#Overview

The Enterprise Stack reads HOCON files from the config/ directory. Use them to enable features, connect to MongoDB, configure authentication, and tune optional services.

Only the files for base features and enabled optional features are loaded at startup. Missing required files fail startup. Optional files can be omitted when the matching feature is off.

#Config Files

• Features — _features.conf: which Enterprise API features are enabled.
• Auth — auth.conf: login, tokens, and OIDC.
• Database — database.conf: MongoDB / DocumentDB connection, profile, pool, and TLS.
• Enterprise — enterprise.conf: public base URL used in callbacks and well-known endpoints.
• License — license.conf: license activation seed and license server URL.
• Super Admin Registration — superadmin-registration.conf: bootstrap tokens.
• Web — web.conf: listen host and port.
• HTTP Client — httpclient.conf: outbound HTTP engine used by the API.
• Resource Access — resource-access.conf: named KMS and storage credential profiles.
• Pagination — pagination.conf: default and maximum list-endpoint page size.
• Session Data Ejection — MongoDB TTL for issuer/verifier session PII (not a .conf file).
• Transaction Data Profiles — transaction-data-profiles.conf: OpenID4VP transaction-data types.
• Rate Limit — rate-limit.conf: Issuer2, Verifier2, and superadmin bootstrap limits.
• Telemetry — telemetry.conf: OpenTelemetry export (optional feature).
• Prometheus — prometheus.conf: Prometheus metrics listener (optional feature).
• Events — events.conf: which events are stored, how they are written and how long they are kept.
• eIDAS Audit — eidas-audit.conf: whether audit entries are written before the request goes on (optional feature).
• Ensured Response Time — ensured-response-time.conf: per-operation request timeouts.
• Dev Mode — dev-mode.conf: DID web resolver HTTPS when dev-mode is enabled.
• Dev Mode Access — dev-mode-access.conf: secret required to call /v1/dev/* once dev-mode is enabled.
• Network Fetch Guard — network-fetch-guard.conf: which private-network targets wallet-service outbound fetches may reach.