Environment variable index
A consolidated catalogue of environment variables consumed by Delphi services. Each row carries a source badge (where the value comes from) and an optional scope badge.
Source legend
env— set in.envfiles or compose; the canonical local override.SSM— AWS SSM Parameter Store; expanded into env at boot.Secrets Manager— AWS Secrets Manager; expanded into env or files at boot.Code default— value baked in code if nothing overrides it.TelWeb · Team/TelWeb · Admin/TelWeb · Platform— DB-backed setting changed via TelWeb UI.DB row—PlatformSettingor domain table (not exposed in TelWeb UI).Redis (runtime)— ephemeral runtime cache.
Voice and SIP
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
JANUS_WS_PORT | env | all | 8188 (local) / 443 (prod) | Janus WebSocket port; required for WebRTC bridging. |
TELPHI_MEDIA_HOST | env | all | host.docker.internal / TelPhi private IP | TelSys → TelPhi media plane host. |
TELPHI_MEDIA_PORT | env | all | 12001 | TelSys → TelPhi media plane port. |
TELPHI_MEDIA_SCHEME | env | all | ws | Scheme for TelPhi media WebSocket. |
TELPHI_MEDIA_PATH | env | all | /media | Path for TelPhi media WebSocket. |
RTPENGINE_HOST | env | all | 10.30.0.10 (local) | RTPEngine control endpoint. |
RTPENGINE_NG_PORT | env | all | 22222 | RTPEngine ng control port. |
KAMAILIO_SIP_DOMAIN | SSM | prod | — | Public SIP domain Kamailio (https://www.kamailio.org/wikidocs/) serves. |
REFER_TARGET_HOST | env | all | — | Kamailio REFER_SBC_HOST (TelPro). Defaults to DOMAIN_TELPRO. Align with TelPhi transfer REFER configuration. |
COTURN_SHARED_SECRET | Secrets Manager | prod | — | Shared secret for TURN credentials. |
VGW_ENVIRONMENT | env | voice | — | Optional label sent as `VGW-Environment` for TOBi application metadata. Falls back to ENVIRONMENT / OTEL_DEPLOYMENT_ENVIRONMENT. |
HEALTH_PROBE_ENABLED | env | telpro | true | Enable per-trunk SIP OPTIONS from the edge; health alarms do not change routing. |
HEALTH_PROBE_INTERVAL | env | telpro | 60 | Seconds between OPTIONS probe cycles. |
HEALTH_PROBE_TARGET_PORT | env | telpro | 5060 | SIP target port for the first allowed source-IP entry of each enabled trunk. Verify CIDR-derived targets against the carrier. The probe uses the 45-second SIP transaction timer; the legacy HEALTH_PROBE_TIMEOUT example is not applied. |
AMI_HOST | env | voice | 127.0.0.1 | Asterisk Manager Interface host for integrations that use AMI. Since 0.9.17-patch1, trunk health uses edge SIP OPTIONS instead. |
AMI_PORT | env | voice | 8038 | Asterisk Manager Interface port. TelSys listens on 8038 (`MYAMIPORT`). AMI clients must use the same port. The edge OPTIONS trunk monitor does not use AMI. Provisioned via `services/voice/vars.yaml`; the compose maps it to both TelSys (`MYAMIPORT`) and TelPhi. |
AMI_USER | env | voice | asterisk | AMI login user for integrations that use AMI. One value feeds both sides: TelSys (`AMIUSER`) and TelPhi (`AMI_USER`) via the voice compose. Mismatched values fail with "AMI login failed: Authentication failed" for AMI clients. |
AMI_SECRET | voice | telsys image default (override per environment) | AMI login secret, provisioned via Secrets Manager (`services/voice/vars.yaml`, sensitive). Must match on TelSys (`AMISECRET`) and TelPhi (`AMI_SECRET`); the compose maps one value to both. | |
AUDIOPROC_ENABLED | SSM | voice | false | Start the AudioProc preprocessor used for denoising and Silero speech detection. Also controlled by the `audioPreprocessing` feature flag. See [Call handling](/guide/users/flow-designer/call-handling-properties) and [Voice operations](/platform/operations/voice). |
AUDIOPROC_URL | env | voice | ws://127.0.0.1:8790 | WebSocket URL TelPhi uses to reach the AudioProc container when AUDIOPROC_ENABLED is true. |
