Configuration
Some settings are deployment configuration. They are not forms in the admin portal. Set them in the environment, user secrets, or the host configuration before the process starts. Do not commit real secrets.
Identity
| Setting | Purpose |
|---|---|
Identity:Authority | OIDC issuer. Required. Empty does not open the portal. |
Identity:ClientSecret | Admin client secret. Admin will not start without it. |
Identity:Audience | mursil-api |
Mursil:DevIssuer | Default false. Local hosts set it true to start the demo issuer. |
Docker equivalents are IDENTITY_AUTHORITY, IDENTITY_CLIENT_SECRET, IDENTITY_AUDIENCE, and MURSIL_DEV_ISSUER.
Tenancy and edition
| Setting | Purpose |
|---|---|
Mursil:MultiTenancy | Default false. See Identity and tenancy. Docker: MURSIL_MULTI_TENANCY or Mursil__MultiTenancy. |
Mursil:Edition | Optional Standard or Enterprise entitlement flags for max apps, failover, and extra providers. Unset means unrestricted. There is no billing meter. |
Delivery
| Setting | Purpose |
|---|---|
Email:Smtp | Local SMTP. Point this at Mailpit in development. A later sender is the same shape with a different host and port. |
Mursil:Tracking | HMAC key material for signed preference and tracking links. |
Mursil:Integration | Client-credentials settings for the Mursil.Integration package. |
Provider credentials are not configuration values pasted into a portal field as raw secrets. A provider connection stores env:NAME or secret:path. The environment or secret store holds the value.
What the portal does configure
After the process is up, operators use the portal for brand profiles, template versions, provider connections, sender domains, sandbox mode, send rate, the default provider, engagement tracking, and suppression import. Those are product data, not host boot settings.
Published images
A published deployment sets MURSIL_DEV_ISSUER=false and IDENTITY_AUTHORITY. The dev issuer is not one of the published tags. Pulling docker.io/imabdul/mursil requires a Docker Hub login that can see that private repository. Tags are server, admin, and migrator, plus the same names suffixed -0.1.0-preview.1.