Environment variables

The CLI honors a small set of FLUI_* environment variables. Each one overrides a value that would otherwise come from the active profile, the schema default, or an interactive prompt. All are optional — the CLI works without any of them.

The cascade for any preference / credential is:

explicit CLI flag  >  env var  >  active profile value  >  schema default

Profile and API targeting

Variable	Effect
`FLUI_PROFILE`	Selects which profile the CLI talks to for the current invocation. Order: `FLUI_PROFILE` → `~/.flui/context` file → `default`.
`FLUI_API_URL`	Overrides the API URL stored in the profile. The CLI talks to this URL instead.
`FLUI_API_KEY`	Overrides the API key stored in the profile. The API URL still comes from the profile (or from `FLUI_API_URL`).

Preferences

These four mirror the preferences declared in the layered config system — set them to override the profile-stored value without running flui config set. See Profiles and config for the resolution model.

Variable	Preference	Notes
`FLUI_EMAIL`	`email`	Contact email for Let’s Encrypt and operational notifications.
`FLUI_CERTIFICATE_MODE`	`certificateMode`	One of `production`, `staging`, `preflight` — see TLS and certificates.
`FLUI_API_PATH`	`apiPath`	Path to the local `flui.api` repo. Only relevant to contributors using `env export-config` / `dev creds`.
`FLUI_DASHBOARD_PATH`	`dashboardPath`	Path to the local `flui.dashboard` repo. Same scope as `apiPath`.

S3 credentials

Read by flui app backup create / flui app backup delete when --access-key / --secret-key are not passed inline.

Variable	Effect
`FLUI_S3_ACCESS_KEY`	Default S3 access key for app-level backups.
`FLUI_S3_SECRET_KEY`	Default S3 secret key for app-level backups.

Identity provider session token

Read by flui auth generate-api-key (used in CI / automation scenarios when a session token has already been obtained out of band).

Variable	Effect
`FLUI_SESSION_TOKEN`	Bearer token used to mint a long-lived API key.

Examples

# Run a command against a different profile without switching the active one
FLUI_PROFILE=staging flui app list

# Override the certificate mode for one run
FLUI_CERTIFICATE_MODE=staging flui env export-config --dry-run

# Backup an app to S3 with credentials from the environment
FLUI_S3_ACCESS_KEY=… FLUI_S3_SECRET_KEY=… \
  flui app backup create my-app --bucket archive --endpoint https://s3.example.com