Configuration¶
Main Configuration Sources¶
BabelSuite currently uses three main configuration layers:
.envfor process settingsconfiguration.yamlfor platform settingsbabelsuite-profiles.yamlfor stored profile records managed through the API
.env¶
The repo root .env covers:
Application¶
PORTFRONTEND_URLVITE_API_URLJWT_SECRETADMIN_EMAILADMIN_PASSWORD
Datastore¶
DB_DRIVERMONGO_URIMONGO_DBPOSTGRES_DSN
Platform files¶
PLATFORM_SETTINGS_FILEPROFILES_FILEAGENT_RUNTIME_FILE
Cache¶
REDIS_ADDRREDIS_PASSWORDREDIS_DBREDIS_PREFIXCACHE_TTL_*
Demo mode¶
BABELSUITE_ENABLE_DEMO
Local auth and SSO¶
AUTH_PASSWORD_LOGIN_ENABLEDAUTH_SIGNUP_ENABLEDOIDC_ENABLEDOIDC_PROVIDER_IDOIDC_PROVIDER_NAMEOIDC_ISSUER_URLOIDC_CLIENT_IDOIDC_CLIENT_SECRETOIDC_REDIRECT_URLOIDC_FRONTEND_CALLBACK_URLOIDC_SCOPESOIDC_PKCE_ENABLEDOIDC_EMAIL_CLAIMOIDC_NAME_CLAIMOIDC_GROUPS_CLAIMOIDC_ADMIN_GROUPSAUTH_STATE_SECRET
Telemetry¶
OTEL_EXPORTER_OTLP_ENDPOINTOTEL_SERVICE_NAMEOTEL_EXPORTER_OTLP_INSECUREOTEL_EXPORTER_OTLP_HEADERSOTEL_RESOURCE_ATTRIBUTES
configuration.yaml¶
The platform settings file defines the control plane’s physical execution environment.
Current top-level sections:
modedescriptionagentsregistriessecrets
Agents¶
An agent entry defines one execution target, for example:
- local Docker
- remote worker pool
- Kubernetes runner
Important fields include:
agentIdnametypeenableddefaultroutingTagsdockerSockethostUrlkubeconfigPathtargetNamespace
Registries¶
Registry entries drive the catalog.
Important fields include:
registryIdnameproviderregistryUrlrepositoryScopesyncStatus
Secrets¶
The secrets section defines the shared secrets provider and global overrides.
Important fields include:
providervaultAddressvaultNamespacevaultRoleawsRegionsecretPrefixglobalOverrides
Demo Mode vs Workspace Mode¶
If BABELSUITE_ENABLE_DEMO=true:
- demo files under
demo/are used
If BABELSUITE_ENABLE_DEMO=false:
- suites come from
examples/oci-suites/ - platform settings come from
configuration.yaml - the app behaves like a real workspace/control-plane setup
Backend Selection¶
Execution backends come from platform settings. If no enabled platform backends are available, the execution service falls back to a local backend binding.
Recommended Local Defaults¶
For a local workstation setup:
- MongoDB as the primary datastore
- Redis enabled if available
- one default local execution agent
- one local registry entry for package discovery
- local auth enabled
- OIDC off until an issuer is available