@twin.org/node-core 0.0.3-next.4 → 0.0.3-next.40

package/docs/reference/interfaces/INodeEnvironmentVariables.md

@@ -8,9 +8,9 @@ The environment variables for the node.
 
 ## Properties
 
-### debug?
+### debug? {#debug}
 
-> `optional` **debug**: `string`
+> `optional` **debug?**: `string`
 
 Start the engine in debug mode.
 
@@ -20,69 +20,69 @@ Start the engine in debug mode.
 
 ***
 
-### storageFileRoot?
+### silent? {#silent}
 
-> `optional` **storageFileRoot**: `string`
+> `optional` **silent?**: `string`
 
-The root directory for storing items like state file.
+Start the engine in silent mode.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`storageFileRoot`](IEngineServerEnvironmentVariables.md#storagefileroot)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`silent`](IEngineServerEnvironmentVariables.md#silent)
 
 ***
 
-### stateFilename?
+### storageFileRoot? {#storagefileroot}
 
-> `optional` **stateFilename**: `string`
+> `optional` **storageFileRoot?**: `string`
 
-The name of the state file.
+The root directory for storing items like state file.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`stateFilename`](IEngineServerEnvironmentVariables.md#statefilename)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`storageFileRoot`](IEngineServerEnvironmentVariables.md#storagefileroot)
 
 ***
 
-### tenantEnabled?
+### stateFilename? {#statefilename}
 
-> `optional` **tenantEnabled**: `string`
+> `optional` **stateFilename?**: `string`
 
-Is multi-tenant support enabled, defaults to false.
+The name of the state file.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`tenantEnabled`](IEngineServerEnvironmentVariables.md#tenantenabled)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`stateFilename`](IEngineServerEnvironmentVariables.md#statefilename)
 
 ***
 
-### tenantId?
+### nodeIdentityEnabled? {#nodeidentityenabled}
 
-> `optional` **tenantId**: `string`
+> `optional` **nodeIdentityEnabled?**: `string`
 
-A tenant id to use as a default for the node.
+Does the node have a unique ID, defaults to true.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`tenantId`](IEngineServerEnvironmentVariables.md#tenantid)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`nodeIdentityEnabled`](IEngineServerEnvironmentVariables.md#nodeidentityenabled)
 
 ***
 
-### tenantApiKey?
+### tenantEnabled? {#tenantenabled}
 
-> `optional` **tenantApiKey**: `string`
+> `optional` **tenantEnabled?**: `string`
 
-A tenant api key to use as a default for the node.
+Is multi-tenant support enabled, defaults to false.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`tenantApiKey`](IEngineServerEnvironmentVariables.md#tenantapikey)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`tenantEnabled`](IEngineServerEnvironmentVariables.md#tenantenabled)
 
 ***
 
-### entityStorageConnectorType?
+### entityStorageConnectorType? {#entitystorageconnectortype}
 
-> `optional` **entityStorageConnectorType**: `string`
+> `optional` **entityStorageConnectorType?**: `string`
 
 The type of the entity storage to create, comma separate for more than one connector.
 values: file, memory, aws-dynamodb, azure-cosmosdb, gcp-firestoredb, scylladb, mysql, mongodb, postgresql
@@ -93,9 +93,9 @@ values: file, memory, aws-dynamodb, azure-cosmosdb, gcp-firestoredb, scylladb, m
 
 ***
 
-### entityStorageConnectorDefault?
+### entityStorageConnectorDefault? {#entitystorageconnectordefault}
 
-> `optional` **entityStorageConnectorDefault**: `string`
+> `optional` **entityStorageConnectorDefault?**: `string`
 
 The default entity storage connector to use, defaults to the first one in the list.
 
@@ -105,9 +105,9 @@ The default entity storage connector to use, defaults to the first one in the li
 
 ***
 
-### entityStorageTablePrefix?
+### entityStorageTablePrefix? {#entitystoragetableprefix}
 
-> `optional` **entityStorageTablePrefix**: `string`
+> `optional` **entityStorageTablePrefix?**: `string`
 
 A prefix for all the table in entity-storage, can be empty.
 
@@ -117,9 +117,9 @@ A prefix for all the table in entity-storage, can be empty.
 
 ***
 
-### awsDynamodbAuthMode?
+### awsDynamodbAuthMode? {#awsdynamodbauthmode}
 
-> `optional` **awsDynamodbAuthMode**: `string`
+> `optional` **awsDynamodbAuthMode?**: `string`
 
 AWS DynamoDB auth mode, either credentials or pod.
 
@@ -129,9 +129,9 @@ AWS DynamoDB auth mode, either credentials or pod.
 
 ***
 
-### awsDynamodbAccessKeyId?
+### awsDynamodbAccessKeyId? {#awsdynamodbaccesskeyid}
 
-> `optional` **awsDynamodbAccessKeyId**: `string`
+> `optional` **awsDynamodbAccessKeyId?**: `string`
 
 AWS Dynamo DB access key id.
 
@@ -141,9 +141,9 @@ AWS Dynamo DB access key id.
 
