{
  "RUSTFS_ADDRESS": "Bind to a specific ADDRESS:PORT, ADDRESS can be an IP or hostname. Default is ':9000'.",
  "RUSTFS_ACCESS_KEY": "Access key used for S3 API authentication.",
  "RUSTFS_ACCESS_KEY_FILE": "Path to file containing access key for S3 API authentication.",
  "RUSTFS_SECRET_KEY": "Secret key used for S3 API authentication.",
  "RUSTFS_SECRET_KEY_FILE": "Path to file containing secret key for S3 API authentication.",
  "RUSTFS_CONSOLE_ENABLE": "Enable the web console server. Set to 'true' to enable.",
  "RUSTFS_CONSOLE_ADDRESS": "Console server bind address. Default is ':9001'.",
  "RUSTFS_SERVER_DOMAINS": "Domain name used for virtual-hosted-style requests.",
  "RUSTFS_TLS_PATH": "TLS certificate path for RustFS API and console.",
  "RUSTFS_REGION": "Region name for the server.",
  "RUSTFS_LICENSE": "License key for commercial features.",
  "RUSTFS_KMS_ENABLE": "Enable KMS encryption for server-side encryption. Set to 'true' to enable.",
  "RUSTFS_KMS_BACKEND": "KMS backend type: 'local' or 'vault'. Default is 'local'.",
  "RUSTFS_KMS_KEY_DIR": "KMS key directory for local backend.",
  "RUSTFS_KMS_VAULT_ADDRESS": "Vault server address for vault backend.",
  "RUSTFS_KMS_VAULT_TOKEN": "Vault token for vault backend authentication.",
  "RUSTFS_KMS_DEFAULT_KEY_ID": "Default KMS key ID for encryption.",
  "RUSTFS_OBS_ENDPOINT": "Observability endpoint for trace, metrics and logs (gRPC mode only).",
  "RUSTFS_BUFFER_PROFILE_DISABLE": "Disable adaptive buffer sizing with workload profiles. Set to 'true' to use fixed-size buffers.",
  "RUSTFS_BUFFER_PROFILE": "Workload profile for adaptive buffer sizing. Options: GeneralPurpose, AiTraining, DataAnalytics, WebWorkload, IndustrialIoT, SecureStorage."
}
