Configuration Management

First time installing? Follow the Docker Compose installation guide to get Twenty running, then return here for configuration.

Twenty offers two configuration modes to suit different deployment needs: Admin panel access: Only users with admin privileges (canAccessFullAdminPanel: true) can access the configuration interface.

1. Admin Panel Configuration (Default)

IS_CONFIG_VARIABLES_IN_DB_ENABLED=true  # default

Most configuration happens through the UI after installation:

Access your Twenty instance (usually http://localhost:3000)
Go to Settings / Admin Panel / Configuration Variables
Configure integrations, email, storage, and more
Changes take effect immediately (within 15 seconds for multi-container deployments)

Multi-Container Deployments: When using database configuration (IS_CONFIG_VARIABLES_IN_DB_ENABLED=true), both server and worker containers read from the same database. Admin panel changes affect both automatically, eliminating the need to duplicate environment variables between containers (except for infrastructure variables).

What you can configure through the admin panel:

Authentication - Google/Microsoft OAuth, password settings
Email - SMTP settings, templates, verification
Storage - S3 configuration, local storage paths
Integrations - Gmail, Google Calendar, Microsoft services
Workflow & Rate Limiting - Execution limits, API throttling
And much more…

Each variable is documented with descriptions in your admin panel at Settings → Admin Panel → Configuration Variables. Some infrastructure settings like database connections (PG_DATABASE_URL), server URLs (SERVER_URL), and app secrets (APP_SECRET) can only be configured via .env file.Complete technical reference →

2. Environment-Only Configuration

IS_CONFIG_VARIABLES_IN_DB_ENABLED=false

All configuration managed through .env files:

Set IS_CONFIG_VARIABLES_IN_DB_ENABLED=false in your .env file
Add all configuration variables to your .env file
Restart containers for changes to take effect
Admin panel will show current values but cannot modify them

Multi-Workspace Mode

By default, Twenty runs in single-workspace mode — ideal for most self-hosted deployments where you need one CRM instance for your organization.

Single-Workspace Mode (Default)

IS_MULTIWORKSPACE_ENABLED=false  # default

One workspace per Twenty instance
First user automatically becomes admin with full privileges (canImpersonate and canAccessFullAdminPanel)
New signups are disabled after the first workspace is created
Simple URL structure: https://your-domain.com

Enabling Multi-Workspace Mode

IS_MULTIWORKSPACE_ENABLED=true
DEFAULT_SUBDOMAIN=app  # default value

Enable multi-workspace mode for SaaS-like deployments where multiple independent teams need their own workspaces on the same Twenty instance. Key differences from single-workspace mode:

Multiple workspaces can be created on the same instance
Each workspace gets its own subdomain (e.g., sales.your-domain.com, marketing.your-domain.com)
Users sign up and log in at {DEFAULT_SUBDOMAIN}.your-domain.com (e.g., app.your-domain.com)
No automatic admin privileges — first user in each workspace is a regular user
Workspace-specific settings like subdomain and custom domain become available in workspace settings

Environment-only setting: IS_MULTIWORKSPACE_ENABLED can only be configured via .env file and requires a restart. It cannot be changed through the admin panel.

DNS Configuration for Multi-Workspace

When using multi-workspace mode, configure your DNS with a wildcard record to allow dynamic subdomain creation:

*.your-domain.com -> your-server-ip

This enables automatic subdomain routing for new workspaces without manual DNS configuration.

Restricting Workspace Creation

In multi-workspace mode, you may want to limit who can create new workspaces:

IS_WORKSPACE_CREATION_LIMITED_TO_SERVER_ADMINS=true

When enabled, only users with canAccessFullAdminPanel can create additional workspaces. Users can still create their first workspace during initial signup.

