Skip to content

Configuration

Tessera is configured via environment variables.

Required Variables

Variable Description Example
DATABASE_URL Database connection string postgresql+asyncpg://user:pass@localhost:5432/tessera

Core Settings

Environment

Variable Description Default
ENVIRONMENT Environment name (development, production) development
AUTO_CREATE_TABLES Auto-create DB tables on startup (set false in prod) true

Authentication

Variable Description Default
SESSION_SECRET_KEY Secret for session signing (min 32 chars) Dev default (change in prod!)
BOOTSTRAP_API_KEY Initial admin API key for setup None
AUTH_DISABLED Disable auth (dev only) false

CORS

Variable Description Default
CORS_ORIGINS Comma-separated allowed origins http://localhost:3000,http://localhost:5173
CORS_ALLOW_METHODS Allowed HTTP methods GET,POST,PATCH,DELETE,OPTIONS

Webhooks

Variable Description Default
WEBHOOK_URL URL for webhook delivery None
WEBHOOK_SECRET HMAC secret for signing payloads None
SLACK_WEBHOOK_URL Slack webhook for notifications None

Caching

Variable Description Default
REDIS_URL Redis connection for caching None (disabled)
CACHE_TTL Default cache TTL in seconds 300
CACHE_TTL_CONTRACT Contract cache TTL 600
CACHE_TTL_ASSET Asset cache TTL 300
CACHE_TTL_TEAM Team cache TTL 300
CACHE_TTL_SCHEMA Schema cache TTL 3600

Rate Limiting

Variable Description Default
RATE_LIMIT_ENABLED Enable rate limiting true
RATE_LIMIT_READ Read endpoint limit 1000/minute
RATE_LIMIT_WRITE Write endpoint limit 100/minute
RATE_LIMIT_ADMIN Admin endpoint limit 50/minute
RATE_LIMIT_GLOBAL Global limit per client 5000/minute

Resource Constraints

Variable Description Default
MAX_SCHEMA_SIZE_BYTES Maximum schema size 1000000 (1MB)
MAX_SCHEMA_PROPERTIES Maximum properties in schema 1000
MAX_FQN_LENGTH Maximum FQN length 1000
MAX_TEAM_NAME_LENGTH Maximum team name length 255

Pagination

Variable Description Default
PAGINATION_LIMIT_DEFAULT Default page size 50
PAGINATION_LIMIT_MAX Maximum page size 100

Impact Analysis

Variable Description Default
IMPACT_DEPTH_DEFAULT Default dependency depth 5
IMPACT_DEPTH_MAX Maximum dependency depth 10

Database Connection Pool

Variable Description Default
DB_POOL_SIZE Base connection pool size 20
DB_MAX_OVERFLOW Additional connections under load 10
DB_POOL_TIMEOUT Connection wait timeout (seconds) 30
DB_POOL_RECYCLE Connection recycle time (seconds) 3600

Example .env File

# Environment
ENVIRONMENT=production

# Database
DATABASE_URL=postgresql+asyncpg://tessera:tessera@localhost:5432/tessera

# Security
SESSION_SECRET_KEY=your-super-secret-key-at-least-32-characters-long
BOOTSTRAP_API_KEY=tsk_bootstrap_key_for_initial_setup

# Webhooks
WEBHOOK_URL=https://your-service.com/webhooks/tessera
WEBHOOK_SECRET=your-webhook-signing-secret

# Optional: Redis caching
REDIS_URL=redis://localhost:6379/0

# Optional: Slack notifications
SLACK_WEBHOOK_URL=https://hooks.slack.com/services/...

# Rate limiting
RATE_LIMIT_ENABLED=true
RATE_LIMIT_WRITE=100/minute

Docker Compose Override

For local development, create docker-compose.override.yml:

services:
  api:
    environment:
      - ENVIRONMENT=development
      - AUTH_DISABLED=true
    volumes:
      - ./src:/app/src

Production Recommendations

  1. Use strong secrets: Generate SESSION_SECRET_KEY with: 

    python -c "import secrets; print(secrets.token_urlsafe(32))"

  2. Enable HTTPS: Use a reverse proxy (nginx, Caddy) with TLS

  3. Set up Redis: For caching in multi-instance deployments

  4. Configure backups: Regular PostgreSQL backups

  5. Set resource limits: Configure MAX_SCHEMA_SIZE_BYTES based on your needs

  6. Enable rate limiting: Keep RATE_LIMIT_ENABLED=true in production

  7. Secure webhooks: Always set WEBHOOK_SECRET for HMAC signing

  8. Monitor logs: Tessera logs to stdout in JSON format