes
`CAPELL_SETUP_DEFAULT_PACKAGES`	`capell-app/filamentors`	Optional packages preselected in the browser installer
`CAPELL_SETUP_ADMIN_NAME`	(empty)	First admin name prefilled in the browser installer
`CAPELL_SETUP_ADMIN_EMAIL`	(empty)	First admin email prefilled in the browser installer
`CAPELL_SETUP_ADMIN_PASSWORD`	(empty)	First admin plaintext password input; hashed on create

Set CAPELL_SETUP_PHP_BINARY when the web SAPI sees PHP_BINARY as php-fpm or another non-CLI executable.

For a local demo install, set the admin defaults as plaintext form values:

CAPELL_SETUP_ADMIN_NAME="Demo Admin"
CAPELL_SETUP_ADMIN_EMAIL=[email protected]
CAPELL_SETUP_ADMIN_PASSWORD=password123

CAPELL_SETUP_ADMIN_PASSWORD is not encrypted in .env and should not be pre-hashed. Capell passes it through the setup flow as the login password, then Laravel hashes it before saving the admin user.

Marketplace Config

Source: packages/marketplace/config/capell-marketplace.php

Variable	Default	Used for
`CAPELL_MARKETPLACE_ENABLED`	`true`	Enables Marketplace integration
`CAPELL_INSTANCE_ID`	(null)	Existing Marketplace instance ID
`CAPELL_MARKETPLACE_URL`	`https://capell.app/api/v1`	Marketplace API base URL
`CAPELL_MARKETPLACE_WEB_URL`	`https://capell.app`	Public Marketplace web URL
`capell-marketplace.marketplace.timeout_seconds`	`10`	Marketplace API request timeout
`capell-marketplace.marketplace.telemetry_timeout_seconds`	`3`	Marketplace telemetry request timeout
`capell-marketplace.marketplace.cache_ttl_seconds`	`300`	Fresh Marketplace response cache TTL
`capell-marketplace.marketplace.stale_cache_ttl_seconds`	`3600`	Stale Marketplace response cache TTL
`capell-marketplace.marketplace.warm_throttle_seconds`	`60`	Minimum seconds between catalogue cache warm runs
`CAPELL_MARKETPLACE_CATALOGUE_PAGE_LIMIT`	`3`	Page limit for catalogue fetches
`CAPELL_MARKETPLACE_WEBHOOK_URL`	(null)	Explicit public callback URL for Marketplace events
`CAPELL_MARKETPLACE_WEBHOOK_SECRET`	(null)	Shared secret for Marketplace webhook verification
`CAPELL_MARKETPLACE_TROUBLESHOOTING_URL`	`https://docs.capell.app/extensions/marketplace-heartbeat`	Help URL shown in Marketplace diagnostics
`CAPELL_MARKETPLACE_QUEUE_CONNECTION`	`database`	Queue connection Marketplace install jobs are sent to
`CAPELL_MARKETPLACE_HTTP_PROXY`	(null)	Proxy URL applied to every outbound marketplace call
`CAPELL_MARKETPLACE_HTTP_VERIFY`	(null)	Path to a CA bundle, or `false`, for every outbound marketplace call
`CAPELL_MARKETPLACE_QUEUE`	`capell-marketplace`	Named queue Marketplace install jobs are sent to
`CAPELL_MARKETPLACE_QUEUED_STALE_AFTER_SECONDS`	`120`	How long an install may sit queued before Capell reports that nothing is consuming the queue
`CAPELL_MARKETPLACE_WORKER_HEARTBEAT_STALE_AFTER_SECONDS`	`300`	How long a recorded worker heartbeat still counts as evidence a worker is running
`CAPELL_MARKETPLACE_HEALTH_HTTP_PROBE`	`true`	Whether the post-install health check also requests the site’s own homepage
`CAPELL_MARKETPLACE_HEALTH_HTTP_TIMEOUT_SECONDS`	`5`	Timeout for that homepage request
`CAPELL_MARKETPLACE_HEARTBEAT_SCHEDULED`	`true`	Whether the scheduled Marketplace heartbeat runs
`CAPELL_MARKETPLACE_HEARTBEAT_AT`	`02:40`	Local scheduler time for the Marketplace heartbeat
`CAPELL_MARKETPLACE_AUTO_UPDATE_SCHEDULED`	`false`	Whether unattended Marketplace updates are scheduled
`CAPELL_MARKETPLACE_AUTO_UPDATE_AT`	`03:20`	Local scheduler time for unattended Marketplace updates