 ***
 
-### awsDynamodbEndpoint?
+### awsDynamodbEndpoint? {#awsdynamodbendpoint}
 
-> `optional` **awsDynamodbEndpoint**: `string`
+> `optional` **awsDynamodbEndpoint?**: `string`
 
 AWS Dynamo DB Endpoint if running local instance.
 
@@ -153,9 +153,9 @@ AWS Dynamo DB Endpoint if running local instance.
 
 ***
 
-### awsDynamodbRegion?
+### awsDynamodbRegion? {#awsdynamodbregion}
 
-> `optional` **awsDynamodbRegion**: `string`
+> `optional` **awsDynamodbRegion?**: `string`
 
 AWS Dynamo DB region.
 
@@ -165,9 +165,9 @@ AWS Dynamo DB region.
 
 ***
 
-### awsDynamodbSecretAccessKey?
+### awsDynamodbSecretAccessKey? {#awsdynamodbsecretaccesskey}
 
-> `optional` **awsDynamodbSecretAccessKey**: `string`
+> `optional` **awsDynamodbSecretAccessKey?**: `string`
 
 AWS Dynamo DB secret access key.
 
@@ -177,9 +177,21 @@ AWS Dynamo DB secret access key.
 
 ***
 
-### azureCosmosdbKey?
+### awsDynamodbConnectionTimeoutMs? {#awsdynamodbconnectiontimeoutms}
 
-> `optional` **azureCosmosdbKey**: `string`
+> `optional` **awsDynamodbConnectionTimeoutMs?**: `string`
+
+AWS Dynamo DB connection timeout.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`awsDynamodbConnectionTimeoutMs`](IEngineServerEnvironmentVariables.md#awsdynamodbconnectiontimeoutms)
+
+***
+
+### azureCosmosdbKey? {#azurecosmosdbkey}
+
+> `optional` **azureCosmosdbKey?**: `string`
 
 Azure Cosmos DB key.
 
@@ -189,9 +201,9 @@ Azure Cosmos DB key.
 
 ***
 
-### azureCosmosdbContainerId?
+### azureCosmosdbContainerId? {#azurecosmosdbcontainerid}
 
-> `optional` **azureCosmosdbContainerId**: `string`
+> `optional` **azureCosmosdbContainerId?**: `string`
 
 Azure Cosmos DB container id.
 
@@ -201,9 +213,9 @@ Azure Cosmos DB container id.
 
 ***
 
-### azureCosmosdbDatabaseId?
+### azureCosmosdbDatabaseId? {#azurecosmosdbdatabaseid}
 
-> `optional` **azureCosmosdbDatabaseId**: `string`
+> `optional` **azureCosmosdbDatabaseId?**: `string`
 
 Azure Cosmos DB database id.
 
@@ -213,9 +225,9 @@ Azure Cosmos DB database id.
 
 ***
 
-### azureCosmosdbEndpoint?
+### azureCosmosdbEndpoint? {#azurecosmosdbendpoint}
 
-> `optional` **azureCosmosdbEndpoint**: `string`
+> `optional` **azureCosmosdbEndpoint?**: `string`
 
 Azure Cosmos DB endpoint.
 
@@ -225,9 +237,9 @@ Azure Cosmos DB endpoint.
 
 ***
 
-### gcpFirestoreCollectionName?
+### gcpFirestoreCollectionName? {#gcpfirestorecollectionname}
 
-> `optional` **gcpFirestoreCollectionName**: `string`
+> `optional` **gcpFirestoreCollectionName?**: `string`
 
 GCP Firestore collection name.
 
@@ -237,9 +249,9 @@ GCP Firestore collection name.
 
 ***
 
-### gcpFirestoreCredentials?
+### gcpFirestoreCredentials? {#gcpfirestorecredentials}
 
-> `optional` **gcpFirestoreCredentials**: `string`
+> `optional` **gcpFirestoreCredentials?**: `string`
 
 GCP Firestore credentials.
 
@@ -249,9 +261,9 @@ GCP Firestore credentials.
 
 ***
 
-### gcpFirestoreDatabaseId?
+### gcpFirestoreDatabaseId? {#gcpfirestoredatabaseid}
 
-> `optional` **gcpFirestoreDatabaseId**: `string`
+> `optional` **gcpFirestoreDatabaseId?**: `string`
 
 GCP Firestore database id.
 
@@ -261,9 +273,9 @@ GCP Firestore database id.
 
 ***
 
-### gcpFirestoreApiEndpoint?
+### gcpFirestoreApiEndpoint? {#gcpfirestoreapiendpoint}
 
-> `optional` **gcpFirestoreApiEndpoint**: `string`
+> `optional` **gcpFirestoreApiEndpoint?**: `string`
 
 GCP Firestore endpoint.
 
@@ -273,9 +285,9 @@ GCP Firestore endpoint.
 
 ***
 
-### gcpFirestoreProjectId?
+### gcpFirestoreProjectId? {#gcpfirestoreprojectid}
 
-> `optional` **gcpFirestoreProjectId**: `string`
+> `optional` **gcpFirestoreProjectId?**: `string`
 
 GCP Firestore project id.
 
