Lp Api Proxy

Learn about configurations >

• allow-permission | string

  Comma-separated list of Launchpad allow_permission values passed to +authorize-token during the OAuth login flow (e.g. READ_PUBLIC, WRITE_PUBLIC, READ_PRIVATE, WRITE_PRIVATE). Empty string omits the parameter and lets Launchpad use its own default.

• allowed-origins | string

  Comma-separated origins used for CORS allowlist and enforced redirect_uri origin checks in /oauth2/login. Empty means allow all origins.

• http-proxy | string

  Optional HTTP proxy URL for apt/pip/runtime outbound requests.

• https-proxy | string

  Optional HTTPS proxy URL for apt/pip/runtime outbound requests.

• listen-host | string

  Default: 0.0.0.0

  Listen host for uvicorn.

• listen-port | int

  Default: 3456

  Listen port for uvicorn.

• login-session-ttl-seconds | int

  Default: 600

  Login session token lifetime in seconds.

• no-proxy | string

  Optional NO_PROXY list (comma-separated hosts/domains/CIDRs).

• proxy-base-url | string

  Public issuer base URL; auto-derived from unit private address when empty.

• proxy-code-ttl-seconds | int

  Default: 120

  Authorization code lifetime in seconds.

• proxy-jwt-audience | string

  Default: concourse-ci

  Access-token audience claim.

• proxy-jwt-encryption-key | string

  Fernet key; auto-generated when empty.

• proxy-jwt-issuer | string

  Optional issuer claim override.

• proxy-jwt-secret | string

  HS256 signing secret; auto-generated when empty.

• proxy-jwt-ttl-seconds | int

  Default: 2592000

  Access-token lifetime in seconds.

• proxy-oidc-client-id | string

  Default: concourse-ci

  Expected OAuth/OIDC client id.

• proxy-oidc-client-secret | string

  Optional OAuth/OIDC client secret for confidential clients.

• proxy-rsa-private-key | string

  Optional PEM RSA private key for stable RS256 id_token signing.