/migrate binary that applies the migrations. You set these variables at deploy time. For the configuration blocks every Lerian product shares, see the BYOC configuration reference. The Configuration and deploy page explains how the pieces fit together.
Lender serves GET /health, GET /readyz and GET /version on the main port, set by SERVER_ADDRESS, and has no separate health port. When you enable the collection or the Streaming Hub webhook listener, each serves its own /readyz. /readyz also reports a revoked license.
Lender does not start without a valid LICENSE_KEY, without STREAMING_ENABLED=true and at least one broker in STREAMING_BROKERS, or with an invalid DEFAULT_TENANT_ID. Origination needs Midaz.
App and server
| Variable | Description | Default |
|---|---|---|
ENV_NAME | Environment name. With production, Lender applies its production checks at startup. | development |
LOG_LEVEL | Log verbosity. A runtime-configuration key can change it without a restart. | info |
DEPLOYMENT_MODE | Deployment mode. Accepted values include local and production. | local |
SERVER_ADDRESS | Listen address of the API and of the /health, /readyz and /version probes. | :8080 |
HTTP_BODY_LIMIT_BYTES | Largest request body, in bytes. | 104857600 |
SWAGGER_ENABLED | Serves the OpenAPI document. Always off when ENV_NAME=production. | false |
BUSINESS_DATE_ENABLED | Lets a tenant live on a business date it advances by API. Lender starts with true only when ENV_NAME is set to staging, development, local or test and DEPLOYMENT_MODE is not production. Use it in a sandbox or in homologação, never in production. | false |
License
| Variable | Description | Default |
|---|---|---|
LICENSE_KEY | Lerian license key. The key is deployment-wide. Lender validates it at startup in every DEPLOYMENT_MODE and does not start without a valid one. Sensitive. | — |
TLS and proxies
| Variable | Description | Default |
|---|---|---|
SERVER_TLS_CERT_FILE | Path of the TLS certificate the API serves. | — |
SERVER_TLS_KEY_FILE | Path of the TLS private key the API serves. | — |
TLS_TERMINATED_UPSTREAM | Set to true when a proxy terminates TLS before Lender. | false |
TRUST_PROXY_ENABLED | Trusts the forwarding headers of the proxies in TRUSTED_PROXIES. | false |
TRUSTED_PROXIES | Trusted proxy addresses, comma-separated. | — |
CORS
| Variable | Description | Default |
|---|---|---|
CORS_ALLOWED_ORIGINS | Allowed CORS origins, comma-separated. Set explicit origins in production. | http://localhost:3000 |
ACCESS_CONTROL_ALLOW_ORIGIN | Read when CORS_ALLOWED_ORIGINS is not set. | http://localhost:3000 |
CORS_ALLOWED_METHODS | Allowed CORS methods. | GET,POST,PUT,PATCH,DELETE,OPTIONS |
ACCESS_CONTROL_ALLOW_METHODS | Read when CORS_ALLOWED_METHODS is not set. | GET,POST,PUT,PATCH,DELETE,OPTIONS |
CORS_ALLOWED_HEADERS | Allowed CORS request headers. The default list includes X-Idempotency. | — |
ACCESS_CONTROL_ALLOW_HEADERS | Read when CORS_ALLOWED_HEADERS is not set. The default list includes X-Idempotency. | — |
CORS_EXPOSE_HEADERS | Response headers a browser may read. | X-Idempotency-Replayed,X-Idempotency-Fenced |
ACCESS_CONTROL_EXPOSE_HEADERS | Read when CORS_EXPOSE_HEADERS is not set. | X-Idempotency-Replayed,X-Idempotency-Fenced |
CORS_ALLOW_CREDENTIALS | Allows credentials in cross-origin requests. | false |
ACCESS_CONTROL_ALLOW_CREDENTIALS | Read when CORS_ALLOW_CREDENTIALS is not set. | false |
Tenancy
| Variable | Description | Default |
|---|---|---|
