Every environment variable consumed by the local stack, grouped by component, with defaults and notes. The "required" column is honest: if it is yes, the service will not start without it.
Secrets are listed in Secret handling, not here. This page is for non-secret configuration. Anything starting with *_KEY, *_SECRET, *_MNEMONIC, or *_PASSWORD is secret.
Port assignments are baked into the docker-compose files. Override by editing the compose file, not by setting a *_PORT env var (there is no such var).
CometBFT peer list is in genesis.json and config.toml, not in env.
Database schema migrations are applied by the entrypoint script on first start, not driven by an env flag.