TELAPI_SWAGGER_UI_ENABLED | env | api | true in development, false in production and staging | When false, TelAPI serves neither `/documentation` (Swagger UI) nor the OpenAPI JSON under it, and `GET /` reports `docs: null`. Customer-facing and staging API hosts keep this false and use the versioned [API reference](/api/reference) instead of a live Swagger UI. |
SIP_100REL_MODE | env | all | off | TelSys PJSIP 100rel mode: off (default) | peer_supported | yes | required — PRACK / reliable provisional responses toward TelPro. Synonyms accepted (e.g. no→off, on→yes). See Voice operations. |
VAIASTERISKCONSOLELOGFORMAT | env | all | json | TelSys/Asterisk console log format. Use json for structured logging and log-to-span parsing; default/plain text is mainly for ad-hoc troubleshooting. |
TELSYS_LOG_LEVEL | env | all | info | Pino-aligned TelSys/Asterisk log level: trace | debug | info | warn | error | fatal. SIP capture remains available independently. |
TELPRO_LOG_LEVEL | env | all | LOG_LEVEL | Pino-aligned TelPro/Kamailio log level. Replaces generated DEBUG_LEVEL overrides. |
RTPENGINE_LOG_LEVEL | env | all | LOG_LEVEL | Pino-aligned RTPEngine log level, mapped to RTPEngine syslog verbosity. Replaces RTP_LOG_LEVEL. |
WEBRTC_LOG_LEVEL | env | all | LOG_LEVEL | Pino-aligned Janus WebRTC log level, mapped to Janus verbosity. Replaces JANUS_*LOG_LEVEL overrides. |
SIP_CAPTURE_ENABLE_PJSIP_LOGGER | env | all | 1 | Enables detailed TelSys PJSIP SIP message logging for SIP ladder and log-to-span diagnostics. |
MAX_CALL_DURATION_SECONDS | env | voice | 7200 | Fallback max call duration (seconds) used when a flow does not set its own. TelPhi force-hangs-up any call older than this and classifies the hangup as max_call_duration. A per-flow sessionConfig.maxCallDurationSeconds value overrides this; the per-flow value is validated by FlowDefinitionSchema, not clamped against this env here. |
MAX_CALL_DURATION_WARNING_MESSAGE | env | voice | (empty) | Fallback warning text spoken ~10s before the max-duration hangup, used when a flow sets no warning of its own. Empty = silent hangup. A per-flow sessionConfig.maxDurationWarningMessage value takes precedence. |
Database and Redis
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
DATABASE_URL | Secrets Manager | all | — | Postgres connection string. Keep `ssl*` query params out of the URL; TLS policy comes from `DATABASE_SSL_MODE` and the CA file (see [Internal encryption](https://docs.delphi.ki-kombinat.com/platform/security/internal-encryption)). |
DATABASE_SSL_MODE | SSM | all | disable (local) | Client SSL policy: `disable` | `require` | `verify-ca` | `verify-full`. |
DATABASE_SSL_CA_BUNDLE_B64 | Secrets Manager | prod | — | Base64 PEM CA bundle for Postgres TLS verification; decoded to `./tls/database-ca.crt` and mounted at `/etc/ssl/database/ca.crt`. Use the CA that signs PgBouncer’s cert (or the RDS/Aurora global CA when connecting straight to AWS). |
DATABASE_SSL_CA_FILE | env | all | /etc/ssl/database/ca.crt | In-container path to the decoded Postgres CA bundle. |
MIGRATION_DATABASE_URL | Secrets Manager | prod | — | Privileged direct Postgres URL for the Ops db-migrate one-shot only (DDL / migrations / delphi-setup). Separate from runtime DATABASE_URL. See Database credentials. |
DATABASE_SECRET_ARN | env | prod | — | Optional Secrets Manager ARN for runtime DB credential refresh on long-running Node services (day-2 rotation of the CRUD user, not the migration user). See Database credentials. |
DATABASE_SECRET_REGION | env | prod | AWS_REGION | AWS region for DATABASE_SECRET_ARN when it differs from the deployment region. |
REDIS_URL | Secrets Manager | all | — | Redis connection string; rediss:// when TLS is enabled. |
REDIS_TLS_CA_BUNDLE_B64 | Secrets Manager | prod | — | Base64 PEM CA bundle for Redis TLS; decoded to `./tls/redis-ca.crt` and mounted at `/etc/ssl/redis/ca.crt`. Often empty when relying on the system trust store (e.g. ElastiCache). |
REDIS_TLS_CA_FILE | env | all | /etc/ssl/redis/ca.crt | In-container path to the decoded Redis CA bundle. |
AWS and infrastructure