@@ -285,9 +297,9 @@ GCP Firestore project id.
 
 ***
 
-### scylladbHosts?
+### scylladbHosts? {#scylladbhosts}
 
-> `optional` **scylladbHosts**: `string`
+> `optional` **scylladbHosts?**: `string`
 
 ScyllaDB hosts as comma separated string.
 
@@ -297,9 +309,9 @@ ScyllaDB hosts as comma separated string.
 
 ***
 
-### scylladbKeyspace?
+### scylladbKeyspace? {#scylladbkeyspace}
 
-> `optional` **scylladbKeyspace**: `string`
+> `optional` **scylladbKeyspace?**: `string`
 
 ScyllaDB keyspace.
 
@@ -309,9 +321,9 @@ ScyllaDB keyspace.
 
 ***
 
-### scylladbLocalDataCenter?
+### scylladbLocalDataCenter? {#scylladblocaldatacenter}
 
-> `optional` **scylladbLocalDataCenter**: `string`
+> `optional` **scylladbLocalDataCenter?**: `string`
 
 ScyllaDB local data center.
 
@@ -321,9 +333,9 @@ ScyllaDB local data center.
 
 ***
 
-### scylladbPort?
+### scylladbPort? {#scylladbport}
 
-> `optional` **scylladbPort**: `string`
+> `optional` **scylladbPort?**: `string`
 
 ScyllaDB port.
 
@@ -333,9 +345,9 @@ ScyllaDB port.
 
 ***
 
-### mySqlHost?
+### mySqlHost? {#mysqlhost}
 
-> `optional` **mySqlHost**: `string`
+> `optional` **mySqlHost?**: `string`
 
 MySQL host.
 
@@ -345,9 +357,9 @@ MySQL host.
 
 ***
 
-### mySqlPort?
+### mySqlPort? {#mysqlport}
 
-> `optional` **mySqlPort**: `number`
+> `optional` **mySqlPort?**: `number`
 
 MySQL port.
 
@@ -357,9 +369,9 @@ MySQL port.
 
 ***
 
-### mySqlUser?
+### mySqlUser? {#mysqluser}
 
-> `optional` **mySqlUser**: `string`
+> `optional` **mySqlUser?**: `string`
 
 MySQL username.
 
@@ -369,9 +381,9 @@ MySQL username.
 
 ***
 
-### mySqlPassword?
+### mySqlPassword? {#mysqlpassword}
 
-> `optional` **mySqlPassword**: `string`
+> `optional` **mySqlPassword?**: `string`
 
 MySQL password.
 
@@ -381,9 +393,9 @@ MySQL password.
 
 ***
 
-### mySqlDatabase?
+### mySqlDatabase? {#mysqldatabase}
 
-> `optional` **mySqlDatabase**: `string`
+> `optional` **mySqlDatabase?**: `string`
 
 MySQL Database.
 
@@ -393,9 +405,9 @@ MySQL Database.
 
 ***
 
-### mongoDbHost?
+### mongoDbHost? {#mongodbhost}
 
-> `optional` **mongoDbHost**: `string`
+> `optional` **mongoDbHost?**: `string`
 
 MongoDB host.
 
@@ -405,9 +417,9 @@ MongoDB host.
 
 ***
 
-### mongoDbPort?
+### mongoDbPort? {#mongodbport}
 
-> `optional` **mongoDbPort**: `number`
+> `optional` **mongoDbPort?**: `number`
 
 MongoDB port.
 
@@ -417,9 +429,9 @@ MongoDB port.
 
 ***
 
-### mongoDbUser?
+### mongoDbUser? {#mongodbuser}
 
-> `optional` **mongoDbUser**: `string`
+> `optional` **mongoDbUser?**: `string`
 
 MongoDB username.
 
@@ -429,9 +441,9 @@ MongoDB username.
 
 ***
 
-### mongoDbPassword?
+### mongoDbPassword? {#mongodbpassword}
 
-> `optional` **mongoDbPassword**: `string`
+> `optional` **mongoDbPassword?**: `string`
 
 MongoDB password.
 
@@ -441,9 +453,9 @@ MongoDB password.
 
 ***
 
-### mongoDbDatabase?
+### mongoDbDatabase? {#mongodbdatabase}
 
-> `optional` **mongoDbDatabase**: `string`
+> `optional` **mongoDbDatabase?**: `string`
 
 MongoDB Database.
 
@@ -453,9 +465,9 @@ MongoDB Database.
 
 ***
 
-### postgreSqlHost?
+### postgreSqlHost? {#postgresqlhost}
 
-> `optional` **postgreSqlHost**: `string`
+> `optional` **postgreSqlHost?**: `string`
 
 PostgreSQl host.
 
@@ -465,9 +477,9 @@ PostgreSQl host.
 
 ***
 
-### postgreSqlPort?
+### postgreSqlPort? {#postgresqlport}
 
-> `optional` **postgreSqlPort**: `number`
+> `optional` **postgreSqlPort?**: `number`
 
 PostgreSQl port.
 
@@ -477,9 +489,9 @@ PostgreSQl port.
 
