Configuration reference
Configuration keys of the kernel module: sections, environment variables, types and defaults.
Generated from the module's code when its image was built — do not edit. Each key can be set as an environment variable on the module's deployment in namespace stackship-system; a double underscore separates the levels. An environment variable overrides the module's shipped appsettings. Values that could be credentials are not shown.
Auth
Bound to StackshipAuthOptions.
| Key | Environment variable | Type | Default |
|---|---|---|---|
Auth:InternalUrl |
Auth__InternalUrl |
string |
"" |
Auth:Module:Audience |
Auth__Module__Audience |
string |
|
Auth:Module:ClientId |
Auth__Module__ClientId |
string |
"" |
Auth:Module:ClientSecret |
Auth__Module__ClientSecret |
string |
(not shown) |
Auth:Realm |
Auth__Realm |
string |
"" |
Auth:Stackship:Audience |
Auth__Stackship__Audience |
string |
|
Auth:Stackship:ClientId |
Auth__Stackship__ClientId |
string |
"" |
Auth:Stackship:ClientSecret |
Auth__Stackship__ClientSecret |
string |
(not shown) |
Auth:Url |
Auth__Url |
string |
"" |
Auth:Keycloak
Bound to KeycloakIdentityAdminOptions.
| Key | Environment variable | Type | Default |
|---|---|---|---|
Auth:Keycloak:Audience |
Auth__Keycloak__Audience |
string |
stackship-kubernetes-client |
Auth:Keycloak:ClientId |
Auth__Keycloak__ClientId |
string |
"" |
Auth:Keycloak:ClientSecret |
Auth__Keycloak__ClientSecret |
string |
(not shown) |
Kernel:Email
Bound to EmailFeatureOptions.
| Key | Environment variable | Type | Default |
|---|---|---|---|
Kernel:Email:MaxSendAttempts |
Kernel__Email__MaxSendAttempts |
integer |
3 |
Kernel:Email:PortalBaseUrl |
Kernel__Email__PortalBaseUrl |
string |
|
Kernel:Email:Smtp:FromAddress |
Kernel__Email__Smtp__FromAddress |
string |
no-reply@stackship.se |
Kernel:Email:Smtp:FromName |
Kernel__Email__Smtp__FromName |
string |
Stackship |
Kernel:Email:Smtp:Host |
Kernel__Email__Smtp__Host |
string |
|
Kernel:Email:Smtp:Password |
Kernel__Email__Smtp__Password |
string |
|
Kernel:Email:Smtp:Port |
Kernel__Email__Smtp__Port |
integer |
587 |
Kernel:Email:Smtp:ReplyToAddress |
Kernel__Email__Smtp__ReplyToAddress |
string |
|
Kernel:Email:Smtp:UseImplicitTls |
Kernel__Email__Smtp__UseImplicitTls |
boolean |
false |
Kernel:Email:Smtp:Username |
Kernel__Email__Smtp__Username |
string |
|
Kernel:Email:TemplateVersionRetention |
Kernel__Email__TemplateVersionRetention |
integer |
20 |
Modules:Dynamic
Bound to DynamicModuleOptions.
| Key | Environment variable | Type | Default |
|---|---|---|---|
Modules:Dynamic:Clients:{index}:ClientId |
Modules__Dynamic__Clients__{index}__ClientId |
string |
|
Modules:Dynamic:Clients:{index}:Keys:{index} |
Modules__Dynamic__Clients__{index}__Keys__{index} |
string |
|
Modules:Dynamic:HeartbeatTimeout |
Modules__Dynamic__HeartbeatTimeout |
duration |
00:02:00 |
Modules:Dynamic:MaxModules |
Modules__Dynamic__MaxModules |
integer |
100 |
Modules:Dynamic:SweepInterval |
Modules__Dynamic__SweepInterval |
duration |
00:00:30 |
Read at startup
Keys the module reads directly while it starts, outside an options section. The value column shows what the module's appsettings ships.
| Key | Environment variable | Type | Shipped value |
|---|---|---|---|
ConnectionStrings:Postgres |
ConnectionStrings__Postgres |
(not shown) | |
Cors:AllowedOrigins |
Cors__AllowedOrigins |
||
Mcp:DocumentationUrl |
Mcp__DocumentationUrl |
"" |
|
SkipDatabaseMigrations |
SkipDatabaseMigrations |
||
Stackship:Key |
Stackship__Key |
||
STACKSHIP_E2E_TEST_HOOKS |
STACKSHIP_E2E_TEST_HOOKS |
||
Swagger:Enabled |
Swagger__Enabled |
Other shipped settings
Keys the module's appsettings sets that no options section above covers.
