Skip to main content

Configuration

This page is the short canonical map for repo-owned runtime and integration inputs.

Primary Sources​

  • .env.example
  • infra/compose/docker-compose.yml
  • infra/compose/docker-compose.low-cpu.yml
  • docs/STACK_CONTRACT.md
  • docs/contracts/*.json

Core Runtime​

  • COMPOSE_PROJECT_NAME
  • JHF_SPINDLE_SITE
  • SITES_VOLUME, SITES_ASSETS_VOLUME, DB_VOLUME, REDIS_CACHE_VOLUME
  • FRONTEND_PORT
  • MCP_GATEWAY_PORT
  • DB_HEALTHCHECK_INTERVAL
  • FRAPPE_QUEUE_WORKER_MODE

MCP / Operator Surface​

  • JHF_SPINDLE_MCP_API_KEY
  • JHF_SPINDLE_MCP_SMOKE_API_KEY

Callback / Integration Security​

  • N8N_HIL_SHARED_SECRET
  • N8N_HIL_CALLBACK_URL
  • N8N_HIL_PAYMENT_RUN_WEBHOOK_URL
  • N8N_HIL_CONTRACT_WEBHOOK_URL
  • N8N_HIL_PAYROLL_WEBHOOK_URL
  • N8N_HIL_TAX_FILING_WEBHOOK_URL
  • N8N_HIL_GENERIC_WEBHOOK_URL
  • N8N_JOB_RESULT_SHARED_SECRET
  • N8N_SHARED_SECRET
  • WEFT_WORKSPACE_SHARED_SECRET
  • WEFT_WORKSPACE_TRUSTED_CALLER
  • PADDLE_WEBHOOK_SECRET
  • STRIPE_WEBHOOK_SECRET
  • OPENCLAW_HOOK_TOKEN

The N8N_HIL_* callback and webhook family is the canonical runtime surface for successor continuity between arbitrary task steps. If these keys are not materialized into the live Spindle runtime, an approval can resolve locally while the next admitted task cannot resume deterministically.

Critical n8n HiL callback templates must read N8N_HIL_SHARED_SECRET from the runtime environment through $env.N8N_HIL_SHARED_SECRET. The example JSON templates must never contain a literal or committed placeholder secret. Host activation remains fail-closed until the runtime exports the admitted secret and the imported workflow readback proves the same callback contract.

Optional Zammad / OIDC Lanes​

  • ZAMMAD_*
  • FRAPPE_OIDC_*
  • ZAMMAD_OIDC_*
  • ZAMMAD_EXTRA_COMPOSE_FILES (space-separated host-local override files)

Verify Path​

python infra/scripts/check_compatibility_contracts.py --check
python infra/scripts/export_fabric_metadata.py --check
python infra/scripts/verify_runtime_materialization.py --output artifacts/evidence/runtime-materialization.json
python maintenance/verify_oss_inventory_version_truth.py --output test-results/oss-version-truth.verify.workspace.json

License notice: AGPLv3 (GNU Affero General Public License v3.0) Website: https://helpifyr.com