Module config 

Server configuration with startup validation.

Loads configuration from environment variables and validates that all required values are present at startup, not at first use.

Environment Variables

Variable	Required	Default	Description
DATABASE_URL	prod	-	PostgreSQL connection string
JWT_SECRET	yes, except explicit dev	random in explicit dev	JWT signing secret, >= 32 bytes
WORKER_TOKEN	yes, except explicit dev	random in explicit dev	Worker-to-API auth token, >= 32 bytes
PORT	no	3000	HTTP listen port
ALLOWED_ORIGINS	no	same-origin	Comma-separated CORS origins
DASHBOARD_DIR	no	embedded	Filesystem path to dashboard assets
WEBHOOK_URL	no	-	Outbound webhook URL for notifications
IRONFLOW_ENV	no	unset (strict)	production, or development for explicit dev mode
IRONFLOW_INSECURE_COOKIES	no	false	1/true drops the Secure flag from session cookies (local HTTP-only dev). Ignored in production
RATE_LIMIT_AUTH	no	10	Credential routes rate limit (sign-in, sign-up, password change), req/min per caller and per targeted email. 0 = disabled
RATE_LIMIT_GENERAL	no	60	General rate limit (req/min/IP). 0 = disabled
SSE_MAX_CONNECTIONS_PER_PRINCIPAL	no	5	Simultaneous SSE streams per user or API key owner. 0 = disabled
SSE_MAX_CONNECTIONS	no	1000	Simultaneous SSE streams for the whole server. 0 = disabled
ARTIFACTS_DIR	no	-	Filesystem root for artifact blobs. Unset disables artifacts
ARTIFACT_MAX_BYTES	no	104857600	Maximum size of a single artifact
PURGE_MAX_AGE_DAYS	no	90	Runs older than this are purged
PURGE_MAX_RUNS_PER_WORKFLOW	no	1000	Max terminal runs kept per workflow
PURGE_DRY_RUN	no	false	Log what would be purged without deleting
PURGE_INTERVAL_SECS	no	86400	Seconds between purge ticks (min 60)
PROVIDER_ACCOUNT_USAGE_RETENTION_DAYS	no	30	Days of Provider Account usage history kept (min 1)
SIGNAL_RETENTION_DAYS	no	7	Days received signals are kept (min 1)
ARTIFACT_BACKEND	no	local	Blob storage backend: local or s3
ARTIFACT_S3_BUCKET	if s3	-	S3 bucket name
ARTIFACT_S3_REGION	no	eu-west-1	S3 region
ARTIFACT_S3_ENDPOINT	no	-	Custom S3 endpoint (MinIO, R2)
ARTIFACT_S3_PREFIX	no	-	Key prefix within the bucket
ARTIFACT_GC_INTERVAL_SECS	no	86400	Seconds between GC ticks (min 60)
ARTIFACT_GC_GRACE_DAYS	no	7	Days before an orphan blob is deleted
ARTIFACT_GC_DRY_RUN	no	false	Log what would be GC’d without deleting

Examples

use ironflow_api::config::ServerConfig;

let config = ServerConfig::from_env()?;
println!("Listening on port {}", config.port);

Structs

ConfigError

Configuration validation error.

ServerConfig

Server configuration loaded from environment variables.