trusted-server/.env.example at main · IABTechLab/trusted-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# Trusted Server development environment variables
# Copy this file to .env.dev, .env.staging, or .env.production and fill in
# non-secret values. App-config secrets are key names in the pushed blob and
# their values belong in the platform secret store; see the configuration guide.
# For Axum runtime loading, export the config blob as:
# TRUSTED_SERVER_CONFIG_TRUSTED_SERVER_CONFIG_TRUSTED_SERVER_CONFIG=<blob-envelope-json>
# and export one secret per key name as:
# TRUSTED_SERVER_SECRET_TRUSTED_SERVER_SECRETS_<KEY_NAME>=<secret-value>
# The commented examples below are CLI overlays for ordinary fields only.
# Fastly example: map logical app-config secrets to physical `ts_secrets`.
# EDGEZERO__STORES__SECRETS__TRUSTED_SERVER_SECRETS__NAME=ts_secrets

# =============================================================================
# Publisher Settings
# =============================================================================
TRUSTED_SERVER__PUBLISHER__DOMAIN=publisher.com
TRUSTED_SERVER__PUBLISHER__COOKIE_DOMAIN=.publisher.com
TRUSTED_SERVER__PUBLISHER__ORIGIN_URL=https://origin.publisher.com

# =============================================================================
# Synthetic ID Settings
# =============================================================================
TRUSTED_SERVER__SYNTHETIC__COUNTER_STORE=counter_store
TRUSTED_SERVER__SYNTHETIC__OPID_STORE=opid_store
# Template variables: client_ip, user_agent, first_party_id, auth_user_id, publisher_domain, accept_language
TRUSTED_SERVER__SYNTHETIC__TEMPLATE={{ client_ip }}:{{ user_agent }}:{{ first_party_id }}

# =============================================================================
# Request Signing (optional)
# =============================================================================
TRUSTED_SERVER__REQUEST_SIGNING__ENABLED=false
# TRUSTED_SERVER__REQUEST_SIGNING__CONFIG_STORE_ID=<fastly-config-store-id>
# TRUSTED_SERVER__REQUEST_SIGNING__SECRET_STORE_ID=<fastly-secret-store-id>

# =============================================================================
# Response Headers (optional)
# =============================================================================
# TRUSTED_SERVER__RESPONSE_HEADERS__X_CUSTOM_HEADER=custom-value

# =============================================================================
# Integrations
# =============================================================================

# Prebid
TRUSTED_SERVER__INTEGRATIONS__PREBID__ENABLED=false
# TRUSTED_SERVER__INTEGRATIONS__PREBID__SERVER_URL=https://prebid-server.example.com/openrtb2/auction
# TRUSTED_SERVER__INTEGRATIONS__PREBID__TIMEOUT_MS=1000
# TRUSTED_SERVER__INTEGRATIONS__PREBID__BIDDERS=kargo,rubicon,appnexus
# TRUSTED_SERVER__INTEGRATIONS__PREBID__BID_PARAM_OVERRIDES='{"bidder-name":{"param1":12345,"param2":"value"}}'
# Compatibility env shape for bidder -> zone -> params overrides
# TRUSTED_SERVER__INTEGRATIONS__PREBID__BID_PARAM_ZONE_OVERRIDES='{"kargo":{"header":{"placementId":"_abc"}}}'
# Preferred canonical env shape for future generic rules
# TRUSTED_SERVER__INTEGRATIONS__PREBID__BID_PARAM_OVERRIDE_RULES='[{"when":{"bidder":"kargo","zone":"header"},"set":{"placementId":"_abc"}}]'
# TRUSTED_SERVER__INTEGRATIONS__PREBID__SUPPRESS_NURL_BIDDERS=exampleBidder,anotherBidder
# TRUSTED_SERVER__INTEGRATIONS__PREBID__AUTO_CONFIGURE=false
# TRUSTED_SERVER__INTEGRATIONS__PREBID__DEBUG=false
# TRUSTED_SERVER__INTEGRATIONS__PREBID__TEST_MODE=false

# Next.js
TRUSTED_SERVER__INTEGRATIONS__NEXTJS__ENABLED=false
# TRUSTED_SERVER__INTEGRATIONS__NEXTJS__REWRITE_ATTRIBUTES=href,link,url

# Didomi
TRUSTED_SERVER__INTEGRATIONS__DIDOMI__ENABLED=false
# TRUSTED_SERVER__INTEGRATIONS__DIDOMI__SDK_ORIGIN=https://sdk.privacy-center.org
# TRUSTED_SERVER__INTEGRATIONS__DIDOMI__API_ORIGIN=https://api.privacy-center.org

# Permutive
TRUSTED_SERVER__INTEGRATIONS__PERMUTIVE__ENABLED=false
# TRUSTED_SERVER__INTEGRATIONS__PERMUTIVE__ORGANIZATION_ID=
# TRUSTED_SERVER__INTEGRATIONS__PERMUTIVE__WORKSPACE_ID=
# TRUSTED_SERVER__INTEGRATIONS__PERMUTIVE__PROJECT_ID=

# Lockr
TRUSTED_SERVER__INTEGRATIONS__LOCKR__ENABLED=false
# TRUSTED_SERVER__INTEGRATIONS__LOCKR__APP_ID=
# TRUSTED_SERVER__INTEGRATIONS__LOCKR__CACHE_TTL_SECONDS=3600

# =============================================================================
# Rewrite Configuration (optional)
# =============================================================================
# Comma-separated list of domains to exclude from first-party rewriting
# TRUSTED_SERVER__REWRITE__EXCLUDE_DOMAINS=*.edgecompute.app