Environment Variables
On this page
Load secrets and config from .env in the project root. System environment variables override .env.
Access
| Context |
Syntax |
| SQL config files |
${VAR} |
| Starlark scripts |
env.get("VAR") |
| Starlark write |
env.set("VAR", "value") |
.env Syntax
KEY=VALUE
KEY="quoted value"
KEY='single quoted'
# comments ignored
OndatraSQL Variables
| Variable |
Description |
ONDATRA_KEY |
API key for managed OAuth2 via oauth2.ondatra.sh |
ONDATRA_OAUTH_HOST |
Override managed OAuth2 service URL |
EDITOR |
Editor for ondatrasql edit (falls back to nano, vi, vim) |
OAuth2 Provider Variables
For local OAuth2 (when ONDATRA_KEY is not set). Provider name maps to env prefix: google-sheets becomes GOOGLE_SHEETS_*.
| Variable |
Description |
<PREFIX>_CLIENT_ID |
OAuth2 client ID |
<PREFIX>_CLIENT_SECRET |
OAuth2 client secret |
<PREFIX>_AUTH_URL |
Authorization endpoint |
<PREFIX>_TOKEN_URL |
Token endpoint |
<PREFIX>_SCOPE |
OAuth2 scopes (optional) |
Cloud Storage
Picked up automatically by DuckDB’s credential chain.
| Variable |
Provider |
AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_REGION |
Amazon S3 |
GOOGLE_APPLICATION_CREDENTIALS |
Google Cloud Storage |
AZURE_STORAGE_ACCOUNT, AZURE_STORAGE_KEY |
Azure Blob Storage |
OndatraSQL