Parameters
The Parameters tab is a raw view of the database's parameter table — but it shows only the parameters that don't yet have their own, more convenient screen elsewhere in the panel.
What's left here and why
Most configuration has moved to dedicated pages: Branding, Settings, Cryptographic keys, and DEMO licence configuration in Licences. What's left here is just the SMTP parameters and the rate limit — for now, without their own screen.
SMTP parameters
| Parameter | Description |
|---|---|
MAIL_HOST | Address of the SMTP server used to send all transactional emails. If empty, email sending is disabled. |
MAIL_PORT | SMTP server port (e.g. 587 for a STARTTLS connection). |
MAIL_USER | Username for authenticating with the SMTP server. |
MAIL_PASS | Password for authenticating with the SMTP server — a write-only value, never displayed. |
MAIL_FROM | Sender email address shown in the "From" field of sent emails. |
MAIL_SENDER_NAME | Sender name displayed next to the "From" address. |
MAIL_SMTP_STARTTLS | Whether the connection to the SMTP server uses STARTTLS encryption (true / false). |
MAIL_EXPIRY_WARNING_DAYS | A comma-separated list of days before licence expiration at which a reminder email is sent (e.g. 30,7). |
See Mail templates to change the content of the messages themselves.
Request rate limit
RATE_LIMIT_OPEN_RPM — the maximum number of requests per minute from a single IP address for public, unauthenticated endpoints (shop, licence lookup/activation, self-service DEMO issuance). Protects these endpoints from abuse, since they don't require login.
The limit is keyed on the address of the connecting peer. Behind a reverse proxy, the server takes the client address from X-Forwarded-For only when the proxy is on a private network (Tomcat's default internal-proxies); if your proxy has a public address, list it in SERVER_TOMCAT_REMOTEIP_INTERNAL_PROXIES, otherwise all clients share the proxy's bucket. A X-Forwarded-For header sent by a client directly is ignored.
TRANSFER_INIT_COOLDOWN_SECONDS (default 60) — the minimum time between licence-transfer requests for the same licence key. Within it, further requests send no email and change nothing, so a licence owner can't be flooded with confirmation emails or have a pending transfer cancelled by repeated requests.
Editing and write-only values
Clicking Edit next to a parameter opens a modal with the name (read-only) and a value field. Parameters marked as write-only (e.g. MAIL_PASS) show ••••••• (write-only) in the list instead of a value, and the button is called Overwrite instead of Edit — you can't see the current value, only replace it with a new one.