Server settings
Every setting below is read once at startup and requires a restart to change.
Built-in defaults are overridden by nonempty environment values.
Unknown FANOUT_ names fail startup; platform-injected service names are tolerated.
Custom names use FANOUT_ plus a clear name, adding the area only when it clarifies.
Vendor credentials and endpoints keep the vendor’s documented names.
| Environment variable | Type | Default |
|---|---|---|
FANOUT_ADDR | string | 127.0.0.1:7520 |
FANOUT_PPROF_ENABLED | boolean | false |
FANOUT_PUBLIC_URL | string | — |
FANOUT_TLS_CERT_FILE | string | — |
FANOUT_TLS_KEY_FILE | string | — |
FANOUT_TRUSTED_PROXY_CIDRS | string | — |
FANOUT_ADDR
Section titled “FANOUT_ADDR”Binds the browser, API, MCP, OTLP/gRPC and OTLP/HTTP listener.
FANOUT_PPROF_ENABLED
Section titled “FANOUT_PPROF_ENABLED”Exposes Go’s net/http/pprof handlers at /debug/pprof/* for CPU/heap/mutex/goroutine profiling under load. Off by default; the routes require an admin browser session with operations:read.
FANOUT_PUBLIC_URL
Section titled “FANOUT_PUBLIC_URL”Sets the external browser origin. Required for OIDC; HTTPS is required with MCP.
FANOUT_TLS_CERT_FILE
Section titled “FANOUT_TLS_CERT_FILE”Selects the TLS certificate file; requires FANOUT_TLS_KEY_FILE.
FANOUT_TLS_KEY_FILE
Section titled “FANOUT_TLS_KEY_FILE”Selects the TLS private key file; requires FANOUT_TLS_CERT_FILE.
FANOUT_TRUSTED_PROXY_CIDRS
Section titled “FANOUT_TRUSTED_PROXY_CIDRS”Lists trusted proxy networks, separated by commas; empty trusts no forwarded client addresses.