System settings

The Settings page (/system/settings) manages installation-wide key-value settings, grouped by prefix. The filter field (“Search by key or value…”) narrows the display live.

Prefix	Area
Pii.*	PII detection (rate limiting, detector defaults and so on)
DemoMode.*	Demo mode (limits, captcha, watermark, retention, AllowImpersonation)
UI.*	The interface — UI.DefaultLanguage as the installation-wide default language, for example
Tracking.*	Optional Google Analytics tracking of the public pages
Auth.*	Authentication — Auth.Password.* as the system-wide password policy, for instance
Export.*	Export behaviour

Creating, changing and resetting a setting

• “New key” opens a dialog with the prefix (a selection list), the key name, the value and the “Store encrypted” option — encrypted values are stored enciphered in the database and shown in the list only as •••• (for secrets such as captcha secret keys).
• “Edit” changes an entry’s value. For encrypted entries the value field starts empty — the stored value is never displayed.
• “Reset” deletes the entry after a confirmation; the built-in default value then applies again.

Every change is recorded in the system audit log (setting.update / setting.delete).

Example — a stricter password policy for the installation:

1. Click “New key” and choose the prefix Auth..
2. Key name Password.MinLength, value 12 — save.
3. Create Password.RequireUppercase = true and Password.RequireDigit = true in the same way.

New passwords set by system administrators must satisfy this policy from then on; tenants can override it with settings of their own.

Locked keys

Cryptographic material is deliberately not changeable through this page (or the API) — it belongs exclusively in the server configuration (environment variables or appsettings):

• Velkaris:Encryption:* — encryption of the data store (the master key)
• Velkaris:Jwt:Secret — the signing key for API tokens
• Proxy.Password — maintained exclusively through the proxy page (see the next chapter)

An attempt produces the message “Key ‘…’ is not writable through the UI.”