 ***
 
-### postgreSqlUser?
+### postgreSqlUser? {#postgresqluser}
 
-> `optional` **postgreSqlUser**: `string`
+> `optional` **postgreSqlUser?**: `string`
 
 PostgreSQl username.
 
@@ -489,9 +501,9 @@ PostgreSQl username.
 
 ***
 
-### postgreSqlPassword?
+### postgreSqlPassword? {#postgresqlpassword}
 
-> `optional` **postgreSqlPassword**: `string`
+> `optional` **postgreSqlPassword?**: `string`
 
 PostgreSQl password.
 
@@ -501,9 +513,9 @@ PostgreSQl password.
 
 ***
 
-### postgreSqlDatabase?
+### postgreSqlDatabase? {#postgresqldatabase}
 
-> `optional` **postgreSqlDatabase**: `string`
+> `optional` **postgreSqlDatabase?**: `string`
 
 PostgreSQl Database.
 
@@ -513,9 +525,9 @@ PostgreSQl Database.
 
 ***
 
-### ipfsBearerToken?
+### ipfsBearerToken? {#ipfsbearertoken}
 
-> `optional` **ipfsBearerToken**: `string`
+> `optional` **ipfsBearerToken?**: `string`
 
 The security token for accessing IPFS API.
 
@@ -525,9 +537,9 @@ The security token for accessing IPFS API.
 
 ***
 
-### ipfsApiUrl?
+### ipfsApiUrl? {#ipfsapiurl}
 
-> `optional` **ipfsApiUrl**: `string`
+> `optional` **ipfsApiUrl?**: `string`
 
 The url for accessing IPFS API.
 
@@ -537,9 +549,9 @@ The url for accessing IPFS API.
 
 ***
 
-### blobStorageConnectorType?
+### blobStorageConnectorType? {#blobstorageconnectortype}
 
-> `optional` **blobStorageConnectorType**: `string`
+> `optional` **blobStorageConnectorType?**: `string`
 
 The type of the entity storage to create, comma separate for more than one connector.
 values: memory, file, ipfs, aws-s3, azure-storage, gcp-storage.
@@ -550,9 +562,9 @@ values: memory, file, ipfs, aws-s3, azure-storage, gcp-storage.
 
 ***
 
-### blobStorageConnectorDefault?
+### blobStorageConnectorDefault? {#blobstorageconnectordefault}
 
-> `optional` **blobStorageConnectorDefault**: `string`
+> `optional` **blobStorageConnectorDefault?**: `string`
 
 The default blob storage connector to use, defaults to the first one in the list.
 
@@ -562,9 +574,9 @@ The default blob storage connector to use, defaults to the first one in the list
 
 ***
 
-### blobStorageConnectorPublic?
+### blobStorageConnectorPublic? {#blobstorageconnectorpublic}
 
-> `optional` **blobStorageConnectorPublic**: `string`
+> `optional` **blobStorageConnectorPublic?**: `string`
 
 Blog storage connector which has public access.
 
@@ -574,9 +586,9 @@ Blog storage connector which has public access.
 
 ***
 
-### blobStorageEnableEncryption?
+### blobStorageEnableEncryption? {#blobstorageenableencryption}
 
-> `optional` **blobStorageEnableEncryption**: `string`
+> `optional` **blobStorageEnableEncryption?**: `string`
 
 Enable encryption for the blob storage.
 
@@ -586,9 +598,9 @@ Enable encryption for the blob storage.
 
 ***
 
-### blobStorageEncryptionKeyId?
+### blobStorageEncryptionKeyId? {#blobstorageencryptionkeyid}
 
-> `optional` **blobStorageEncryptionKeyId**: `string`
+> `optional` **blobStorageEncryptionKeyId?**: `string`
 
 The id of the encryption key for the blob storage.
 
@@ -598,22 +610,9 @@ The id of the encryption key for the blob storage.
 
 ***
 
-### blobStorageSymmetricEncryptionKey?
-
-> `optional` **blobStorageSymmetricEncryptionKey**: `string`
-
-A symmetric encryption key for the blob storage, should be ChaCha20Poly1305 in base64 format.
-If encryption is enabled but a key is not provided one will be generated.
-
-#### Inherited from
-
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`blobStorageSymmetricEncryptionKey`](IEngineServerEnvironmentVariables.md#blobstoragesymmetricencryptionkey)
-
-***
-
-### blobStoragePrefix?
+### blobStoragePrefix? {#blobstorageprefix}
 
-> `optional` **blobStoragePrefix**: `string`
+> `optional` **blobStoragePrefix?**: `string`
 
 A prefix for all the blobs in blob-storage, can be empty.
 
@@ -623,9 +622,9 @@ A prefix for all the blobs in blob-storage, can be empty.
 
 ***
 
-### awsS3Region?
+### awsS3Region? {#awss3region}
 
-> `optional` **awsS3Region**: `string`
+> `optional` **awsS3Region?**: `string`
 
 AWS S3 region.
 
@@ -635,9 +634,9 @@ AWS S3 region.
 
