Configuration

Configure AegisGate Security Platform

Configuration

AegisGate is configured via environment variables, YAML configuration files, or both.

Environment Variables

VariableDescriptionDefault
AEGIS_LICENSELicense keyCommunity
AEGIS_LOG_LEVELLog verbosityinfo
AEGIS_PROXY_PORTHTTP proxy port8080
AEGIS_MCP_PORTMCP server port8081
AEGIS_DASHBOARD_PORTDashboard port8443
AEGIS_RATE_LIMITRequests per minute1000
AEGIS_API_KEYAPI authentication key(generated)
AEGIS_SCAN_SECRETSEnable secret scanningtrue
AEGIS_SCAN_PIIEnable PII detectiontrue
AEGIS_SCAN_INJECTIONEnable injection detectiontrue

Configuration File

Create config.yaml for advanced configuration:

server:
  proxy_port: 8080
  mcp_port: 8081
  dashboard_port: 8443

security:
  scan_secrets: true
  scan_pii: true
  scan_injection: true
  detection_threshold: 0.8

rate_limiting:
  requests_per_minute: 1000
  burst_size: 100

logging:
  level: info
  format: json
  output: stdout

compliance:
  frameworks:
    - MITRE ATLAS
    - OWASP LLM
    - NIST AI RMF

TLS/SSL Configuration

Enable TLS for production deployments:

AEGIS_TLS_CERT=/path/to/cert.pem
AEGIS_TLS_KEY=/path/to/key.pem

SSO Configuration

Configure OIDC/SAML for enterprise authentication:

AEGIS_SSO_PROVIDER=okta
AEGIS_SSO_CLIENT_ID=your-client-id
AEGIS_SSO_CLIENT_SECRET=your-secret
AEGIS_SSO_ISSUER=https://your-org.okta.com

Environment Examples

Development:

AEGIS_LOG_LEVEL=debug
AEGIS_RATE_LIMIT=100

Production:

AEGIS_LOG_LEVEL=warn
AEGIS_RATE_LIMIT=10000
AEGIS_TLS_CERT=/etc/aegisgate/cert.pem
AEGIS_TLS_KEY=/etc/aegisgate/key.pem

Hot Reload

AegisGate watches for configuration changes and reloads automatically. No restart required.