DEFAULT_TENANT_ID | Tenant the deployment serves when multi-tenant mode is off. A valid UUID. | 11111111-1111-1111-1111-111111111111 |
MULTI_TENANT_ENABLED | Runs Lender in multi-tenant mode, with the tenant taken from the token. | false |
MULTI_TENANT_URL | Address of the service that resolves tenants. | — |
MULTI_TENANT_REDIS_HOST | Valkey host of the multi-tenant cache. | — |
MULTI_TENANT_REDIS_PORT | Valkey port of the multi-tenant cache. | 6379 |
MULTI_TENANT_REDIS_PASSWORD | Valkey password of the multi-tenant cache. Sensitive. | — |
MULTI_TENANT_REDIS_TLS | Connects to that Valkey over TLS. | false |
MULTI_TENANT_MAX_TENANT_POOLS | Largest number of tenant connection pools held at once. | 100 |
MULTI_TENANT_IDLE_TIMEOUT_SEC | Seconds a tenant pool stays idle before Lender closes it. | 300 |
MULTI_TENANT_TIMEOUT | Seconds Lender waits for the tenant-resolution service. | 30 |
MULTI_TENANT_CIRCUIT_BREAKER_THRESHOLD | Failures that open the circuit to the tenant-resolution service. | 5 |
MULTI_TENANT_CIRCUIT_BREAKER_TIMEOUT_SEC | Seconds the circuit stays open. | 30 |
MULTI_TENANT_SERVICE_API_KEY | API key Lender sends to the tenant-resolution service. Sensitive. | — |
MULTI_TENANT_CACHE_TTL_SEC | Seconds a tenant configuration stays cached. | 120 |
MULTI_TENANT_CONNECTIONS_CHECK_INTERVAL_SEC | Seconds between checks of the tenant connections. | 30 |
PostgreSQL
| Variable | Description | Default |
|---|---|---|
DATABASE_URL | Required PostgreSQL connection URL for /migrate. Sensitive. | — |
POSTGRES_HOST | Primary database host. | localhost |
POSTGRES_PORT | Primary database port. | 5432 |
POSTGRES_USER | Primary database user. | lender |
POSTGRES_PASSWORD | Primary database password. Sensitive. | — |
POSTGRES_NAME | Primary database name. | lender |
POSTGRES_SSLMODE | SSL mode of the primary connection. | disable |
POSTGRES_REPLICA_HOST | Replica database host. Set the replica variables to read from a replica. | — |
POSTGRES_REPLICA_PORT | Replica database port. | — |
POSTGRES_REPLICA_USER | Replica database user. | — |
POSTGRES_REPLICA_PASSWORD | Replica database password. Sensitive. | — |
POSTGRES_REPLICA_NAME | Replica database name. | — |
POSTGRES_REPLICA_SSLMODE | SSL mode of the replica connection. | — |
POSTGRES_MAX_OPEN_CONNS | Largest number of open connections. | 25 |
POSTGRES_MAX_IDLE_CONNS | Largest number of idle connections kept. | 5 |
POSTGRES_CONN_MAX_LIFETIME_MINS | Minutes a connection lives before Lender replaces it. | 30 |
POSTGRES_CONN_MAX_IDLE_TIME_MINS | Minutes a connection may stay idle. | 5 |
POSTGRES_CONNECT_TIMEOUT_SEC | Seconds to wait for a new connection. | 10 |
Valkey
| Variable | Description | Default |
|---|---|---|
REDIS_HOST | Valkey address, host:port. | localhost:6379 |
REDIS_MASTER_NAME | Master name when Valkey runs behind Sentinel. | — |
REDIS_PASSWORD | Valkey password. Sensitive. | — |
REDIS_DB | Valkey database number. | 0 |
REDIS_PROTOCOL | Valkey protocol version. | 3 |
REDIS_TLS | Connects to Valkey over TLS. | false |
REDIS_CA_CERT | CA certificate for the Valkey TLS connection. | — |
REDIS_POOL_SIZE | Valkey connection pool size. | 10 |
REDIS_MIN_IDLE_CONNS | Smallest number of idle Valkey connections kept. | 2 |
REDIS_READ_TIMEOUT | Valkey read timeout, in seconds. | 3 |
REDIS_WRITE_TIMEOUT | Valkey write timeout, in seconds. | 3 |
REDIS_DIAL_TIMEOUT | Valkey connect timeout, in seconds. | 5 |
REDIS_POOL_TIMEOUT | Seconds to wait for a free Valkey connection. | 2 |
REDIS_MAX_RETRIES | Retries of a failed Valkey command. | 3 |