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
AWS_REGION | env | all | eu-central-1 | AWS region for SSM / Secrets Manager / S3 calls. |
ENVIRONMENT | env | all | — | Deployment identifier from bootstrap. Used for instance labels and default team Secrets Manager paths (`{ENVIRONMENT}/teams/{slug}/secrets`). Must reach TelWeb and TelAPI containers. |
NAMESPACE | env | all | — | Bootstrap SSM/Secrets Manager namespace for the deployment (e.g. `voiceai/staging` or a customer env id). Fallback for platform secret paths when `PLATFORM_SECRETS_NAMESPACE` is unset. Must reach TelWeb and TelAPI. |
PLATFORM_SECRETS_NAMESPACE | all | NAMESPACE, else voiceai/local | Preferred prefix for platform Secrets Manager collections (`{namespace}/platform/secrets`, `{namespace}/platform/trunk-tls`). Seeded per web/api service; required when multiple deployments share one AWS account. | |
NEXT_PUBLIC_ENVIRONMENT | env | all | — | Legacy build-time client hint. Team secret path suggestions now use runtime `/api/config` (`deploymentEnvironment` / `platformSecretsNamespace`) instead of this value. |
HTTP_PROXY | env | prod | — | Forward proxy for outbound HTTP, including AWS and LLM provider paths. |
HTTPS_PROXY | env | prod | — | Forward proxy for outbound HTTPS. |
NO_PROXY | env | prod | — | Hosts to bypass the proxy. |
EGRESS_TLS_REJECT_UNAUTHORIZED | env | all | true | Whether outbound HTTPS/WSS egress (STT/TTS/LLM providers) verifies remote TLS certificates. Applies to both proxied and direct (`NO_PROXY`) connections. Set `false` only in dev/staging when flows target mock providers with self-signed certificates; relaxed direct requests are logged as `fetch_direct_tls_relaxed`. |
SSM_PARAM_PREFIX | env | all | /delphi/<env>/ | Prefix under which Delphi SSM params live. |
S3_CONFIG_BUCKET | env | prod | — | S3 bucket where the deployment config bundles live; consumed by fetch-config on every host. Bundles include `.config-manifest.json` for checksum verification. |
CONFIG_BASE_PATH | env | prod | /opt/services | Optional base path used by fetch-config when promoting verified config bundles on a host. |
BASTION_HOST | env | ops | — | Bastion host used by Tasker service-refresh jobs to reach API, Voice, and TelPro instances. |
BASTION_SSH_KEY_B64 | Secrets Manager | ops | — | Base64 private SSH key used by Tasker service-refresh jobs when the key is not already present on disk. |
BASTION_SSH_KEY_PATH | env | ops | — | Optional filesystem path to the SSH key used by Tasker service-refresh jobs. |
EDGE_TLS_FULLCHAIN_B64 | Secrets Manager | api,telpro | — | Base64 PEM full-chain certificate for public edge TLS listeners on API and TelPro. |
EDGE_TLS_PRIVKEY_B64 | Secrets Manager | api,telpro | — | Base64 PEM private key matching EDGE_TLS_FULLCHAIN_B64 for public edge TLS listeners. |
EDGE_TLS_CA_BUNDLE_B64 | Secrets Manager | api,telpro | — | Optional CA bundle for edge TLS verification chains and trust material. |
EDGE_TLS_VERSION | SSM | api,telpro | — | Monotonic edge TLS material version. Service refresh uses it to detect and roll certificate changes. |
EDGE_TLS_RENEWAL_THRESHOLD_DAYS | env | ops | 30 | Tasker renewal threshold; certificates expiring within this many days are renewed by EDGE_TLS_RENEW. |
EDGE_TLS_CERTBOT_STAGING | env | ops | false | Use the ACME staging endpoint for edge TLS renewal tests. |
API_TLS_ENABLED | SSM | api | false | Enables the API public edge TLS listener once edge certificate secrets are available. |
CERTBOT_EMAIL | env | ops | — | ACME account email used by Tasker edge TLS renewal jobs. |
Observability
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
OTEL_EXPORTER_OTLP_ENDPOINT | env | all | 10.0.1.10:4317 (prod) | OTLP collector endpoint. |
OTEL_SERVICE_NAME | env | all | — | Service identifier in spans / logs. |
OTEL_ENABLED | env | web | true | Enables TelWeb OpenTelemetry instrumentation in generated Web service config. |
