Environment Variables Reference
Complete reference of all environment variables recognized by AuroraSOC, organized by subsystem.
Core Application
| Variable | Default | Description |
|---|---|---|
AURORA_APP_NAME | AuroraSOC | Application name (used in logs, metrics) |
AURORA_DEBUG | false | Enable debug mode (verbose logging, auto-reload) |
AURORA_LOG_LEVEL | INFO | Logging level: DEBUG, INFO, WARNING, ERROR |
LLM Provider
| Variable | Default | Description |
|---|---|---|
AURORA_LLM_MODEL | gpt-4o | LLM model identifier |
AURORA_LLM_BASE_URL | https://api.openai.com/v1 | LLM API base URL |
AURORA_LLM_API_KEY | — | LLM API authentication key |
AURORA_LLM_TEMPERATURE | 0.1 | Sampling temperature (0.0–2.0) |
AURORA_LLM_MAX_TOKENS | 4096 | Maximum response tokens |
Provider Examples
OpenAI:
AURORA_LLM_MODEL=gpt-4o
AURORA_LLM_BASE_URL=https://api.openai.com/v1
AURORA_LLM_API_KEY=sk-...
Anthropic (via compatible API):
AURORA_LLM_MODEL=claude-sonnet-4-20250514
AURORA_LLM_BASE_URL=https://api.anthropic.com/v1
AURORA_LLM_API_KEY=sk-ant-...
Local Ollama:
AURORA_LLM_MODEL=llama3
AURORA_LLM_BASE_URL=http://localhost:11434/v1
AURORA_LLM_API_KEY=not-needed
PostgreSQL
| Variable | Default | Description |
|---|---|---|
AURORA_PG_HOST | localhost | PostgreSQL hostname |
AURORA_PG_PORT | 5432 | PostgreSQL port |
AURORA_PG_USER | aurora | Database user |
AURORA_PG_PASSWORD | aurora | Database password |
AURORA_PG_DATABASE | aurorasoc | Database name |
Redis
| Variable | Default | Description |
|---|---|---|
AURORA_REDIS_HOST | localhost | Redis hostname |
AURORA_REDIS_PORT | 6379 | Redis port |
AURORA_REDIS_PASSWORD | — | Redis password (optional) |
AURORA_REDIS_DB | 0 | Redis database number |
NATS JetStream
| Variable | Default | Description |
|---|---|---|
AURORA_NATS_URL | nats://localhost:4222 | NATS server URL |
AURORA_NATS_STREAM_NAME | AURORA | JetStream stream name |
MQTT
| Variable | Default | Description |
|---|---|---|
AURORA_MQTT_HOST | localhost | MQTT broker hostname |
AURORA_MQTT_PORT | 1883 | MQTT broker port |
AURORA_MQTT_USERNAME | — | MQTT username (optional) |
AURORA_MQTT_PASSWORD | — | MQTT password (optional) |
AURORA_MQTT_TOPIC_PREFIX | aurora/sensors | MQTT topic prefix |
Qdrant
| Variable | Default | Description |
|---|---|---|
AURORA_QDRANT_HOST | localhost | Qdrant hostname |
AURORA_QDRANT_PORT | 6333 | Qdrant HTTP port |
AURORA_QDRANT_COLLECTION_PREFIX | aurora_ | Collection name prefix |
HashiCorp Vault
| Variable | Default | Description |
|---|---|---|
AURORA_VAULT_URL | http://localhost:8200 | Vault server URL |
AURORA_VAULT_TOKEN | — | Vault access token |
AURORA_VAULT_MOUNT_PATH | secret | KV secrets mount path |
Authentication
| Variable | Default | Description |
|---|---|---|
AURORA_JWT_SECRET | — | Required. JWT signing secret (≥32 chars) |
AURORA_JWT_ALGORITHM | HS256 | JWT signing algorithm |
AURORA_JWT_EXPIRATION | 28800 | Token lifetime in seconds |
A2A Agent Ports
| Variable | Default | Description |
|---|---|---|
AURORA_A2A_ORCHESTRATOR_PORT | 9000 | Orchestrator service port |
AURORA_A2A_SECURITY_ANALYST_PORT | 9001 | Security Analyst port |
AURORA_A2A_THREAT_HUNTER_PORT | 9002 | Threat Hunter port |
AURORA_A2A_INCIDENT_RESPONDER_PORT | 9003 | Incident Responder port |
AURORA_A2A_THREAT_INTEL_PORT | 9004 | Threat Intel port |
AURORA_A2A_NETWORK_SECURITY_PORT | 9005 | Network Security port |
AURORA_A2A_ENDPOINT_SECURITY_PORT | 9006 | Endpoint Security port |
AURORA_A2A_MALWARE_ANALYST_PORT | 9007 | Malware Analyst port |
AURORA_A2A_FORENSIC_ANALYST_PORT | 9008 | Forensic Analyst port |
AURORA_A2A_COMPLIANCE_ANALYST_PORT | 9009 | Compliance Analyst port |
AURORA_A2A_VULNERABILITY_MANAGER_PORT | 9010 | Vulnerability Manager port |
AURORA_A2A_CLOUD_SECURITY_PORT | 9011 | Cloud Security port |
AURORA_A2A_UEBA_ANALYST_PORT | 9012 | UEBA Analyst port |
AURORA_A2A_WEB_SECURITY_PORT | 9013 | Web Security port |
AURORA_A2A_CPS_SECURITY_PORT | 9014 | CPS Security port |
AURORA_A2A_REPORT_GENERATOR_PORT | 9015 | Report Generator port |
Observability
| Variable | Default | Description |
|---|---|---|
AURORA_OTEL_OTLP_ENDPOINT | http://otel-collector:4317 | OTLP gRPC endpoint |
AURORA_OTEL_SERVICE_NAME | aurorasoc | Service name in traces |
AURORA_OTEL_PROMETHEUS_PORT | 9090 | Prometheus metrics port |
MCP
| Variable | Default | Description |
|---|---|---|
AURORA_MCP_REGISTRY_PORT | 8001 | MCP tool registry port |
Quick Validation
Check all loaded settings by starting the API with AURORA_DEBUG=true:
AURORA_DEBUG=true python -m aurorasoc.api.main
Settings will be printed at INFO level during startup.