REDIS_MIN_RETRY_BACKOFF | Smallest wait between Valkey retries. | 8 |
REDIS_MAX_RETRY_BACKOFF | Largest wait between Valkey retries. | 1 |
Authentication and machine credentials
| Variable | Description | Default |
|---|---|---|
PLUGIN_AUTH_ENABLED | Turns route authorization on. Production requires it. | true |
PLUGIN_AUTH_HOST | Address of the identity provider behind Access Manager. | — |
AUTH_M2M_INVERSION_ENABLED | Turns on the machine-to-machine inversion gate that BYOC deployments require. | false |
M2M_TARGET_SERVICE | Application name of the service whose machine credential Lender requests. | — |
M2M_ADDITIONAL_TARGET_SERVICES | Further application names whose machine credentials Lender requests, comma-separated. | — |
M2M_CREDENTIAL_CACHE_TTL_SEC | Seconds Lender caches a machine credential. | 300 |
M2M_SECRETS_BACKEND | Where Lender keeps the ledger machine credentials on your own deployment. | — |
M2M_VAULT_MOUNT | Key-value mount of the vault that holds the credentials. | — |
AWS_REGION | Region of the secrets backend. | us-east-1 |
Midaz
| Variable | Description | Default |
|---|---|---|
MIDAZ_LEDGER_BASE_URL | Address of the Midaz ledger. | — |
MIDAZ_LEDGER_ORGANIZATION_ID | Default Midaz organization of postings. | — |
MIDAZ_LEDGER_ID | Default Midaz ledger of postings. | — |
MIDAZ_OAUTH_TOKEN_URL | Where Lender gets its Midaz credentials. | — |
MIDAZ_LEDGER_ACCOUNT_PROVISIONING_ENABLED | Before a posting, Lender adopts or creates the ledger asset, the account types and the accounts the accounting profile names. Turn it off only when you pre-provision the ledger. | true |
MIDAZ_LEDGER_IDEMPOTENCY_TTL_SEC | Seconds Midaz keeps the idempotency slot of a posting. Set a value only to go higher: a positive value below the retry horizon stops the start. | 0 |
Matcher and Reporter
| Variable | Description | Default |
|---|---|---|
MATCHER_ENABLED | Turns on the connection to Matcher. | false |
MATCHER_BASE_URL | Address of Matcher. | — |
MATCHER_OAUTH_TOKEN_URL | Where Lender gets its Matcher credentials. | — |
MATCHER_M2M_TARGET | Application name of Matcher in Access Manager. | matcher |
REPORTER_BASE_URL | Address of Reporter. Offer-file generation for assignments uses it. | — |
REPORTER_OFFER_DATASOURCE | Name of the Reporter data source that holds the offer data. | — |
REPORTER_M2M_TARGET | Application name of Reporter in Access Manager. | reporter |
REPORTER_TIMEOUT_SEC | Seconds Lender waits for Reporter. | 120 |
Event streaming
| Variable | Description | Default |
|---|---|---|
STREAMING_ENABLED | Turns the event backbone on. Startup requires true. | false |
STREAMING_BROKERS | Kafka-compatible broker addresses, comma-separated. Startup requires at least one. | — |
STREAMING_CLOUDEVENTS_SOURCE | CloudEvents source of every event Lender publishes. Set lender. | — |
STREAMING_TLS_ENABLED | Connects to the brokers over TLS. | false |
STREAMING_TLS_SERVER_NAME | Server name the broker certificate must carry. | — |
STREAMING_TLS_CA_CERT | Base64-encoded PEM CA certificate for private broker trust. Invalid base64 or content that is not PEM stops the start. | — |
STREAMING_SASL_MECHANISM | SASL mechanism for the brokers. | — |
STREAMING_SASL_USERNAME | SASL user name. | — |
STREAMING_SASL_PASSWORD | SASL password. Sensitive. | — |
Outbox
| Variable | Description | Default |
|---|---|---|
OUTBOX_TABLE_NAME | Name of the outbox table. | outbox_events |
OUTBOX_DISPATCH_INTERVAL_SEC | Seconds between dispatcher runs of the transactional outbox. | 2 |
