# KBX Configuration Reference

Source SHA-256: `e09186d626b034a524b7cdf78f1e4bb6adbc112975b3baf4fd6194b1c1abd771`

Settings: **33** · Environments: **4**

| Key | Env | Category | Type | Secret | Restart |
|---|---|---|---|---:|---:|
| `Kbx:Runtime:Environment` | `KBX__Runtime__Environment` | runtime | enum | no | yes |
| `Kbx:Runtime:ReadOnly` | `KBX__Runtime__ReadOnly` | runtime | boolean | no | no |
| `ConnectionStrings:Main` | `ConnectionStrings__Main` | database | connection-string | yes | yes |
| `Kbx:Database:MigrationsMode` | `KBX__Database__MigrationsMode` | database | enum | no | yes |
| `Kbx:Database:CommandTimeoutSeconds` | `KBX__Database__CommandTimeoutSeconds` | database | integer | no | yes |
| `Kbx:Hangfire:Enabled` | `KBX__Hangfire__Enabled` | background-jobs | boolean | no | yes |
| `Kbx:Hangfire:WorkerCount` | `KBX__Hangfire__WorkerCount` | background-jobs | integer | no | yes |
| `Kbx:SignalR:Enabled` | `KBX__SignalR__Enabled` | realtime | boolean | no | yes |
| `Kbx:Outbox:DispatcherEnabled` | `KBX__Outbox__DispatcherEnabled` | messaging | boolean | no | yes |
| `Kbx:Inbox:CleanupEnabled` | `KBX__Inbox__CleanupEnabled` | messaging | boolean | no | yes |
| `Kbx:Integration:DispatcherEnabled` | `KBX__Integration__DispatcherEnabled` | integration | boolean | no | yes |
| `Kbx:ExternalData:RefreshEnabled` | `KBX__ExternalData__RefreshEnabled` | external-data | boolean | no | yes |
| `Kbx:ExternalData:ObservationRetentionEnabled` | `KBX__ExternalData__ObservationRetentionEnabled` | external-data | boolean | no | yes |
| `Kbx:Experiments:Enabled` | `KBX__Experiments__Enabled` | experiments | boolean | no | no |
| `Kbx:Logging:MinimumLevel` | `KBX__Logging__MinimumLevel` | logging | enum | no | yes |
| `Kbx:Logging:JsonConsoleEnabled` | `KBX__Logging__JsonConsoleEnabled` | logging | boolean | no | yes |
| `Kbx:Telemetry:Enabled` | `KBX__Telemetry__Enabled` | observability | boolean | no | yes |
| `Kbx:Telemetry:OtlpEndpoint` | `KBX__Telemetry__OtlpEndpoint` | observability | uri | no | yes |
| `Kbx:Telegram:Enabled` | `KBX__Telegram__Enabled` | alerting | boolean | no | yes |
| `Kbx:Telegram:BotToken` | `KBX__Telegram__BotToken` | alerting | string | yes | yes |
| `Kbx:Telegram:ChatId` | `KBX__Telegram__ChatId` | alerting | string | yes | yes |
| `ExternalProviders:Krx:Enabled` | `ExternalProviders__Krx__Enabled` | provider | boolean | no | yes |
| `ExternalProviders:Krx:AuthKey` | `ExternalProviders__Krx__AuthKey` | provider | string | yes | yes |
| `ExternalProviders:OpenDart:Enabled` | `ExternalProviders__OpenDart__Enabled` | provider | boolean | no | yes |
| `ExternalProviders:OpenDart:ApiKey` | `ExternalProviders__OpenDart__ApiKey` | provider | string | yes | yes |
| `ExternalProviders:Kis:Enabled` | `ExternalProviders__Kis__Enabled` | provider | boolean | no | yes |
| `ExternalProviders:Kis:Environment` | `ExternalProviders__Kis__Environment` | provider | enum | no | yes |
| `ExternalProviders:Kis:AppKey` | `ExternalProviders__Kis__AppKey` | provider | string | yes | yes |
| `ExternalProviders:Kis:AppSecret` | `ExternalProviders__Kis__AppSecret` | provider | string | yes | yes |
| `Kbx:Security:RequireHttps` | `KBX__Security__RequireHttps` | security | boolean | no | yes |
| `Kbx:Health:ReadinessEnabled` | `KBX__Health__ReadinessEnabled` | runtime | boolean | no | yes |
| `Kbx:Import:MaxUploadBytes` | `KBX__Import__MaxUploadBytes` | import | integer | no | yes |
| `Kbx:Import:MaxRows` | `KBX__Import__MaxRows` | import | integer | no | yes |

## Environment profiles

### Development
- Migration: `startup-apply-allowed`
- Provider network: `opt-in`
- HTTPS required: `false`
- Endpoint override allowed: `true`
- Gates: `static-governance`
### Test
- Migration: `ephemeral-apply`
- Provider network: `forbidden`
- HTTPS required: `false`
- Endpoint override allowed: `true`
- Gates: `static-governance`, `build`, `unit`, `integration`, `scenario`
### Staging
- Migration: `predeploy`
- Provider network: `opt-in`
- HTTPS required: `true`
- Endpoint override allowed: `false`
- Gates: `static-governance`, `build`, `unit`, `integration`, `scenario`, `migration-dry-run`
### Production
- Migration: `predeploy`
- Provider network: `opt-in`
- HTTPS required: `true`
- Endpoint override allowed: `false`
- Gates: `static-governance`, `build`, `unit`, `integration`, `scenario`, `migration-dry-run`, `configuration-validation`, `release-governance`