Gmail & Google Calendar Integration

Create Google Cloud Project

Go to Google Cloud Console
Create a new project or select existing one
Enable these APIs:

Configure OAuth

Go to Credentials
Create OAuth 2.0 Client ID
Add these redirect URIs:
- https://{your-domain}/auth/google/redirect (for SSO)
- https://{your-domain}/auth/google-apis/get-access-token (for integrations)

Configure in Twenty

Go to Settings → Admin Panel → Configuration Variables
Find the Google Auth section
Set these variables:
- MESSAGING_PROVIDER_GMAIL_ENABLED=true
- CALENDAR_PROVIDER_GOOGLE_ENABLED=true
- AUTH_GOOGLE_CLIENT_ID={client-id}
- AUTH_GOOGLE_CLIENT_SECRET={client-secret}
- AUTH_GOOGLE_CALLBACK_URL=https://{your-domain}/auth/google/redirect
- AUTH_GOOGLE_APIS_CALLBACK_URL=https://{your-domain}/auth/google-apis/get-access-token

Environment-only mode: If you set IS_CONFIG_VARIABLES_IN_DB_ENABLED=false, add these variables to your .env file instead.

Required scopes (automatically configured): See relevant source code

https://www.googleapis.com/auth/calendar.events
https://www.googleapis.com/auth/gmail.readonly
https://www.googleapis.com/auth/profile.emails.read

If your app is in test mode

If your app is in test mode, you will need to add test users to your project. Under OAuth consent screen, add your test users to the “Test users” section.

Microsoft 365 Integration

Users must have a Microsoft 365 Licence to be able to use the Calendar and Messaging API. They will not be able to sync their account on Twenty without one.

Create a project in Microsoft Azure

You will need to create a project in Microsoft Azure and get the credentials.

Enable APIs

On Microsoft Azure Console enable the following APIs in “Permissions”:

Microsoft Graph: Mail.ReadWrite
Microsoft Graph: Mail.Send
Microsoft Graph: Calendars.Read
Microsoft Graph: User.Read
Microsoft Graph: openid
Microsoft Graph: email
Microsoft Graph: profile
Microsoft Graph: offline_access

Note: “Mail.ReadWrite” and “Mail.Send” are only mandatory if you want to send emails using our workflow actions. You can use “Mail.Read” instead if you only want to receive emails.

Authorized redirect URIs

You need to add the following redirect URIs to your project:

https://{your-domain}/auth/microsoft/redirect if you want to use Microsoft SSO
https://{your-domain}/auth/microsoft-apis/get-access-token

Configure in Twenty

Go to Settings → Admin Panel → Configuration Variables
Find the Microsoft Auth section
Set these variables:
- MESSAGING_PROVIDER_MICROSOFT_ENABLED=true
- CALENDAR_PROVIDER_MICROSOFT_ENABLED=true
- AUTH_MICROSOFT_ENABLED=true
- AUTH_MICROSOFT_CLIENT_ID={client-id}
- AUTH_MICROSOFT_CLIENT_SECRET={client-secret}
- AUTH_MICROSOFT_CALLBACK_URL=https://{your-domain}/auth/microsoft/redirect
- AUTH_MICROSOFT_APIS_CALLBACK_URL=https://{your-domain}/auth/microsoft-apis/get-access-token

Environment-only mode: If you set IS_CONFIG_VARIABLES_IN_DB_ENABLED=false, add these variables to your .env file instead.

Configure scopes

See relevant source code

‘openid’
‘email’
‘profile’
‘offline_access’
‘Mail.ReadWrite’
‘Mail.Send’
‘Calendars.Read’

If your app is in test mode

If your app is in test mode, you will need to add test users to your project. Add your test users to the “Users and groups” section.

Background Jobs for Calendar & Messaging

After configuring Gmail, Google Calendar, or Microsoft 365 integrations, you need to start the background jobs that sync data. Register the following recurring jobs in your worker container:

# from your worker container
yarn command:prod cron:messaging:messages-import
yarn command:prod cron:messaging:message-list-fetch
yarn command:prod cron:calendar:calendar-event-list-fetch
yarn command:prod cron:calendar:calendar-events-import
yarn command:prod cron:messaging:ongoing-stale
yarn command:prod cron:calendar:ongoing-stale
yarn command:prod cron:workflow:automated-cron-trigger

Email Configuration

Go to Settings → Admin Panel → Configuration Variables
Find the Email section
Configure your SMTP settings:

Environment-only mode: If you set IS_CONFIG_VARIABLES_IN_DB_ENABLED=false, add these variables to your .env file instead.

