/diminuendo/configuration/
Configuration
Diminuendo configuration reference
Diminuendo is configured via environment variables. In the current Fabric workspace, shared env comes from diminuendo/.env, then diminuendo/.env.local. Public fabric.dev.aws.igent.ai deploys must force DEV_MODE=false.
Core Settings
| Variable | Default | Description |
|---|
PORT | 8001 in Fabric PM2; older standalone examples may use 8080 | HTTP/WebSocket listen port |
DEV_MODE | false | Enable dev mode (auth bypass, verbose errors) |
DATA_DIR | ./data | Base directory for logs, caches, and local operational artifacts; durable resource/runtime state lives in Unison and Podium |
LOG_LEVEL | info | Log level (debug, info, warn, error) |
Upstream Services
| Variable | Description |
|---|
ENSEMBLE_URL | Company-wide staging Ensemble URL by default; local only when FABRIC_ENSEMBLE_MODE=local |
ENSEMBLE_API_KEY | Ensemble API key hydrated from SSM for staging or generated for local mode |
PODIUM_URL | Company-wide staging Podium gateway URL by default; local http://127.0.0.1:8002 only when FABRIC_PODIUM_MODE=local |
PODIUM_API_KEY | Podium runtime API key for Diminuendo and agent traffic |
PODIUM_API_PREFIX | Podium API path prefix (default: /api/v1) |
PODIUM_ADMIN_API_KEY | Podium admin key for deployment/admin actions |
PODIUM_ENSEMBLE_URL | Ensemble URL passed to agents for direct inference calls (may differ from gateway's) |
PODIUM_EXECUTION_TARGET | Default execution target: cloud for hosted Podium, local only for local Podium |
PODIUM_DEPLOYMENT_VERSION | Default agent deployment version |
PODIUM_SECRETS_KEY | Encryption key for agent secrets |
Authentication
| Variable | Description |
|---|
AUTH0_DOMAIN | Auth0 tenant domain |
AUTH0_CLIENT_ID | Auth0 application client ID |
AUTH0_CLIENT_SECRET | Auth0 application client secret |
AUTH0_AUDIENCE | Auth0 API audience |
Gateway WebSocket
| Variable | Default | Description |
|---|
VITE_GATEWAY_URL | ws://127.0.0.1:8001/ws in Fabric PM2 | WebSocket URL for web client |
External Integrations
| Variable | Description |
|---|
GITHUB_APP_ID | GitHub App ID |
GITHUB_APP_PRIVATE_KEY | GitHub App private key |
GITHUB_WEBHOOK_SECRET | Webhook signature secret |
Observability
| Variable | Description |
|---|
OTEL_EXPORTER_OTLP_ENDPOINT | OpenTelemetry collector endpoint |
OTEL_SERVICE_NAME | Service name for traces (default: diminuendo) |
AppConfig
The AppConfig TypeScript module enforces fail-closed production safety: missing required config in production mode causes startup failure rather than falling back to defaults. In dev mode, sensible defaults are used.
30+ configurable parameters covering:
- Server settings (port, timeouts, CORS)
- Auth settings (Auth0, dev mode)
- Upstream service URLs
- Rate limiting thresholds
- Database settings (WAL mode, busy timeout)
- Security settings (CSRF, SSRF, headers)
