PostgreSQL connection string for the database to operate on. Secret.
PGOPS_READONLY_DSN
No
Optional separate DSN for the read-only pool. Use a role with no write grants to enforce read-only at the database rather than only in the server. Secret.
PGOPS_READ_ONLY
No
Set to 1 to withhold every mutating tool. Write tools are not registered at all, so an agent cannot call them.
PGOPS_APPROVAL_MODE
No
Set to 1 to register container.restart and container.exec. Off by default: Docker socket access is root-equivalent on the host.
PGOPS_AUDIT_LOG
No
Path to the append-only JSONL audit log.
PGOPS_DEFAULT_TIMEOUT_MS
No
Statement timeout applied to every query unless a tool call overrides it.
PGOPS_MAX_TIMEOUT_MS
No
Ceiling a caller-supplied timeout is clamped to.
PGOPS_DEFAULT_ROW_LIMIT
No
Rows returned by query.read when the caller does not specify a limit.
PGOPS_DSN
Yes
PostgreSQL connection string. From inside a container, localhost is the container itself — use host.docker.internal or the compose service name. Secret.
PGOPS_READ_ONLY
No
Set to 1 to withhold every mutating tool.
PGOPS_AUDIT_LOG
No
Path to the audit log inside the container. Mount a volume at this path or the log dies with the container.