 ***
 
-### awsS3BucketName?
+### awsS3BucketName? {#awss3bucketname}
 
-> `optional` **awsS3BucketName**: `string`
+> `optional` **awsS3BucketName?**: `string`
 
 AWS S3 bucket name.
 
@@ -647,9 +646,9 @@ AWS S3 bucket name.
 
 ***
 
-### awsS3AuthMode?
+### awsS3AuthMode? {#awss3authmode}
 
-> `optional` **awsS3AuthMode**: `string`
+> `optional` **awsS3AuthMode?**: `string`
 
 AWS S3 auth mode, either credentials or pod, defaults to credentials.
 
@@ -659,9 +658,9 @@ AWS S3 auth mode, either credentials or pod, defaults to credentials.
 
 ***
 
-### awsS3AccessKeyId?
+### awsS3AccessKeyId? {#awss3accesskeyid}
 
-> `optional` **awsS3AccessKeyId**: `string`
+> `optional` **awsS3AccessKeyId?**: `string`
 
 AWS S3 access key id.
 
@@ -671,9 +670,9 @@ AWS S3 access key id.
 
 ***
 
-### awsS3SecretAccessKey?
+### awsS3SecretAccessKey? {#awss3secretaccesskey}
 
-> `optional` **awsS3SecretAccessKey**: `string`
+> `optional` **awsS3SecretAccessKey?**: `string`
 
 AWS S3 secret access key.
 
@@ -683,9 +682,9 @@ AWS S3 secret access key.
 
 ***
 
-### awsS3Endpoint?
+### awsS3Endpoint? {#awss3endpoint}
 
-> `optional` **awsS3Endpoint**: `string`
+> `optional` **awsS3Endpoint?**: `string`
 
 AWS S3 endpoint.
 
@@ -695,9 +694,9 @@ AWS S3 endpoint.
 
 ***
 
-### azureStorageAccountKey?
+### azureStorageAccountKey? {#azurestorageaccountkey}
 
-> `optional` **azureStorageAccountKey**: `string`
+> `optional` **azureStorageAccountKey?**: `string`
 
 Azure Storage account key.
 
@@ -707,9 +706,9 @@ Azure Storage account key.
 
 ***
 
-### azureStorageAccountName?
+### azureStorageAccountName? {#azurestorageaccountname}
 
-> `optional` **azureStorageAccountName**: `string`
+> `optional` **azureStorageAccountName?**: `string`
 
 Azure Storage account name.
 
@@ -719,9 +718,9 @@ Azure Storage account name.
 
 ***
 
-### azureStorageContainerName?
+### azureStorageContainerName? {#azurestoragecontainername}
 
-> `optional` **azureStorageContainerName**: `string`
+> `optional` **azureStorageContainerName?**: `string`
 
 Azure Storage container.
 
@@ -731,9 +730,9 @@ Azure Storage container.
 
 ***
 
-### azureStorageEndpoint?
+### azureStorageEndpoint? {#azurestorageendpoint}
 
-> `optional` **azureStorageEndpoint**: `string`
+> `optional` **azureStorageEndpoint?**: `string`
 
 Azure Storage endpoint.
 
@@ -743,9 +742,9 @@ Azure Storage endpoint.
 
 ***
 
-### gcpStorageBucketName?
+### gcpStorageBucketName? {#gcpstoragebucketname}
 
-> `optional` **gcpStorageBucketName**: `string`
+> `optional` **gcpStorageBucketName?**: `string`
 
 GCP Storage bucket.
 
@@ -755,9 +754,9 @@ GCP Storage bucket.
 
 ***
 
-### gcpStorageCredentials?
+### gcpStorageCredentials? {#gcpstoragecredentials}
 
-> `optional` **gcpStorageCredentials**: `string`
+> `optional` **gcpStorageCredentials?**: `string`
 
 GCP Storage credentials.
 
@@ -767,9 +766,9 @@ GCP Storage credentials.
 
 ***
 
-### gcpStorageEndpoint?
+### gcpStorageEndpoint? {#gcpstorageendpoint}
 
-> `optional` **gcpStorageEndpoint**: `string`
+> `optional` **gcpStorageEndpoint?**: `string`
 
 GCP Storage endpoint.
 
@@ -779,9 +778,9 @@ GCP Storage endpoint.
 
 ***
 
-### gcpStorageProjectId?
+### gcpStorageProjectId? {#gcpstorageprojectid}
 
-> `optional` **gcpStorageProjectId**: `string`
+> `optional` **gcpStorageProjectId?**: `string`
 
 GCP Storage project id.
 
@@ -791,9 +790,9 @@ GCP Storage project id.
 
 ***
 
-### vaultConnector?
+### vaultConnector? {#vaultconnector}
 
-> `optional` **vaultConnector**: `string`
+> `optional` **vaultConnector?**: `string`
 
 The type of the default vault connector: entity-storage, hashicorp.
 
@@ -803,57 +802,57 @@ The type of the default vault connector: entity-storage, hashicorp.
 
