Skip to main content

Server Configuration

All values are set in <ICP_HOME>/conf/deployment.toml. Commented-out keys show default values.

Server Settings

KeyTypeDefaultDescription
serverPortint9446HTTPS port for all ICP endpoints
serverHoststring"0.0.0.0"Bind address
logLevelstring"INFO"Log verbosity — DEBUG, INFO, WARN, ERROR
enableAuditLoggingbooleantrueEnable audit log for authentication and management events
enableMetricsbooleantrueExpose Prometheus metrics endpoint
schedulerIntervalSecondsint30Interval (seconds) between health-check polling of connected runtimes
refreshTokenCleanupIntervalSecondsint86400How often expired refresh tokens are purged from the database

Authentication Settings

KeyTypeDefaultDescription
authBackendUrlstring"https://localhost:9447"URL of the authentication backend service
frontendJwtHMACSecretstringHMAC-SHA256 secret for signing JWT tokens (minimum 32 characters)
defaultTokenExpiryTimeint3600JWT access token lifetime in seconds
refreshTokenExpiryTimeint604800Refresh token lifetime in seconds (default: 7 days)
enableRefreshTokenRotationbooleantrueRotate refresh token on each use
maxRefreshTokensPerUserint0Maximum active refresh tokens per user (0 = unlimited)