SIGNOZ_URL | env | all | https://signoz.<env>.delphi/ | URL TelWeb queries for the Debug tab. |
SIGNOZ_API_TOKEN | Secrets Manager | prod | — | API token for SigNoz Logs / Traces queries. |
SIGNOZ_API_KEY | Secrets Manager | all | — | Editor or Admin SigNoz service-account key used by apply-alert-rules.sh on the SigNoz host (header SIGNOZ-API-KEY). Not the same as SIGNOZ_API_TOKEN (TelWeb Debug queries). See SigNoz operations → Upgrade. |
SIGNOZ_VERSION | SSM | all | 0.139.0 | signoz/signoz image tag (v prefix added). /opt/deployment/.env wins over SSM. Bump with ./update.sh --signoz-version on the SigNoz host. |
SIGNOZ_OTLP_ENDPOINT | env | dev | — | Optional OTLP endpoint override for local or tunneled SigNoz collection. |
LOG_TO_SPAN_OTLP_ENDPOINT | env | all | localhost:4318 | OTLP HTTP endpoint used by the TelPro log-to-span sidecar to send SIP ladder spans through the local collector. |
LOG_TO_SPAN_EXPORT_LOGS | env | all | false | When true, exports parsed SIP capture logs as OTLP logs in addition to spans. Keep false unless the collector/parser path is sized for the volume. |
ENABLE_PII_LOGGING | env | all | false | When not true, enables PII redaction: OTel collector transform/pii (and transform/pii_traces on Voice) scrubs logs/traces before SigNoz export; TelPhi redacts transcript + caller number on DB persist; TelAPI redacts browser-action transcripts. SIP ladder logs (event=sip_message) stay unmasked. Does not control transcript retention — full text is still written to S3 when app Recording is on. Production: keep false except short support sessions. Staging/dev: may set true for debugging. See Monitoring in SigNoz — PII redaction and Conversations — Recording and transcript retention. |
MSISDN_UNMASKED_DIGITS | env | all | 4 | Trailing phone-number digits kept when masking MSISDNs in collector logs/traces, TelPhi DB writes, and callerNumber attributes (for example ***3456). Must match on voiceai-telphi, telapi, and voiceai-otel-collector on each host. |
Service log levels
All values use the Pino labels trace, debug, info, warn, error, and fatal. Service-specific variables override the global LOG_LEVEL for that service.
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
LOG_LEVEL | env | all | info | Global fallback log level when a service-specific override is unset. |
TELPHI_LOG_LEVEL | env | voice | LOG_LEVEL | TelPhi conversation engine log level. |
TELAPI_LOG_LEVEL | env | api | LOG_LEVEL | TelAPI HTTP/WebSocket service log level. |
TELWEB_LOG_LEVEL | env | web | LOG_LEVEL | TelWeb server-side log level. |
TASKER_LOG_LEVEL | env | ops | LOG_LEVEL | Tasker worker and scheduler log level. |
SCALER_LOG_LEVEL | env | ops | LOG_LEVEL | Scaler decision-loop log level. |
AUDIOPROC_LOG_LEVEL | env | voice | LOG_LEVEL | AudioProc log level. Pino labels are mapped to Python logging levels. |
Feature flags
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
FEATURE_AI_FLOW_BUILDER | env | all | true | AI Flow Builder UI + runtime. |
FEATURE_QA_SCORING | env | all | true | QA scoring jobs and tab. |
FEATURE_AUDIO_PREPROCESSING | env | all | true | AudioProc container in the voice stack. |
FEATURE_TTS_MEDIA_CACHE | env | all | true | TTS cache lookups and writes. |
FEATURE_REGISTRATION | env | all | false | Public registration flow. |
FEATURE_SUBSCRIPTIONS | env | all | false | Subscription / billing guards. |
FEATURE_SMS | env | all | false | SMS dispatch through seven.io. |
FEATURE_WEBRTC | env | all | true | Janus + TURN WebRTC stack. When false, browser SDK session/runtime/endpoint TelAPI surfaces are not registered. |
FEATURE_API_ACCESS | env | all | true | External REST/SDK access and related TelWeb API surfaces. When false, deployments keep health/webhooks but hide API keys, API Server Config, and SDK session/runtime routes. |
FEATURE_ADDITIONAL_PROVIDERS | env | all | true | Additional provider catalogue entries beyond the core set, including Gemini Live, Inworld, Grok, Pythia, and TOBi where available. |