 ***
 
-### hashicorpVaultToken?
+### vaultPrefix? {#vaultprefix}
 
-> `optional` **hashicorpVaultToken**: `string`
+> `optional` **vaultPrefix?**: `string`
 
-Hashicorp Vault token.
+Prefix to prepend to entries in the vault.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`hashicorpVaultToken`](IEngineServerEnvironmentVariables.md#hashicorpvaulttoken)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`vaultPrefix`](IEngineServerEnvironmentVariables.md#vaultprefix)
 
 ***
 
-### hashicorpVaultEndpoint?
+### hashicorpVaultToken? {#hashicorpvaulttoken}
 
-> `optional` **hashicorpVaultEndpoint**: `string`
+> `optional` **hashicorpVaultToken?**: `string`
 
-Hashicorp Vault endpoint.
+Hashicorp Vault token.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`hashicorpVaultEndpoint`](IEngineServerEnvironmentVariables.md#hashicorpvaultendpoint)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`hashicorpVaultToken`](IEngineServerEnvironmentVariables.md#hashicorpvaulttoken)
 
 ***
 
-### loggingConnector?
+### hashicorpVaultEndpoint? {#hashicorpvaultendpoint}
 
-> `optional` **loggingConnector**: `string`
+> `optional` **hashicorpVaultEndpoint?**: `string`
 
-The type of logging task connector, can be a comma separated list: console, entity-storage.
+Hashicorp Vault endpoint.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`loggingConnector`](IEngineServerEnvironmentVariables.md#loggingconnector)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`hashicorpVaultEndpoint`](IEngineServerEnvironmentVariables.md#hashicorpvaultendpoint)
 
 ***
 
-### backgroundTaskConnector?
+### loggingConnector? {#loggingconnector}
 
-> `optional` **backgroundTaskConnector**: `string`
+> `optional` **loggingConnector?**: `string`
 
-The type of background task connector: entity-storage.
+The type of logging task connector, can be a comma separated list: console, entity-storage.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`backgroundTaskConnector`](IEngineServerEnvironmentVariables.md#backgroundtaskconnector)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`loggingConnector`](IEngineServerEnvironmentVariables.md#loggingconnector)
 
 ***
 
-### eventBusConnector?
+### eventBusConnector? {#eventbusconnector}
 
-> `optional` **eventBusConnector**: `string`
+> `optional` **eventBusConnector?**: `string`
 
 The type of event bus connector: local.
 
@@ -863,9 +862,9 @@ The type of event bus connector: local.
 
 ***
 
-### eventBusComponent?
+### eventBusComponent? {#eventbuscomponent}
 
-> `optional` **eventBusComponent**: `string`
+> `optional` **eventBusComponent?**: `string`
 
 The type of event bus component: service.
 
@@ -875,9 +874,9 @@ The type of event bus component: service.
 
 ***
 
-### messagingEnabled?
+### messagingEnabled? {#messagingenabled}
 
-> `optional` **messagingEnabled**: `string`
+> `optional` **messagingEnabled?**: `string`
 
 Are the messaging components enabled, defaults to false.
 
@@ -887,9 +886,9 @@ Are the messaging components enabled, defaults to false.
 
 ***
 
-### awsSesRegion?
+### awsSesRegion? {#awssesregion}
 
-> `optional` **awsSesRegion**: `string`
+> `optional` **awsSesRegion?**: `string`
 
 AWS SES region.
 
@@ -899,9 +898,9 @@ AWS SES region.
 
 ***
 
-### awsSesAuthMode?
+### awsSesAuthMode? {#awssesauthmode}
 
-> `optional` **awsSesAuthMode**: `string`
+> `optional` **awsSesAuthMode?**: `string`
 
 AWS SES auth mode, either credentials or pod, defaults to credentials.
 
@@ -911,9 +910,9 @@ AWS SES auth mode, either credentials or pod, defaults to credentials.
 
 ***
 
-### awsSesSecretAccessKey?
+### awsSesSecretAccessKey? {#awssessecretaccesskey}
 
-> `optional` **awsSesSecretAccessKey**: `string`
+> `optional` **awsSesSecretAccessKey?**: `string`
 
 AWS SES secret access key.
 
@@ -923,9 +922,9 @@ AWS SES secret access key.
 
 ***
 
-### awsSesAccessKeyId?
+### awsSesAccessKeyId? {#awssesaccesskeyid}
 
-> `optional` **awsSesAccessKeyId**: `string`
+> `optional` **awsSesAccessKeyId?**: `string`
 
 AWS SES access key id.
 
@@ -935,9 +934,9 @@ AWS SES access key id.
 
 ***
 
-### awsSesEndpoint?
+### awsSesEndpoint? {#awssesendpoint}
 
-> `optional` **awsSesEndpoint**: `string`
+> `optional` **awsSesEndpoint?**: `string`
 
 AWS SES endpoint.
 
@@ -947,11 +946,11 @@ AWS SES endpoint.
 
 ***
 
-### awsMessagingPushNotificationApplications?
+### awsMessagingPushNotificationApplications? {#awsmessagingpushnotificationapplications}
 
-> `optional` **awsMessagingPushNotificationApplications**: `string`
+> `optional` **awsMessagingPushNotificationApplications?**: `string`
 
-The applications for the push notifications JSON stringified array of IAwsApplicationSettings.
+The applications for the push notifications reference a separate json with @json: prefix.
 
