Configuration

Configuration

All configuration is via environment variables. Pass them in .env, in your docker-compose.override.yml, or directly in the shell.

Orchestrator (GLOOM_*)

Variable	Default	Description
GLOOM_DEBUG	false	SQLAlchemy query logging
GLOOM_API_PORT	8000	FastAPI port
GLOOM_PROXY_HOST	0.0.0.0	Proxy bind host
GLOOM_PROXY_PORT	8080	Proxy port
GLOOM_DB_URL	sqlite+aiosqlite:///./gloomproxy.db	Database URL
GLOOM_CORS_ORIGINS	["http://localhost:3000"]	CORS origins (JSON list)
GLOOM_REDIS_URL	(empty)	Redis URL — enables cluster mode when set
GLOOM_SECRET_KEY	(empty)	Fernet key for credential encryption at rest

Worker (WORKER_*)

Variable	Default	Description
WORKER_ORCHESTRATOR_URL	http://localhost:8000	Orchestrator base URL
WORKER_REDIS_URL	redis://localhost:6379	Redis URL for job queue
WORKER_MAX_CONCURRENT	4	Max parallel scanner jobs
WORKER_WORKER_ID	(hostname)	Override auto-generated worker ID
WORKER_TAGS	(empty)	Comma-separated capability tags
WORKER_ISOLATION_MODE	asyncio	Plugin isolation: asyncio / subprocess / container
WORKER_PLUGIN_TRUST	(empty)	Comma-separated name:level pairs — e.g. breachsql:core,third-party:community. Unlisted → experimental.
WORKER_CONTAINER_IMAGE_PREFIX	gloomproxy-plugin	Docker image prefix for container isolation
WORKER_CONTAINER_NETWORK	bridge	Docker network mode for container isolation

Frontend (NEXT_PUBLIC_*)

Variable	Default	Description
NEXT_PUBLIC_API_URL	http://localhost:8000/api	REST API base URL
NEXT_PUBLIC_WS_URL	ws://localhost:8000/ws/events	WebSocket URL