Logic Functions

Twenty supports logic functions for workflows and custom logic. The execution environment is configured via the SERVERLESS_TYPE environment variable.

Security Notice: The local driver (SERVERLESS_TYPE=LOCAL) runs code directly on the host in a Node.js process with no sandboxing. It should only be used for trusted code in development. For production deployments handling untrusted code, we highly recommend using SERVERLESS_TYPE=LAMBDA or SERVERLESS_TYPE=DISABLED.

Available Drivers

Driver	Environment Variable	Use Case	Security Level
Disabled	`SERVERLESS_TYPE=DISABLED`	Disable logic functions entirely	N/A
Local	`SERVERLESS_TYPE=LOCAL`	Development and trusted environments	Low (no sandboxing)
Lambda	`SERVERLESS_TYPE=LAMBDA`	Production with untrusted code	High (hardware-level isolation)

Recommended Configuration

For development:

SERVERLESS_TYPE=LOCAL  # default

For production (AWS):

SERVERLESS_TYPE=LAMBDA
SERVERLESS_LAMBDA_REGION=us-east-1
SERVERLESS_LAMBDA_ROLE=arn:aws:iam::123456789:role/your-lambda-role
SERVERLESS_LAMBDA_ACCESS_KEY_ID=your-access-key
SERVERLESS_LAMBDA_SECRET_ACCESS_KEY=your-secret-key

To disable logic functions:

SERVERLESS_TYPE=DISABLED

When using SERVERLESS_TYPE=DISABLED, any attempt to execute a logic function will return an error. This is useful if you want to run Twenty without logic function capabilities.

Developers

Extend

Self-Host

Contribute

Setup

Configuration Management

1. Admin Panel Configuration (Default)

2. Environment-Only Configuration

Multi-Workspace Mode

Single-Workspace Mode (Default)

Enabling Multi-Workspace Mode

DNS Configuration for Multi-Workspace

Restricting Workspace Creation

Gmail & Google Calendar Integration

Create Google Cloud Project

Configure OAuth

Configure in Twenty

If your app is in test mode

Microsoft 365 Integration

Create a project in Microsoft Azure

Enable APIs

Authorized redirect URIs

Configure in Twenty

Configure scopes

If your app is in test mode

Background Jobs for Calendar & Messaging

Email Configuration

Logic Functions

Available Drivers

Recommended Configuration

Developers

Extend

Self-Host

Contribute

​Configuration Management

​1. Admin Panel Configuration (Default)

​2. Environment-Only Configuration

​Multi-Workspace Mode

​Single-Workspace Mode (Default)

​Enabling Multi-Workspace Mode

​DNS Configuration for Multi-Workspace

​Restricting Workspace Creation

​Gmail & Google Calendar Integration

​Create Google Cloud Project

​Configure OAuth

​Configure in Twenty

​If your app is in test mode

​Microsoft 365 Integration

​Create a project in Microsoft Azure

​Enable APIs

​Authorized redirect URIs

​Configure in Twenty

​Configure scopes

​If your app is in test mode

​Background Jobs for Calendar & Messaging

​Email Configuration

​Logic Functions

​Available Drivers

​Recommended Configuration

Configuration Management

1. Admin Panel Configuration (Default)

2. Environment-Only Configuration

Multi-Workspace Mode

Single-Workspace Mode (Default)

Enabling Multi-Workspace Mode

DNS Configuration for Multi-Workspace

Restricting Workspace Creation

Gmail & Google Calendar Integration

Create Google Cloud Project

Configure OAuth

Configure in Twenty

If your app is in test mode

Microsoft 365 Integration

Create a project in Microsoft Azure

Enable APIs

Authorized redirect URIs

Configure in Twenty

Configure scopes

If your app is in test mode

Background Jobs for Calendar & Messaging

Email Configuration

Logic Functions

Available Drivers

Recommended Configuration