https://sourceforge.net/p/cordum/wiki/Configuration/Recent changes to ConfigurationenFri, 30 Jan 2026 13:21:09 -0000https://sourceforge.net/p/cordum/wiki/Configuration/<div class="markdown_content"><pre>--- v2 +++ v3 @@ -12,12 +12,14 @@ - `CORDUM_API_KEY` - single API key - `CORDUM_API_KEYS` - comma-separated or JSON list of keys - `CORDUM_API_KEYS_PATH` - path to a JSON or CSV list of keys (hot reload) +- Legacy alias (avoid for new setups): `CORDUM_SUPER_SECRET_API_TOKEN` - `CORDUM_TENANT_ID` - default tenant for clients/scripts - `CORDUM_ORG_ID` - organization id (defaults to tenant) - `CORDUM_ENV=production` (or `CORDUM_PRODUCTION=true`) - enforce production hardening - `CORDUM_GRPC_REFLECTION=1` - enable gRPC reflection (off by default) - `CORDUM_ALLOW_INSECURE_NO_AUTH=1` - local-only opt-out for auth (not allowed in production) - `GATEWAY_METRICS_PUBLIC=1` / `SCHEDULER_METRICS_PUBLIC=1` - bind metrics to 0.0.0.0 +- `CORDUM_DASHBOARD_EMBED_API_KEY=1` - embed API key into dashboard config (local dev only) ## TLS (production) </pre> </div>yaron TorgemanFri, 30 Jan 2026 13:21:09 -0000https://sourceforge.net43eb6054edc0e85951102e3e1176ff9f3a046440https://sourceforge.net/p/cordum/wiki/Configuration/<div class="markdown_content"><pre></pre> </div>yaron TorgemanFri, 30 Jan 2026 13:21:09 -0000https://sourceforge.netf49d02a9f16c7cf74be99187c0033eabc71c1323https://sourceforge.net/p/cordum/wiki/Configuration/<div class="markdown_content"><h1 id="h-configuration">Configuration</h1> <p>Cordum is configured via environment variables and YAML config files.</p> <h2 id="h-required">Required</h2> <ul> <li><code>CORDUM_API_KEY</code> or <code>CORDUM_API_KEYS</code> for API auth</li> <li><code>CORDUM_TENANT_ID</code> for multi-tenant request isolation</li> </ul> <h2 id="h-common-environment-variables">Common environment variables</h2> <ul> <li><code>CORDUM_API_KEY</code> - single API key</li> <li><code>CORDUM_API_KEYS</code> - comma-separated or JSON list of keys</li> <li><code>CORDUM_API_KEYS_PATH</code> - path to a JSON or CSV list of keys (hot reload)</li> <li><code>CORDUM_TENANT_ID</code> - default tenant for clients/scripts</li> <li><code>CORDUM_ORG_ID</code> - organization id (defaults to tenant)</li> <li><code>CORDUM_ENV=production</code> (or <code>CORDUM_PRODUCTION=true</code>) - enforce production hardening</li> <li><code>CORDUM_GRPC_REFLECTION=1</code> - enable gRPC reflection (off by default)</li> <li><code>CORDUM_ALLOW_INSECURE_NO_AUTH=1</code> - local-only opt-out for auth (not allowed in production)</li> <li><code>GATEWAY_METRICS_PUBLIC=1</code> / <code>SCHEDULER_METRICS_PUBLIC=1</code> - bind metrics to 0.0.0.0</li> </ul> <h2 id="h-tls-production">TLS (production)</h2> <p>Production mode requires TLS for HTTP/gRPC and for Redis/NATS clients.</p> <ul> <li><code>GATEWAY_HTTP_TLS_CERT</code>, <code>GATEWAY_HTTP_TLS_KEY</code></li> <li><code>GRPC_TLS_CERT</code>, <code>GRPC_TLS_KEY</code></li> <li><code>REDIS_TLS_CA</code>, <code>NATS_TLS_CA</code>, plus client cert/key if using mTLS</li> </ul> <h2 id="h-config-files">Config files</h2> <p>Mounted config files (Compose defaults):</p> <ul> <li><code>config/pools.yaml</code> - worker pool routing</li> <li><code>config/timeouts.yaml</code> - timeouts and retries</li> <li><code>config/safety.yaml</code> - safety kernel defaults</li> </ul> <p>See <code>docs/configuration.md</code> for the full matrix.</p></div>yaron TorgemanFri, 30 Jan 2026 13:21:07 -0000https://sourceforge.net30f20975e73b08048ea510c2c208b3d8a2cf9ede