Skip to main content

Environment Variables Reference

Runtime environment variables used by the AuroraSOC codebase.

Core application​

VariableDefaultDescription
ENVIRONMENTdevelopmentRuntime environment: development, staging, production
DEBUGfalseEnable debug mode with verbose logging and auto-reload
LOG_LEVELINFOLogging level: DEBUG, INFO, WARNING, ERROR
SYSTEM_MODEdry_runRuntime guardrail mode: dry_run or real

LLM provider​

VariableDefaultDescription
LLM_BACKENDvllmInference backend: vllm or ollama
VLLM_MODELgranite-soc-specialistvLLM specialist model
VLLM_ORCHESTRATOR_MODELgranite-soc-specialistvLLM orchestrator model
VLLM_BASE_URLhttp://vllm:8000/v1vLLM instance URL
OLLAMA_MODELgranite4:8bOllama specialist model
OLLAMA_ORCHESTRATOR_MODELgranite4:8bOllama orchestrator model. Keep equal to OLLAMA_MODEL for single-model local deployments.
OLLAMA_BASE_URLhttp://ollama:11434Ollama instance URL

Local single-model controls​

VariableDefaultDescription
GRANITE_SINGLE_MODEL_MODEtrueForces all agents to resolve to the same model tag
GRANITE_USE_SHARED_MODEL_POOLtrueReuses ChatModel instances for identical backend/model/provider tuples
GRANITE_MAX_CONCURRENT_REQUESTS1Recommended local inference concurrency. Keep at 1 on 8 GB VRAM.
GRANITE_INFERENCE_TIMEOUT_SECONDS180Per-request timeout for local LLM inference

PostgreSQL​

VariableDefaultDescription
PG_HOSTpostgresPostgreSQL hostname
PG_PORT5432PostgreSQL port
PG_USERaurorasocDatabase user
PG_PASSWORDRequired in composeDatabase password
PG_DATABASEaurorasocDatabase name
PG_POOL_SIZE20SQLAlchemy connection pool size
PG_MAX_OVERFLOW10Extra connections beyond pool size
PG_SSLMODEpreferSSL mode: disable, prefer, require, verify-ca, verify-full

Redis​

VariableDefaultDescription
REDIS_URLredis://redis:6379Direct connection URL

NATS JetStream​

VariableDefaultDescription
NATS_URLnats://localhost:4222NATS server URL
NATS_STREAM_NAMEAURORAJetStream stream name
NATS_CONNECT_TIMEOUT_SECONDS5.0Initial NATS connection deadline

MQTT​

VariableDefaultDescription
MQTT_HOSTmosquittoMQTT broker hostname
MQTT_PORT8883MQTT broker port (mTLS-first)
MQTT_USERNAMENoneMQTT username (optional)
MQTT_PASSWORDNoneMQTT password (optional)
MQTT_TOPIC_PREFIXauroraMQTT topic prefix

HashiCorp Vault​

VariableDefaultDescription
VAULT_ADDRhttp://vault:8200Vault server URL
VAULT_TOKENNoneVault access token
VAULT_KV_MOUNTsecretKV-v2 secrets mount path
VAULT_PKI_MOUNTpki_iotPKI mount path

Authentication​

VariableDefaultDescription
JWT_SECRET_KEYRequired, 32+ charsJWT signing secret
JWT_EXPIRY_HOURS24Token lifetime in hours
API_SERVICE_KEYRequiredBootstrap API key for service auth

Approval policy​

VariableDefaultDescription
APPROVAL_EXPIRES_MINUTES30Default expiration for human approval requests
APPROVAL_WAIT_TIMEOUT_SECONDS300Default wait timeout for approval polling
APPROVAL_POLL_INTERVAL_SECONDS5Poll interval for approval decision checks

Observability​

VariableDefaultDescription
OTEL_EXPORTER_ENDPOINThttp://otel-collector:4317OTLP gRPC endpoint
OTEL_SERVICE_NAMEaurorasocService name in traces
OTEL_PROMETHEUS_PORT9090Prometheus metrics port

Agent deployment​

VariableDefaultDescription
A2A_DISCOVERY_MODEcomposeAgent service discovery: compose or k8s
A2A_CLIENT_HOSTNoneGlobal override for all A2A target hostnames
ENABLED_AGENTSallComma-separated specialist agent names, or all

Fleet runtime orchestrator​

VariableDefaultDescription
FLEET_RUNTIME_ORCHESTRATORcomposeRuntime backend: compose, noop, or k8s
FLEET_COMPOSE_BINAuto-detectedPath to docker or podman binary
FLEET_COMPOSE_PROJECTaurorasocDocker Compose project name
FLEET_COMPOSE_PROJECT_DIRECTORY.Directory containing the Compose file
FLEET_COMPOSE_FILEinfra/compose/docker-compose.ymlPath to Compose file
FLEET_AUTOSCALER_ENABLEDfalseEnable fleet autoscaling
FLEET_AUTOSCALER_INTERVAL_SECONDS20Autoscaler evaluation interval
FLEET_RECONCILE_INTERVAL_SECONDS15Fleet reconciler loop interval
FLEET_PROBE_INTERVAL_SECONDS30Agent health probe interval
FLEET_CONTAINER_LABEL_PREFIXaurorasoc.fleetPrefix for container labels used in fleet discovery

Suricata IDS/IPS​

VariableDefaultDescription
SURICATA_MODEreplayIngest mode: replay (PCAP) or live (af-packet)
SURICATA_HOME_NET[10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,127.0.0.1/32]CIDRs considered internal by Suricata
SURICATA_EXTERNAL_NET!$HOME_NETInverse address group for external traffic
SURICATA_CAPTURE_INTERFACENoneNIC used in live mode
SURICATA_INTERFACENoneAlternative NIC name, overrides SURICATA_CAPTURE_INTERFACE
SURICATA_PCAP_FILE/pcaps/sample.pcapPCAP path inside container (replay mode)

GPU and vLLM tuning​

VariableDefaultDescription
VLLM_GPU_MEMORY_UTIL0.90Fraction of GPU VRAM for KV-cache. Reduce if OOM.
VLLM_MAX_MODEL_LEN8192Maximum sequence length. Lower uses less VRAM.
CUDA_VISIBLE_DEVICESUnsetGPU index for vLLM container. Unset uses all GPUs.

To validate all loaded settings, start the API with DEBUG=true:

DEBUG=true python -m aurorasoc.api.main

Settings are printed at INFO level during startup.