OUTBOX_BATCH_SIZE | Items taken in one run. | 50 |
OUTBOX_PUBLISH_MAX_ATTEMPTS | Largest number of attempts for one item. | 3 |
OUTBOX_PUBLISH_BACKOFF_MS | Milliseconds between publish attempts of one event. | 200 |
OUTBOX_RETRY_WINDOW_SEC | Seconds of the outbox retry window. | 300 |
OUTBOX_MAX_DISPATCH_ATTEMPTS | Largest number of dispatch attempts for one event. | 10 |
OUTBOX_PROCESSING_TIMEOUT_SEC | Seconds an event may stay in processing. | 600 |
OUTBOX_MAX_FAILED_PER_BATCH | Failed-event limit per batch. | 25 |
OUTBOX_INCLUDE_TENANT_METRICS | Adds the tenant to outbox metrics. | false |
OUTBOX_ALLOW_EMPTY_TENANT | Lets the outbox dispatch events that carry no tenant. | true |
RabbitMQ
| Variable | Description | Default |
|---|---|---|
RABBITMQ_ENABLED | Turns on the separate RabbitMQ path. It is not the transport of the event catalog. | false |
RABBITMQ_URL | RabbitMQ connection URL. Sensitive. | — |
RABBITMQ_HOST | RabbitMQ host. | localhost |
RABBITMQ_PORT_AMQP | RabbitMQ AMQP port. | 5672 |
RABBITMQ_PORT_HOST | RabbitMQ management port. | 15672 |
RABBITMQ_DEFAULT_USER | RabbitMQ user. | guest |
RABBITMQ_DEFAULT_PASS | RabbitMQ password. Sensitive. | guest |
RABBITMQ_VHOST | RabbitMQ virtual host. | / |
RABBITMQ_QUEUE | RabbitMQ queue name. | — |
RABBITMQ_EXCHANGE | RabbitMQ exchange name. | events |
RABBITMQ_HEALTH_CHECK_URL | RabbitMQ health-check URL. | — |
RABBITMQ_HEALTH_CHECK_ALLOWED_HOSTS | Hosts the health check may call, comma-separated. | — |
RABBITMQ_REQUIRE_HEALTH_ALLOWED_HOSTS | Requires RABBITMQ_HEALTH_CHECK_ALLOWED_HOSTS to be set. | false |
RABBITMQ_ALLOW_INSECURE_HEALTH_CHECK | Allows the health check over plain HTTP. | false |
RABBITMQ_ALLOW_INSECURE_TLS | Skips TLS certificate checks for RabbitMQ. | false |
RABBITMQ_PUBLISHER_CONFIRM_TIMEOUT_MS | Milliseconds to wait for a publish confirmation. | 5000 |
RABBITMQ_PUBLISHER_RECOVERY_INITIAL_MS | Milliseconds before the first publisher recovery attempt. | 1000 |
RABBITMQ_PUBLISHER_RECOVERY_MAX_MS | Largest wait, in milliseconds, between recovery attempts. | 30000 |
RABBITMQ_PUBLISHER_MAX_RECOVERIES | Largest number of recovery attempts. | 10 |
Idempotency, limits and pagination
| Variable | Description | Default |
|---|---|---|
IDEMPOTENCY_RETRY_WINDOW_SEC | Seconds a stored idempotency response stays replayable. | 86400 |
IDEMPOTENCY_PROCESSING_LEASE_SEC | Seconds an in-flight idempotency key stays held. | 900 |
RATE_LIMIT_ENABLED | Request rate limiting. Always on when ENV_NAME=production. | true |
RATE_LIMIT_MAX | Requests allowed per window on the default limit. | 500 |
RATE_LIMIT_WINDOW_SEC | Window of the default limit, in seconds. | 60 |
AGGRESSIVE_RATE_LIMIT_MAX | Requests allowed per window on the strict limit. | 100 |
AGGRESSIVE_RATE_LIMIT_WINDOW_SEC | Window of the strict limit, in seconds. | 60 |
RELAXED_RATE_LIMIT_MAX | Requests allowed per window on the relaxed limit. | 1000 |
RELAXED_RATE_LIMIT_WINDOW_SEC | Window of the relaxed limit, in seconds. | 60 |
INFRA_CONNECT_TIMEOUT_SEC | Seconds to wait for an infrastructure connection at startup. | 30 |
CIRCUIT_BREAKER_ENABLED | Turns the outbound circuit breaker on. | false |
MAX_PAGINATION_LIMIT | Largest limit a list operation accepts. | 100 |
MAX_PAGINATION_MONTH_DATE_RANGE | Largest date range, in months, a list operation accepts. | 3 |
Telemetry
| Variable | Description | Default |
|---|---|---|
ENABLE_TELEMETRY | Turns telemetry on. | false |