Marketplace installs do not use QUEUE_CONNECTION. They are pinned to CAPELL_MARKETPLACE_QUEUE_CONNECTION (default database) and the named queue capell-marketplace. A worker started as plain php artisan queue:work consumes the default queue and will never pick these jobs up — the admin UI stays at “queued” with no error. Run a worker that names the queue, and allow enough time for Composer:

php artisan queue:work database --queue=capell-marketplace --timeout=900

If you set this connection to sync, the Composer install runs inside the web request and will be killed by max_execution_time. Keep it on a real queue connection.

After every package change, Capell runs a health check before it calls the operation a success, and rolls composer.json, composer.lock and vendor/ back to how they were if that check refuses the site. The primary probe boots a fresh PHP process — it needs no web server and no publicly reachable hostname, and it checks bootstrap and autoload state rather than that something answers on a port. CAPELL_MARKETPLACE_HEALTH_HTTP_PROBE controls only the secondary request to your own homepage; turning it off loses a confirmation but can never turn a failure into a pass, because a probe that cannot connect already skips rather than failing. A site that is not reachable from inside itself — behind a load balancer, or in a container — is a normal deployment, not a broken one.

Only override CAPELL_MARKETPLACE_URL for staging or self-hosted Marketplace APIs. If Marketplace reports that api/registration-sessions cannot be found, the app is probably using an old unversioned API URL.

Security-Relevant Keys Without Env Vars

These change what anonymous visitors can reach, or what protections apply. None has an env var, so they are only settable by publishing the config file — and easy to miss.

Config key	Default	Effect
`capell-admin.security_headers.headers`	`X-Content-Type-Options: nosniff`, `Referrer-Policy: strict-origin-when-cross-origin`, `Permissions-Policy: camera=(), microphone=(), geolocation=()`, `X-Frame-Options: SAMEORIGIN`	Literal header map stamped on every admin response. Publishing replaces the whole map, so add a CSP or change the frame policy here. Only the `enabled` flag has an env var.
`capell-frontend.fallback_public_views.view_names`	`[]`	Allowlist of full Blade view names an unresolved public path may render
`capell-frontend.fallback_public_views.prefixes`	`['pages']`	Permitted leading view segments for fallback views. Widening this exposes more application templates to anonymous visitors.
`capell-frontend.route.reserved_domains`	`[]`	Hosts the frontend catch-all must never serve. The admin domain is reserved automatically.
`capell-frontend.route.reserved_prefixes`	`[]`	Path prefixes excluded from frontend catch-all routing
`capell-frontend.route.reserved_exact_paths`	`[]`	Exact paths excluded from frontend catch-all routing
`capell-frontend.route.url_regex`	negative-lookahead regex	Decides which URLs the frontend catch-all claims. Excludes admin, api, livewire, storage, and asset extensions; allows `.html`.
`capell-frontend.public_view_query_guard.ignored_connections`	`[]`	Connections exempt from the public-render query guard. Adding one silently disables leak detection for it.
`capell-frontend.public_html_authoring_markers`	`[]`	Extra substrings treated as unsafe authoring markers when inspecting public HTML
`capell-frontend.cache_skip_authenticated`	`true`	Bypasses the frontend HTML cache for signed-in requests. Leave enabled unless you are certain no per-user content is rendered.
`capell.runtime.auth_paths`	`login`, `register`, `forgot-password`, `reset-password/`, `email/verify`, `confirm-password`, `two-factor-challenge`	Path patterns the runtime resolver classifies as auth context
`capell-admin.user_resource.role_schema_types`	`['super_admin' => 'administrator']`	Maps a role to the user form schema it sees, controlling which fields that role can edit
`redirects.auto_redirects.status_code`	`301`	HTTP status for redirects created automatically when a page URL changes. Only `enabled` has an env var.

