Skip to content

Configuration

Configure Tempo for your environment using configuration files or environment variables.

Configuration Methods

Tempo can be configured via:

  1. Configuration files (appsettings.json) - For local development
  2. Environment variables - For Docker deployments and production

Database Connection

Local Development (appsettings.json)

{
  "ConnectionStrings": {
    "DefaultConnection": "Host=localhost;Port=5432;Database=tempo;Username=postgres;Password=postgres"
  }
}

Docker (Environment Variable)

ConnectionStrings__DefaultConnection="Host=postgres;Port=5432;Database=tempo;Username=postgres;Password=postgres"

Note: In Docker, use double underscores (__) for nested configuration keys.

Media Storage

Local Development (appsettings.json)

{
  "MediaStorage": {
    "RootPath": "./media",
    "MaxFileSizeBytes": 52428800
  }
}

Docker (Environment Variables)

MediaStorage__RootPath="/app/media"
MediaStorage__MaxFileSizeBytes="52428800"  # 50MB default

Elevation Calculation

Configure elevation smoothing thresholds:

{
  "ElevationCalculation": {
    "NoiseThresholdMeters": 2.0,
    "MinDistanceMeters": 10.0
  }
}

Or via environment variables: 

ElevationCalculation__NoiseThresholdMeters="2.0"
ElevationCalculation__MinDistanceMeters="10.0"

CORS Configuration

Allow specific origins for API access:

{
  "CORS": {
    "AllowedOrigins": "http://localhost:3000,http://localhost:3004"
  }
}

In Docker: 

CORS__AllowedOrigins="http://localhost:3000,http://localhost:3004"

JWT Authentication

Important: Before deploying to production, you must set the JWT secret key.

Generate a Secure JWT Secret Key

# Using OpenSSL (recommended)
openssl rand -base64 32

Set in Docker Compose

environment:
  JWT__SecretKey: "your-very-long-random-secret-key-here"

JWT Configuration Options

  • JWT__SecretKey - JWT signing key (REQUIRED in production, minimum 32 characters)
  • JWT__Issuer - JWT issuer (default: "Tempo")
  • JWT__Audience - JWT audience (default: "Tempo")
  • JWT__ExpirationDays - Token expiration in days (default: 7)

Security Requirements

  • The JWT secret key should be at least 32 characters and cryptographically random
  • Use HTTPS in production (required for secure cookie transmission)
  • Change the default database password in production
  • Store the JWT secret key securely (environment variables, secrets manager, etc.)

Environment Variables Reference

All configuration can be set via environment variables using the double underscore (__) notation for nested keys:

Configuration Key Environment Variable Default
ConnectionStrings:DefaultConnection ConnectionStrings__DefaultConnection -
MediaStorage:RootPath MediaStorage__RootPath ./media
MediaStorage:MaxFileSizeBytes MediaStorage__MaxFileSizeBytes 52428800
ElevationCalculation:NoiseThresholdMeters ElevationCalculation__NoiseThresholdMeters 2.0
ElevationCalculation:MinDistanceMeters ElevationCalculation__MinDistanceMeters 10.0
CORS:AllowedOrigins CORS__AllowedOrigins -
JWT:SecretKey JWT__SecretKey - (REQUIRED in production)
JWT:Issuer JWT__Issuer Tempo
JWT:Audience JWT__Audience Tempo
JWT:ExpirationDays JWT__ExpirationDays 7

Next Steps