OTEL_RESOURCE_SERVICE_NAME | Service name on traces and metrics. | lender |
OTEL_LIBRARY_NAME | Instrumentation library name on telemetry. | — |
OTEL_RESOURCE_DEPLOYMENT_ENVIRONMENT | Environment label on telemetry. | development |
OTEL_EXPORTER_OTLP_ENDPOINT | OTLP collector endpoint. | localhost:4317 |
DB_METRICS_INTERVAL_SEC | Seconds between database metric samples. | 15 |
Collection and webhook listeners
| Variable | Description | Default |
|---|---|---|
COLLECTION_ENABLED | Turns the collection channel on. | false |
COLLECTION_PROVIDER | Collection provider. | — |
COLLECTION_PROVIDER_ACCOUNT_ID | Provider account identifier. | — |
COLLECTION_WEBHOOK_ENABLED | Turns the collection webhook listener on. It serves its own /readyz. | false |
COLLECTION_WEBHOOK_ADDRESS | Listen address of the collection webhook listener. | :9081 |
COLLECTION_WEBHOOK_BODY_LIMIT_BYTES | Largest webhook body, in bytes. | 1048576 |
COLLECTION_WEBHOOK_MAX_SKEW_SEC | Largest clock skew, in seconds, a signed webhook may carry. | 300 |
COLLECTION_WEBHOOK_TLS_CERT_FILE | TLS certificate path of the listener. | — |
COLLECTION_WEBHOOK_TLS_KEY_FILE | TLS private key path of the listener. | — |
COLLECTION_WEBHOOK_UPSTREAM_TLS_TERMINATION_VALIDATED | Confirms that a proxy in front of the listener terminates TLS. | false |
HUB_WEBHOOK_ENABLED | Turns the Streaming Hub webhook listener on. It serves its own /readyz. | false |
HUB_WEBHOOK_ADDRESS | Listen address of the Streaming Hub webhook listener. | :9082 |
HUB_WEBHOOK_BODY_LIMIT_BYTES | Largest webhook body, in bytes. | 1048576 |
HUB_WEBHOOK_MAX_SKEW_SEC | Largest clock skew, in seconds, a signed webhook may carry. | 300 |
HUB_WEBHOOK_SECRET_ENV_PREFIX | Prefix of the per-tenant webhook secret variables. | HUB_WEBHOOK_SECRET__ |
HUB_WEBHOOK_TLS_CERT_FILE | TLS certificate path of the listener. | — |
HUB_WEBHOOK_TLS_KEY_FILE | TLS private key path of the listener. | — |
HUB_WEBHOOK_UPSTREAM_TLS_TERMINATION_VALIDATED | Confirms that a proxy in front of the listener terminates TLS. | false |
Consignado: gateway, storage and consumers
| Variable | Description | Default |
|---|---|---|
CONSIGNADO_ENABLED | Gates the inbound consignado.averbacao.rejected handling. When you turn it off, keep CONSUMER_CONSIGNADO_AVERBACAO_REJECTED_ENABLED off too: startup rejects that contradiction. | true |
CONSIGNADO_GATEWAY_BASE_URL | Address of the Consignado gateway. | — |
CONSIGNADO_GATEWAY_OAUTH_TOKEN_URL | Where Lender gets its gateway credentials. | — |
CONSIGNADO_GATEWAY_M2M_TARGET | Catalog name of the gateway in Access Manager. | — |
CONSIGNADO_GATEWAY_TIMEOUT_SEC | Seconds Lender waits for the gateway. | 15 |
CONSIGNADO_PAYOFF_QUOTE_VALIDITY_HOURS | Hours a payoff quote stays valid. A product version can set its own value. A non-positive value falls back to 24. | 24 |
ADJUSTMENT_EVIDENCE_S3_BUCKET | Object-storage bucket for compensating-adjustment evidence. | — |
ADJUSTMENT_EVIDENCE_S3_ENDPOINT | Endpoint of that object storage. | — |
ADJUSTMENT_EVIDENCE_S3_FORCE_PATH_STYLE | Uses path-style addressing. | false |
ADJUSTMENT_EVIDENCE_S3_REGION | Region of that object storage. | us-east-1 |
ISSUANCE_CUSTODY_S3_BUCKET | Object-storage bucket for credit-instrument custody. | — |
ISSUANCE_CUSTODY_S3_ENDPOINT | Endpoint of that object storage. | — |
ISSUANCE_CUSTODY_S3_FORCE_PATH_STYLE | Uses path-style addressing. | false |
ISSUANCE_CUSTODY_S3_REGION | Region of that object storage. | us-east-1 |