 #### Inherited from
 
@@ -959,9 +958,9 @@ The applications for the push notifications JSON stringified array of IAwsApplic
 
 ***
 
-### messagingEmailConnector?
+### messagingEmailConnector? {#messagingemailconnector}
 
-> `optional` **messagingEmailConnector**: `string`
+> `optional` **messagingEmailConnector?**: `string`
 
 The type of messaging email connector: entity-storage, aws.
 
@@ -971,9 +970,9 @@ The type of messaging email connector: entity-storage, aws.
 
 ***
 
-### messagingSmsConnector?
+### messagingSmsConnector? {#messagingsmsconnector}
 
-> `optional` **messagingSmsConnector**: `string`
+> `optional` **messagingSmsConnector?**: `string`
 
 The type of messaging sms connector: entity-storage, aws.
 
@@ -983,9 +982,9 @@ The type of messaging sms connector: entity-storage, aws.
 
 ***
 
-### messagingPushNotificationConnector?
+### messagingPushNotificationConnector? {#messagingpushnotificationconnector}
 
-> `optional` **messagingPushNotificationConnector**: `string`
+> `optional` **messagingPushNotificationConnector?**: `string`
 
 The type of messaging push notification connector: entity-storage, aws.
 
@@ -995,9 +994,9 @@ The type of messaging push notification connector: entity-storage, aws.
 
 ***
 
-### telemetryConnector?
+### telemetryConnector? {#telemetryconnector}
 
-> `optional` **telemetryConnector**: `string`
+> `optional` **telemetryConnector?**: `string`
 
 The type of telemetry connector: entity-storage.
 
@@ -1007,9 +1006,93 @@ The type of telemetry connector: entity-storage.
 
 ***
 
-### faucetConnector?
+### openTelemetryMeterName? {#opentelemetrymetername}
+
+> `optional` **openTelemetryMeterName?**: `string`
+
+The name of the Open Telemetry meter to use, only required if using open-telemetry as telemetry connector, defaults to twin-node.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`openTelemetryMeterName`](IEngineServerEnvironmentVariables.md#opentelemetrymetername)
+
+***
+
+### openTelemetryMeterVersion? {#opentelemetrymeterversion}
+
+> `optional` **openTelemetryMeterVersion?**: `string`
+
+The version of the Open Telemetry metrics specification to use, only required if using open-telemetry as telemetry connector, defaults to 1.0.0.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`openTelemetryMeterVersion`](IEngineServerEnvironmentVariables.md#opentelemetrymeterversion)
+
+***
+
+### openTelemetryReader? {#opentelemetryreader}
+
+> `optional` **openTelemetryReader?**: `string`
+
+The type of Open Telemetry metric reader to use, only required if using open-telemetry as telemetry connector, values: prometheus.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`openTelemetryReader`](IEngineServerEnvironmentVariables.md#opentelemetryreader)
+
+***
+
+### openTelemetryPrometheusPort? {#opentelemetryprometheusport}
+
+> `optional` **openTelemetryPrometheusPort?**: `string`
+
+The port to use for the Open Telemetry Prometheus metrics server, only required if using open-telemetry as telemetry connector and prometheus as reader, defaults to 9464.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`openTelemetryPrometheusPort`](IEngineServerEnvironmentVariables.md#opentelemetryprometheusport)
+
+***
+
+### telemetryMetricsCollectorIntervalSeconds? {#telemetrymetricscollectorintervalseconds}
+
+> `optional` **telemetryMetricsCollectorIntervalSeconds?**: `string`
+
+Polling interval in seconds for the telemetry metrics collector. Defaults to 60.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`telemetryMetricsCollectorIntervalSeconds`](IEngineServerEnvironmentVariables.md#telemetrymetricscollectorintervalseconds)
+
+***
+
+### telemetryMetricsProducers? {#telemetrymetricsproducers}
+
+> `optional` **telemetryMetricsProducers?**: `string`
+
+The type of telemetry metrics producers, can be a comma separated list: system, process.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`telemetryMetricsProducers`](IEngineServerEnvironmentVariables.md#telemetrymetricsproducers)
+
+***
+
+### telemetryMetricsProducerMaxHistory? {#telemetrymetricsproducermaxhistory}
+
+> `optional` **telemetryMetricsProducerMaxHistory?**: `string`
+
+Maximum number of values retained per telemetry metric (count-based history cap). Defaults to 1440.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`telemetryMetricsProducerMaxHistory`](IEngineServerEnvironmentVariables.md#telemetrymetricsproducermaxhistory)
+
+***
+
+### faucetConnector? {#faucetconnector}
 
-> `optional` **faucetConnector**: `string`
+> `optional` **faucetConnector?**: `string`
 
 The type of faucet connector: entity-storage, iota.
 
@@ -1019,9 +1102,9 @@ The type of faucet connector: entity-storage, iota.
 
