Configuring Mokosh Server

Mokosh Server is configured entirely through environment variables. The essentials:

Database

• DATABASE_URL - PostgreSQL connection string. Required.
• RUN_MIGRATIONS - apply schema migrations on start. Defaults to true.

Single sign-on

Mokosh Server verifies Bunyip-issued access tokens as an OpenID Connect resource server:

• OIDC_ISSUER - the Bunyip issuer URL.
• OIDC_AUDIENCE - the audience Mokosh Server accepts.

Security

• ENCRYPTION_KEY - 32 bytes (raw, or 64 hex characters), used for at-rest encryption of per-tenant secrets. Required.
• CORS_ORIGIN - comma-separated list of allowed origins.

Email

• SMTP_HOST - when set, outbound email uses SMTP; otherwise email is logged. When SMTP_USERNAME is set, SMTP_PASSWORD is required.