Reference
Configuration reference
Environment variables and key generation.
config/connectivity.php. Nothing partner-specific
belongs here — credentials live in connectivity_credentials so that onboarding
a partner is an operations action, not a deploy.
| Env var | Default | Meaning |
|---|---|---|
CONNECTIVITY_ENV | sandbox | Which credential environment this deployment accepts. sandbox on staging, production on live |
CONNECTIVITY_SIGNATURE_TOLERANCE | 300 | Accepted clock skew, seconds. Every extra second is replay window |
CONNECTIVITY_RATE_LIMIT | 300 | Authenticated requests/minute, per key |
CONNECTIVITY_RATE_LIMIT_ANON | 30 | Unauthenticated requests/minute, per IP |
CONNECTIVITY_LOG_ENABLED | true | Write the access log |
CONNECTIVITY_LOG_SUCCESS | true | Log successes too. Set false to keep only failures |
CONNECTIVITY_LOG_RETENTION_DAYS | 90 | Access log retention |
Key generation: 12-byte key id (24 hex chars after the prefix), 32-byte secret
(64 hex chars), 32-byte signing secret. Prefixes slk_test_ / slk_live_ make
a leaked key recognisable in a log and say which environment it belongs to
without a database lookup.