Edit: CRM-APP-CONFIGURATION

Update credentials and security toggles. Active configuration is consumed by the Internal API middleware.

Back
Copy for Other App (.env)
Paste these lines into the executor app's .env file. Treat secrets as confidential. 

    





    

                    
    
    

        

            
1. General

        

        

            

                

                    
                    
                    
Friendly label, e.g. "Production Executor" or "Staging Executor".

                                    


                

                    
                    
                    
Leave blank to auto-generate from the name.

                                    


                

                    
                    
                

            

        

    


    
    

        

            
2. Security Toggles

        

        

            

                
                                    

                        

                            
                            
                            
                        

                        
Reject calls from any IP not in the trusted list.

                    

                                    

                        

                            
                            
                            
                        

                        
Require X-API-Key header on every internal request.

                    

                                    

                        

                            
                            
                            
                        

                        
Require signed request payloads with replay protection.

                    

                            

        

    


    
    

        

            
3. Trusted Network

        

        

            
            
            

                Comma- or newline-separated list of trusted IPs / CIDR blocks.
                Empty value rejects all traffic (fail-closed) when IP check is on.
            

                    

    


    
    

        

            
4. API Credentials

            
        

        

            

            

            

                Comma- or newline-separated keys. Send via header X-API-Key: <key>.
                                    An encrypted value is already set.
                    Leave blank to keep it.
                            

                    

    


    
    

        

            
5. HMAC Security

            
        

        

            

                

                    
                    
                    

                        Shared secret used to sign request payloads (HMAC-SHA256).
                                                    An encrypted secret is already set.
                            Leave blank to keep it.
                                            

                                    


                

                    
                    
                    
Max clock skew between client and server. 300 = 5 min.

                                    

            

        

    


    
    

        

            
6. Feature Access

        

        

            

                

                    

                        
                        
                        
                    

                    
Master switch for the AI Calling feature in the executor app.

                


                

                    

                        
                        
                        
                    

                    
Allow signed browser SSO landings on /automation/* using the HMAC Secret above.

                


                

                    

                        
                        
                        
                    

                    
Only one configuration may be active. Activating this one deactivates the rest.

                

            

        

    


    
    

        
             Cancel