CONSUMER_CONSIGNADO_AVERBACAO_REJECTED_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_EMPLOYMENT_STATUS_REPORTED_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_CONTRACT_REGISTERED_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_DISBURSEMENT_CONFIRMED_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_CONTRACT_CORRECTION_AVAILABLE_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_DISBURSEMENT_CORRECTION_AVAILABLE_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_RECONCILIATION_RECEIVED_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_MATCH_RUN_COMPLETED_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_PORTABILITY_OUTCOME_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_REFINANCE_OUTCOME_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_RENEGOCIACAO_OUTCOME_ENABLED | Turns the inbound consumer on. Off by default. | false |
CONSUMER_CONSIGNADO_MIGRACAO_OUTCOME_ENABLED | Turns the inbound consumer on. Off by default. | false |
Consignado: drainers and relays
| Variable | Description | Default |
|---|---|---|
CONSIGNADO_EXCLUSION_LOCAL_BATCH_SIZE | Items taken in one run. | 50 |
CONSIGNADO_EXCLUSION_LOCAL_TENANT_CONCURRENCY | Tenants worked at the same time. | 4 |
CONSIGNADO_EXCLUSION_LOCAL_LEASE_SECONDS | Seconds one worker holds a claimed item. | 30 |
CONSIGNADO_EXCLUSION_LOCAL_BACKOFF_BASE_SECONDS | Base of the retry backoff, in seconds. | 1 |
CONSIGNADO_EXCLUSION_LOCAL_BACKOFF_MAX_SECONDS | Largest retry backoff, in seconds. | 300 |
CONSIGNADO_EXCLUSION_LOCAL_POLL_INTERVAL_MS | Milliseconds between polls. | 1000 |
CONSIGNADO_CONTRACT_REGISTRATION_DRAINER_ENABLED | Turns the drainer on or off. | false |
CONSIGNADO_CONTRACT_REGISTRATION_BATCH_SIZE | Items taken in one run. | 1 |
CONSIGNADO_CONTRACT_REGISTRATION_LEASE_SECONDS | Seconds one worker holds a claimed item. | 180 |
CONSIGNADO_CONTRACT_REGISTRATION_RETRY_DELAY_SECONDS | Seconds before the first retry of an item. | 30 |
CONSIGNADO_CONTRACT_REGISTRATION_RETRY_CEILING_SECONDS | Longest wait, in seconds, between two retries. | 900 |
CONSIGNADO_CONTRACT_REGISTRATION_MAX_ATTEMPTS | Largest number of attempts for one item. | 8 |
CONSIGNADO_CONTRACT_REGISTRATION_STUCK_AFTER_SECONDS | Seconds after which an item still in progress counts as stuck. | 900 |
CONSIGNADO_CONTRACT_REGISTRATION_DRAIN_SCHEDULE | Cron schedule of the job. | */1 * * * * |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_DRAINER_ENABLED | Turns the drainer on or off. | false |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_DRAIN_SCHEDULE | Cron schedule of the job. | */1 * * * * |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_BATCH_SIZE | Items taken in one run. | 1 |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_LEASE_SECONDS | Seconds one worker holds a claimed item. | 60 |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_RETRY_DELAY_SECONDS | Seconds before the first retry of an item. | 30 |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_RETRY_CEILING_SECONDS | Longest wait, in seconds, between two retries. | 900 |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_MAX_ATTEMPTS | Largest number of attempts for one item. | 8 |
CONSIGNADO_DISBURSEMENT_CONFIRMATION_STUCK_AFTER_SECONDS | Seconds after which an item still in progress counts as stuck. | 900 |
CONSIGNADO_CONTRACT_CORRECTION_DRAINER_ENABLED | Turns the drainer on or off. | false |
CONSIGNADO_CONTRACT_CORRECTION_BATCH_SIZE | Items taken in one run. | 1 |
CONSIGNADO_CONTRACT_CORRECTION_LEASE_SECONDS | Seconds one worker holds a claimed item. | 60 |