| Key | Environment variable | Type | Shipped value |
|---|---|---|---|
BaseUrl |
BaseUrl |
portal.cloud1.se |
|
Deployments:AzureDevOps:ApiBaseUrl |
Deployments__AzureDevOps__ApiBaseUrl |
http://localhost:8080 |
|
Deployments:AzureDevOps:TenantId |
Deployments__AzureDevOps__TenantId |
"" |
|
Deployments:FrontendUrl |
Deployments__FrontendUrl |
http://localhost:5173 |
|
Deployments:GitHub:ApiBaseUrl |
Deployments__GitHub__ApiBaseUrl |
http://localhost:5089 |
|
Deployments:GitHub:AppUrl |
Deployments__GitHub__AppUrl |
https://stackship.se |
|
Deployments:GitLab:AdminToken |
Deployments__GitLab__AdminToken |
(not shown) | |
Deployments:GitLab:ApiBaseUrl |
Deployments__GitLab__ApiBaseUrl |
http://localhost:8080 |
|
Deployments:GitLab:BaseUrl |
Deployments__GitLab__BaseUrl |
https://gitlab.stackship.dev |
|
IngressController:CertificateIssuer |
IngressController__CertificateIssuer |
letsencrypt-prod |
|
IngressController:ServiceName |
IngressController__ServiceName |
ingress-nginx-controller |
|
Kubernetes:EnforcementMode |
Kubernetes__EnforcementMode |
Enforce |
|
Kubernetes:Fake |
Kubernetes__Fake |
False |
|
Kubernetes:MockDelays:Apps:BuildingSeconds |
Kubernetes__MockDelays__Apps__BuildingSeconds |
10 |
|
Kubernetes:MockDelays:FunctionNamespaces:ProvisioningSeconds |
Kubernetes__MockDelays__FunctionNamespaces__ProvisioningSeconds |
3 |
|
Kubernetes:MockDelays:Functions:BuildingSeconds |
Kubernetes__MockDelays__Functions__BuildingSeconds |
3 |
|
Kubernetes:MockDelays:Functions:DeployingSeconds |
Kubernetes__MockDelays__Functions__DeployingSeconds |
2 |
|
Kubernetes:MockDelays:Postgres:CreatingSeconds |
Kubernetes__MockDelays__Postgres__CreatingSeconds |
20 |
|
Kubernetes:MockLogStreamIntervalMs |
Kubernetes__MockLogStreamIntervalMs |
1000 |
|
Kubernetes:MockReconcileIntervalSeconds |
Kubernetes__MockReconcileIntervalSeconds |
5 |
|
Mcp:// |
Mcp__// |
MCP surface for LLM clients at /mcp. Off by default: it puts the whole API in front of an AI client, which is an operator's decision. Set Mcp__Enabled=true to turn it on. |
|
Mcp://DocumentationUrl |
Mcp__//DocumentationUrl |
Optional. The portal page explaining how to connect, surfaced to clients in the protected-resource metadata. |
|
Mcp://PublicBaseUrl |
Mcp__//PublicBaseUrl |
The origin clients reach this API on, e.g. https://api.stackship.se. Advertised as the resource URL, and a client refuses the server if it does not match what it connected to. Left empty it is derived from X-Forwarded-Proto/Host, which is right behind the standard ingress but wrong behind anything that does not set them. |
|
Mcp://SelfBaseUrl |
Mcp__//SelfBaseUrl |
Where this API answers itself. Tool calls loop back through the real pipeline so they are authorized identically to any other request. Override when Kestrel's HTTP port is not 8080. |
|
Mcp:Enabled |
Mcp__Enabled |
False |
|
Mcp:PublicBaseUrl |
Mcp__PublicBaseUrl |
"" |
|
Mcp:SelfBaseUrl |
Mcp__SelfBaseUrl |
http://localhost:8080 |
|
Stackship:AppSuffixDomain |
Stackship__AppSuffixDomain |
apps.stackship.se |
|
Stackship:BackendBaseUrl |
Stackship__BackendBaseUrl |
https://localhost:7084 |
|
Storage:Classes:Premium |
Storage__Classes__Premium |
vsphere-block |
|
Storage:Classes:Standard |
Storage__Classes__Standard |
vsphere-block |