Other Keys Without Env Vars

Commonly adjusted, and not settable through the environment:

Config key	Default	Effect
`capell.default_pages`	`home`, `error_404`, `maintenance`, `welcome`	Pages created automatically for a new site
`capell.media.crop_presets`	`thumbnail` 320×320, `card` 800×600, `hero` 1600×900, `open_graph` 1200×630	Named crop presets offered on media edit; changing these changes generated derivative sizes
`capell.media.model`	`Capell\Core\Models\Media`	Media model class override
`capell-frontend.default_layout` / `foundation_theme`	`default` / `default`	Fallbacks when a site or page specifies none
`capell-frontend.redirect_default_site`	`true`	Redirects unmatched hosts to the default site instead of returning 404
`capell-frontend.pagination_limit`	`12`	Page-list page size when a caller passes no limit
`capell-frontend.meta_title_seperator`	`' \| '`	Separator between site and page name in `<title>`. Note the spelling of the key.
`capell-frontend.date_format`	`M jS, Y`	Publish-date format on asset cards and tiles
`capell-frontend.tailwind.sources`	`resources/views/*/.blade.php`	Globs scanned for Tailwind class extraction
`capell-frontend.tailwind.validate_sources`	`false`	Validates those globs before generating assets
`capell-admin.navigation_badge_counts`	`false`	Global switch for admin navigation badge count queries
`capell-admin.resources.page.navigation_badge`	`false`	Hides the Pages navigation badge even when counts are enabled
`capell-admin.resources.user.navigation_badge`	`false`	Hides the Users navigation badge even when counts are enabled
`capell-admin.shortcuts`	`g p`, `g s`, `g t`, `g ,`, `g w`, `/`	Admin keyboard shortcut map
`capell-admin.social_types`	8 networks	Social link types offered in the site social-icons form
`capell-installer.database_table_cache.store`	`file`	Cache store for the installer’s table-existence cache

Keys read by optional packages, not by this repository

Several keys live in a host config file but are consumed by an optional package. They do nothing until that package is installed, and searching this repository for a consumer finds none — which does not mean they are dead. Do not remove them.

Config key	Read by
`capell.publishing-studio.release_windows.`, `.notifications.`, `.review_policy.*`	`capell-app/publishing-studio` (`ReleaseWindowGuard`) and `capell-app/automation-studio`
`capell.sitemap.xml_path`, `.disk`, `.directory`	`capell-app/site-discovery`
`capell-admin.layout_builder.allowed_editor_modes`	`capell-app/layout-builder` (`LayoutBuilderConfiguration`)
`capell-frontend.breakpoints.lg`	`capell-app/theme-foundation` views
`capell.analytics.daily_rollup_retention_days` (`CAPELL_ANALYTICS_DAILY_ROLLUP_RETENTION_DAYS`)	No consumer in this repository today; daily metric rollups are not pruned by age here

Release windows in particular are enforced by the Publishing Studio package. Without it installed, setting those keys restricts nothing.

Optional Static HTML Cache Disk

Static HTML cache output is owned by the installed cache/static package, not by capell-app/frontend alone. Only add a dedicated disk when that package’s docs or installer patch expects it. Older installs commonly use:

'page_cache' => [
    'driver' => 'local',
    'root' => public_path('page-cache'),
    'throw' => false,
],

The web server user must be able to write to this path when the installed cache package has CAPELL_WRITE_HTML_CACHE=true. Do not configure Nginx or Apache to serve public/page-cache unless an installed cache package owns that directory and its public-output safety tests pass.

Logging Channel

Add a dedicated Capell channel to config/logging.php if the installer has not patched it already:

'capell' => [
    'driver' => 'single',
    'path' => storage_path('logs/capell.log'),
    'level' => 'debug',
],

Frontend logging uses this channel when it exists and falls back to Laravel logging when it does not.

Morph Map

use Capell\Core\Models\Language;
use Capell\Core\Models\Page;
use Capell\Core\Models\Site;
use Capell\Core\Models\Blueprint;
use Illuminate\Database\Eloquent\Relations\Relation;

Relation::morphMap([
    'language' => Language::class,
    'page' => Page::class,
    'site' => Site::class,
    'blueprint' => Blueprint::class,
]);