Configuration

The node reads environment variables and/or a YAML file (see config.example.yaml). Env vars take precedence.

Core

Variable	Default	Description
PORT	8080	HTTP listen port.
LOG_LEVEL	info	debug | info | warn | error | pretty.
DATA_DIR	./data	Directory for durable state.
SEED_NODES	[]	JSON array of initial peer addresses.
RATE_LIMIT_PER_MINUTE	100	Per-IP request cap.

Inter-node authentication

Variable	Default	Description
NODE_AUTH_SECRET	(unset)	32-byte hex HMAC secret shared across consortium nodes.
REQUIRE_NODE_AUTH	false	Reject inter-node traffic that isn’t HMAC-authenticated.

IPFS (for large event payloads)

Variable	Default	Description
IPFS_ENABLED	false	Enable CID-referenced event payloads.
IPFS_GATEWAY_URL	http://localhost:5001	IPFS API endpoint.

Domains

Variable	Default	Description
SUPPORTED_DOMAINS	*	Comma-separated glob list (e.g. *.finance.example,*.ai.example).

Feature flags (QDPs)

These flags gate protocol features that shipped under a fork-block so operators can enable them in a coordinated way. See QDP-0009.

Variable	Default	QDP
ENABLE_NONCE_LEDGER	false	QDP-0001
ENABLE_PUSH_GOSSIP	false	QDP-0005
ENABLE_LAZY_EPOCH_PROBE	false	QDP-0007
ENABLE_KOFK_BOOTSTRAP	false	QDP-0008

YAML

Identical shape to the env vars (lowercase, underscore → section):

port: 8080
log_level: info
data_dir: ./data
seed_nodes:
  - "peer1.example:8080"
  - "peer2.example:8080"
rate_limit_per_minute: 100
node_auth_secret: "…"
require_node_auth: true
ipfs:
  enabled: true
  gateway_url: "http://localhost:5001"
supported_domains: ["*.finance.example", "*.ai.example"]
features:
  nonce_ledger: true
  push_gossip: true