FEATURE_SUBSCRIPTION_MANAGEMENT | env | all | false | Self-service subscription UI, custom deals, and related billing administration surfaces. |
FEATURE_ALGOLIA_ASK_AI | env | all | false | Optional TelWeb Ask AI docs assistant. |
SMS delivery
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
SMS_API_KEY | Secrets Manager | ops | — | Single provider credential, scoped to the Tasker SMS worker. Required only when FEATURE_SMS is enabled. |
TelWeb public UI
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
LEGAL_BANNER_HTML | env | all | — | Trusted operator-provided HTML shown as a legal notice on unauthenticated/public TelWeb pages. Takes precedence over LEGAL_BANNER_TEXT. |
LEGAL_BANNER_TEXT | env | all | — | Plain-text legal notice shown on unauthenticated/public TelWeb pages when LEGAL_BANNER_HTML is unset. |
Sessions and passwords
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
NEXTAUTH_URL | env | all | — | Public TelWeb origin used for sign-in cookies and for password-expiry / usage-notification links. Set the same value on TelWeb, Tasker, TelAPI, and TelPhi. |
SESSION_TIMEOUT | env | all | 1800000 | Main session timeout used for server cookies and client idle logout. |
MAX_CONCURRENT_SESSIONS | env | all | 2 in prod; unlimited outside prod | Maximum active sessions allowed for one user. Positive integers set a cap; 0 or negative disables the cap. Verify the Web bundle exposes this var before overriding. |
SESSION_HEARTBEAT_TTL | env | all | SESSION_TIMEOUT | TTL in milliseconds for session heartbeat records used by concurrent-session enforcement. Must stay between 60000 and SESSION_TIMEOUT. |
LOGIN_MAX_ATTEMPTS_CREDENTIALS | env | all | 5 | Failed credentials-login attempts before an account is locked. Set to 3 to enforce a three-attempt policy; verify the Web bundle exposes this var before overriding. |
LOGIN_LOCKOUT_MINUTES_CREDENTIALS | env | all | 30 | Credentials-login counting window and displayed lockout duration. Locked accounts stay locked until reset-password unlocks them. |
LOGIN_MAX_ATTEMPTS_AZURE_AD | env | all | 10 | Failed Microsoft Entra ID attempts before an account is locked when that provider is enabled. |
LOGIN_LOCKOUT_MINUTES_AZURE_AD | env | all | 60 | Microsoft Entra ID lockout window reported to users and audit events. |
PASSWORD_MAX_AGE_DAYS | env | all | 90 | Password age after which users must change their password. Set on TelWeb and Tasker (must match). |
PASSWORD_WARNING_DAYS | env | all | 10 | Days before password expiry when users see warnings and Tasker sends reminder emails. Set on TelWeb and Tasker (must match). |
PLATFORM_ROLE_EMAIL_CODE_SECRET | Secrets Manager | web | — | Dedicated HMAC secret for Super Admin / Super Viewer role-change email codes. Required on TelWeb and Tasker in production (at least 32 characters). Local non-production processes may fall back to NEXTAUTH_SECRET. |
PLATFORM_ROLE_EMAIL_TASKER_READY | env | web | false | Set true on TelWeb only after every Tasker replica can send PLATFORM_ROLE_CHANGE_CODE_EMAIL. Leave false during a rolling Tasker upgrade or role-change emails 412. |
API credential jail
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
API_CREDENTIAL_JAIL_ENABLED | env | api | true | When true, TelAPI temporarily blocks API keys / webhook credentials after too many auth failures. See API keys → Credential retry jail. |
API_CREDENTIAL_MAX_RETRIES | env | api | 5 | Failed auth attempts allowed inside API_CREDENTIAL_RETRY_WINDOW_MS before a credential is jailed. |
API_CREDENTIAL_RETRY_WINDOW_MS | env | api | 300000 | Sliding window (ms) for counting credential auth failures (default 5 minutes). |
API_CREDENTIAL_JAIL_MS | env | api | 300000 | How long a jailed credential stays blocked (default 5 minutes). |
API_CREDENTIAL_JAIL_WEBHOOKS_ENABLED | env | api | true | Apply the same jail to webhook credential failures. |
Microsoft Entra SSO
See Microsoft Entra SSO.
