Configuration

Health endpoint: /actuator/health
Prometheus metrics: /actuator/prometheus

Plugwerk is configured via environment variables. All Plugwerk-specific variables use the PLUGWERK_ prefix.

Required Environment Variables

Variable	Description
`PLUGWERK_JWT_SECRET`	HMAC signing key for JWT tokens (min 32 characters)
`PLUGWERK_ENCRYPTION_KEY`	AES key for OIDC client secrets (exactly 16 characters)

Variable	Default	Description
`PLUGWERK_DB_URL`	`jdbc:postgresql://localhost:5432/plugwerk`	JDBC connection URL
`PLUGWERK_DB_USERNAME`	`plugwerk`	Database username
`PLUGWERK_DB_PASSWORD`	`plugwerk`	Database password

Example:

export PLUGWERK_DB_URL=jdbc:postgresql://db:5432/plugwerk
export PLUGWERK_DB_USERNAME=plugwerk
export PLUGWERK_DB_PASSWORD=secret

Variable	Default	Description
`PLUGWERK_STORAGE_TYPE`	`fs`	Storage backend (`fs` for filesystem)
`PLUGWERK_STORAGE_ROOT`	`/var/plugwerk/artifacts`	Directory for uploaded plugin artifacts

Variable	Default	Description
`PLUGWERK_AUTH_ADMIN_PASSWORD`	(random)	Fixed initial superadmin password
`PLUGWERK_TRACKING_ENABLED`	`true`	Enable download event audit log
`PLUGWERK_TRACKING_CAPTURE_IP`	`true`	Capture client IP in download events
`PLUGWERK_TRACKING_ANONYMIZE_IP`	`true`	Anonymize IPs to /24 (IPv4) or /48 (IPv6)
`PLUGWERK_TRACKING_CAPTURE_USER_AGENT`	`true`	Capture User-Agent header