···8899See [configuration.md](configuration.md) for what each env var does and why the secret ones matter. This guide covers the Kubernetes-specific wiring.
10101111+Simply, the container image expects:
1212+- A TOML config file mounted at `/etc/tranquil-pds/config.toml` (or passed via `--config`)
1313+- `DATABASE_URL` - postgres connection string
1414+- `BLOB_STORAGE_PATH` - path to blob storage (mount a PV here)
1515+- `PDS_HOSTNAME` - your PDS hostname (without protocol)
1616+- `JWT_SECRET`, `DPOP_SECRET`, `MASTER_KEY` - generate with `openssl rand -base64 48`
1717+- `CRAWLERS` - typically `https://bsky.network`
1818+1119---
12201321## TLS and DNS