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
AUTH_WITH_MICROSOFT | env | web | false | When true, TelWeb registers the Microsoft Entra (azure-ad) auth provider. |
AUTH_MICROSOFT_ENTRA_ID_ID | env | web | — | Entra application (client) ID for the Delphi app registration. |
AUTH_MICROSOFT_ENTRA_ID_SECRET | Secrets Manager | web | — | Entra client secret value for the Delphi app registration. |
AUTH_MICROSOFT_ENTRA_ID_ISSUER | env | web | — | OIDC issuer URL, typically https://login.microsoftonline.com/<directory-tenant-id>/v2.0 |
AUTH_WITH_CREDENTIALS | env | web | true | When false, password login is omitted server-side and from the login page. |
Scaling and background jobs
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
SCALING_EVALUATION_INTERVAL_MS | env | all | 30000 | How often the Scaler leader evaluates API and Voice scaling rules. |
SCALING_DRAIN_TIMEOUT_MS | env | all | 3600000 | Maximum time in milliseconds a Voice instance may drain active calls during scale-down. |
SCALING_MAX_PARALLEL_BELOW_MIN_SCALE_UPS | env | all | 8 | Maximum replacement instances the Scaler may provision in one evaluation when a group is below minInstances. |
AUDIT_LOG_RETENTION_DAYS | env | all | 180 | Days of AuditLog rows retained by the Tasker audit-log cleanup cron. Must be a positive integer. |
STALE_SERVER_HEARTBEAT_SECONDS | env | all | 3600 | How long a Voice/API host must stay silent after it has already heartbeated before Tasker STALE_SERVER_CLEANUP deletes its inventory row. Minimum 300. Scale-up placeholders are never deleted by this job. |
Billing
| Name | Source | Scope | Default | Description |
|---|---|---|---|---|
STRIPE_SECRET_KEY | Secrets Manager | prod | — | Stripe API key for checkout / subscriptions. |
STRIPE_WEBHOOK_SECRET | Secrets Manager | prod | — | Verifies inbound Stripe webhook signatures. |
BILLING_DEFAULT_PLAN | TelWeb · Platform | all | — | Default plan assigned on registration; mutable in TelWeb. |
Removed or deprecated
v0.9.17
| Variable | Removed from | Replacement |
|---|---|---|
VONAGE_SMS_FROM_NAME | Ops / Tasker | Flow from (optional) or the platform default sender |
VONAGE_SMS_API_KEY | Ops / Tasker | SMS_API_KEY |
VONAGE_SMS_API_SECRET | Ops / Tasker | unused — seven.io uses a single API key |
See SMS delivery.
v0.9.14-patch3
| Variable | Replaced in generated configs | Replacement |
|---|---|---|
DEBUG_LEVEL | TelPro / Kamailio | TELPRO_LOG_LEVEL |
RTP_LOG_LEVEL | RTPEngine | RTPENGINE_LOG_LEVEL |
JANUS_LOG_LEVEL | Janus WebRTC | WEBRTC_LOG_LEVEL |
JANUS_DEBUG_LEVEL | Janus WebRTC | WEBRTC_LOG_LEVEL |
JANUS_JSON_LOG_LEVEL | Janus WebRTC | WEBRTC_LOG_LEVEL |
The lower-level variables may still appear in container internals, but generated service configuration now takes the Pino-aligned service variables above.
v0.9.13-patch3
| Variable | Removed from | Replacement |
|---|---|---|
RATE_LIMIT_MAX | TelAPI | Admin Settings → API Server Config → API Rate Limit Max |
RATE_LIMIT_WINDOW_MS | TelAPI | Admin Settings → API Server Config → API Rate Limit Window (ms) |
TelAPI also dropped the rateLimitPerApiKey database flag — limits are always per client IP by route tier.