CONSIGNADO_CONTRACT_CORRECTION_RETRY_DELAY_SECONDS | Seconds before the first retry of an item. | 30 |
CONSIGNADO_CONTRACT_CORRECTION_RETRY_CEILING_SECONDS | Longest wait, in seconds, between two retries. | 900 |
CONSIGNADO_CONTRACT_CORRECTION_MAX_ATTEMPTS | Largest number of attempts for one item. | 8 |
CONSIGNADO_CONTRACT_CORRECTION_STUCK_AFTER_SECONDS | Seconds after which an item still in progress counts as stuck. | 900 |
CONSIGNADO_CONTRACT_CORRECTION_DRAIN_SCHEDULE | Cron schedule of the job. | */1 * * * * |
CONSIGNADO_DISBURSEMENT_POSTING_RELAY_ENABLED | Turns the relay on or off. | false |
CONSIGNADO_DISBURSEMENT_POSTING_RELAY_SCHEDULE | Cron schedule of the job. | */1 * * * * |
CONSIGNADO_DISBURSEMENT_POSTING_BATCH_SIZE | Items taken in one run. | 1 |
CONSIGNADO_DISBURSEMENT_POSTING_LEASE_SECONDS | Seconds one worker holds a claimed item. | 60 |
CONSIGNADO_DISBURSEMENT_POSTING_RETRY_DELAY_SECONDS | Seconds before the first retry of an item. | 30 |
CONSIGNADO_DISBURSEMENT_POSTING_RETRY_CEILING_SECONDS | Longest wait, in seconds, between two retries. | 900 |
CONSIGNADO_DISBURSEMENT_POSTING_RECONCILIATION_ENABLED | Turns the reconciliation run on or off. | false |
CONSIGNADO_DISBURSEMENT_POSTING_RECONCILIATION_SCHEDULE | Cron schedule of the job. | */2 * * * * |
CONSIGNADO_DISBURSEMENT_POSTING_RECHECK_DELAY_SECONDS | Seconds before the first recheck of an item. | 60 |
CONSIGNADO_DISBURSEMENT_POSTING_RECHECK_CEILING_SECONDS | Longest wait, in seconds, between two rechecks. | 3600 |
Scheduled jobs
| Variable | Description | Default |
|---|---|---|
JOBS_PORTFOLIO_SNAPSHOT_ENABLED | Writes the portfolio snapshot that the dashboards read. | false |
JOBS_PORTFOLIO_SNAPSHOT_SCHEDULE | Cron schedule of the job. | 0 4 * * * |
JOBS_PDD_PROMOTION_ENABLED | Turns the daily credit-loss stage promotion on or off. | true |
JOBS_PDD_PROMOTION_SCHEDULE | Cron schedule of the job. | 0 5 * * * |
JOBS_ACCRUAL_HEARTBEAT_ENABLED | Turns the accrual heartbeat on or off. | true |
JOBS_ACCRUAL_HEARTBEAT_SCHEDULE | Cron schedule of the job. | 0 6 * * * |
JOBS_PROVISION_MEASUREMENT_ENABLED | Turns the daily provision measurement on or off. | true |
JOBS_PROVISION_MEASUREMENT_SCHEDULE | Cron schedule of the job. | 0 7 * * * |
JOBS_COLLECTION_RECONCILIATION_ENABLED | Turns the scheduled job on or off. | false |
JOBS_COLLECTION_RECONCILIATION_SCHEDULE | Cron schedule of the job. | */5 * * * * |
JOBS_COLLECTION_RECONCILIATION_BATCH_SIZE | Items taken in one run. | 100 |
JOBS_COLLECTION_RECONCILIATION_LEASE_SEC | Seconds one worker holds a claimed item. | 60 |
JOBS_COLLECTION_RECONCILIATION_BACKOFF_BASE_SEC | Base of the retry backoff, in seconds. | 30 |
JOBS_COLLECTION_RECONCILIATION_BACKOFF_MAX_SEC | Largest retry backoff, in seconds. | 3600 |
JOBS_COLLECTION_AGENT_CHANNEL_SWEEP_ENABLED | Turns the scheduled job on or off. | true |
JOBS_COLLECTION_AGENT_CHANNEL_SWEEP_SCHEDULE | Cron schedule of the job. | */10 * * * * |
JOBS_COLLECTION_AGENT_CHANNEL_SWEEP_LIMIT | Tenants read per run. | 200 |
JOBS_COLLECTION_SETTLEMENT_BATCH_SIZE | Settlement items taken in one run. | 50 |
JOBS_COLLECTION_SETTLEMENT_LEASE_SEC | Seconds one worker holds a claimed item. | 120 |
JOBS_COLLECTION_SETTLEMENT_RETRY_DELAY_SEC | Seconds before the first retry of an item. | 60 |
JOBS_COLLECTION_SETTLEMENT_RETRY_CEILING_SEC | Longest wait, in seconds, between two retries. | 3600 |
JOBS_COLLECTION_SETTLEMENT_MAX_ATTEMPTS | Largest number of attempts for one item. | 5 |
JOBS_REGISTRATION_INVENTORY_ENABLED | Turns the scheduled job on or off. | false |
JOBS_REGISTRATION_INVENTORY_SCHEDULE | Cron schedule of the job. | */15 * * * * |
JOBS_REGISTRATION_INVENTORY_PAGE_SIZE | Rows read per page. | 100 |
JOBS_REGISTRATION_INVENTORY_GRACE_SEC | Seconds an item may wait before the inventory reports it. | 7200 |
JOBS_INSTRUMENT_CUSTODY_SWEEP_ENABLED | Turns the scheduled job on or off. | false |
JOBS_INSTRUMENT_CUSTODY_SWEEP_SCHEDULE | Cron schedule of the job. | */15 * * * * |
JOBS_ASSIGNMENT_LIFECYCLE_SWEEP_ENABLED | Turns the scheduled job on or off. | true |
JOBS_ASSIGNMENT_LIFECYCLE_SWEEP_SCHEDULE | Cron schedule of the job. | */10 * * * * |
JOBS_ASSIGNMENT_LIFECYCLE_SWEEP_LIMIT | Items read per run. | 500 |
JOBS_PORTABILITY_DRAIN_ENABLED | Turns the scheduled job on or off. | true |
JOBS_PORTABILITY_DRAIN_SCHEDULE | Cron schedule of the job. | */10 * * * * |
JOBS_PORTABILITY_DRAIN_BATCH_SIZE | Items taken in one run. | 50 |
JOBS_PORTABILITY_DRAIN_LEASE_SEC | Seconds one worker holds a claimed item. | 120 |
JOBS_PORTABILITY_DRAIN_RETRY_DELAY_SEC | Seconds before the first retry of an item. | 60 |
JOBS_PORTABILITY_DRAIN_RETRY_CEILING_SEC | Longest wait, in seconds, between two retries. | 3600 |
JOBS_PORTABILITY_DRAIN_MAX_ATTEMPTS | Largest number of attempts for one item. | 5 |
JOBS_PORTABILITY_DIVERGENCE_GRACE_HOURS | Hours a portability may wait before the sweep reports a divergence. | 48 |
JOBS_PORTABILITY_DIVERGENCE_PAGE_SIZE | Rows read per page. | 100 |
JOBS_PORTABILITY_REFUND_ENABLED | Turns the scheduled job on or off. | false |
JOBS_PORTABILITY_REFUND_PAGE_SIZE | Rows read per page. | 100 |
JOBS_REFINANCE_DRAIN_ENABLED | Turns the scheduled job on or off. | true |
JOBS_REFINANCE_DRAIN_SCHEDULE | Cron schedule of the job. | */10 * * * * |
JOBS_REFINANCE_DRAIN_BATCH_SIZE | Items taken in one run. | 25 |
JOBS_REFINANCE_DRAIN_LEASE_SEC | Seconds one worker holds a claimed item. | 300 |
JOBS_REFINANCE_DRAIN_RETRY_DELAY_SEC | Seconds before the first retry of an item. | 120 |
JOBS_REFINANCE_DRAIN_RETRY_CEILING_SEC | Longest wait, in seconds, between two retries. | 7200 |
JOBS_REFINANCE_DRAIN_MAX_ATTEMPTS | Largest number of attempts for one item. | 10 |
JOBS_REFINANCE_DRAIN_WAIT_MAX_AGE_HOURS | Hours an item may wait for its counterpart fact. | 336 |
JOBS_REFINANCE_REVERSAL_WINDOW_BUSINESS_DAYS | Business days in which a refinance can still be reversed. | 7 |
JOBS_REFINANCE_DIVERGENCE_GRACE_HOURS | Hours a refinance may wait before the sweep reports a divergence. | 48 |
JOBS_REFINANCE_DIVERGENCE_PAGE_SIZE | Rows read per page. | 100 |
JOBS_DAILY_INDEX_SYNC_ENABLED | Turns the scheduled job on or off. | true |
JOBS_DAILY_INDEX_SYNC_SCHEDULE | Cron schedule of the job. | 0 12,23 * * * |
JOBS_DAILY_INDEX_SYNC_HISTORY_START | First date the sync loads, YYYY-MM-DD. | 2026-01-01 |
JOBS_UNAPPLIED_CASH_SETTLEMENT_ENABLED | Settles due instalments from held unapplied cash. With it off, an instalment the held cash covers falls into arrears. | true |
JOBS_UNAPPLIED_CASH_SETTLEMENT_SCHEDULE | Cron schedule of the job. | 30 3 * * * |
JOBS_WRITE_OFF_CONTROL_EXIT_ENABLED | Turns the nightly exit of written-off contracts from control on or off. | true |
JOBS_WRITE_OFF_CONTROL_EXIT_SCHEDULE | Cron schedule of the job. | 45 3 * * * |
BCB_SGS_BASE_URL | Address of the Central Bank series service that Lender reads daily index rates from. Lender needs outbound access to it. | https://api.bcb.gov.br |