 ***
 
-### walletConnector?
+### walletConnector? {#walletconnector}
 
-> `optional` **walletConnector**: `string`
+> `optional` **walletConnector?**: `string`
 
 The type of wallet connector: entity-storage, iota.
 
@@ -1031,9 +1114,9 @@ The type of wallet connector: entity-storage, iota.
 
 ***
 
-### nftConnector?
+### nftConnector? {#nftconnector}
 
-> `optional` **nftConnector**: `string`
+> `optional` **nftConnector?**: `string`
 
 The type of NFT connector: entity-storage, iota.
 
@@ -1043,9 +1126,21 @@ The type of NFT connector: entity-storage, iota.
 
 ***
 
-### identityConnector?
+### notarizationConnector? {#notarizationconnector}
 
-> `optional` **identityConnector**: `string`
+> `optional` **notarizationConnector?**: `string`
+
+The type of notarization connector: entity-storage, iota.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`notarizationConnector`](IEngineServerEnvironmentVariables.md#notarizationconnector)
+
+***
+
+### identityConnector? {#identityconnector}
+
+> `optional` **identityConnector?**: `string`
 
 The type of identity connector: entity-storage, iota.
 
@@ -1055,9 +1150,21 @@ The type of identity connector: entity-storage, iota.
 
 ***
 
-### identityResolverConnector?
+### identityWalletAddressIndex? {#identitywalletaddressindex}
+
+> `optional` **identityWalletAddressIndex?**: `string`
+
+The index of the wallet address to use, defaults to 0.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`identityWalletAddressIndex`](IEngineServerEnvironmentVariables.md#identitywalletaddressindex)
+
+***
+
+### identityResolverConnector? {#identityresolverconnector}
 
-> `optional` **identityResolverConnector**: `string`
+> `optional` **identityResolverConnector?**: `string`
 
 The type of identity resolver connector: entity-storage, iota.
 
@@ -1067,9 +1174,9 @@ The type of identity resolver connector: entity-storage, iota.
 
 ***
 
-### verifiableStorageConnector?
+### verifiableStorageConnector? {#verifiablestorageconnector}
 
-> `optional` **verifiableStorageConnector**: `string`
+> `optional` **verifiableStorageConnector?**: `string`
 
 The type of verifiable storage connector: entity-storage, iota.
 
@@ -1079,9 +1186,9 @@ The type of verifiable storage connector: entity-storage, iota.
 
 ***
 
-### iotaFaucetEndpoint?
+### iotaFaucetEndpoint? {#iotafaucetendpoint}
 
-> `optional` **iotaFaucetEndpoint**: `string`
+> `optional` **iotaFaucetEndpoint?**: `string`
 
 IOTA Faucet Endpoint.
 
@@ -1091,9 +1198,9 @@ IOTA Faucet Endpoint.
 
 ***
 
-### iotaNodeEndpoint?
+### iotaNodeEndpoint? {#iotanodeendpoint}
 
-> `optional` **iotaNodeEndpoint**: `string`
+> `optional` **iotaNodeEndpoint?**: `string`
 
 IOTA Node Endpoint.
 
@@ -1103,9 +1210,9 @@ IOTA Node Endpoint.
 
 ***
 
-### iotaNetwork?
+### iotaNetwork? {#iotanetwork}
 
-> `optional` **iotaNetwork**: `string`
+> `optional` **iotaNetwork?**: `string`
 
 IOTA network.
 
@@ -1115,9 +1222,9 @@ IOTA network.
 
 ***
 
-### iotaCoinType?
+### iotaCoinType? {#iotacointype}
 
-> `optional` **iotaCoinType**: `string`
+> `optional` **iotaCoinType?**: `string`
 
 IOTA coin type.
 
@@ -1127,9 +1234,9 @@ IOTA coin type.
 
 ***
 
-### iotaExplorerEndpoint?
+### iotaExplorerEndpoint? {#iotaexplorerendpoint}
 
-> `optional` **iotaExplorerEndpoint**: `string`
+> `optional` **iotaExplorerEndpoint?**: `string`
 
 IOTA Explorer Endpoint.
 
@@ -1139,9 +1246,9 @@ IOTA Explorer Endpoint.
 
 ***
 
-### iotaGasStationEndpoint?
+### iotaGasStationEndpoint? {#iotagasstationendpoint}
 
-> `optional` **iotaGasStationEndpoint**: `string`
+> `optional` **iotaGasStationEndpoint?**: `string`
 
 IOTA Gas Station Endpoint.
 
@@ -1151,9 +1258,9 @@ IOTA Gas Station Endpoint.
 
 ***
 
-### iotaGasStationAuthToken?
+### iotaGasStationAuthToken? {#iotagasstationauthtoken}
 
-> `optional` **iotaGasStationAuthToken**: `string`
+> `optional` **iotaGasStationAuthToken?**: `string`
 
 IOTA Gas Station Authentication Token.
 
@@ -1163,9 +1270,9 @@ IOTA Gas Station Authentication Token.
 
 ***
 
-### universalResolverEndpoint?
+### universalResolverEndpoint? {#universalresolverendpoint}
 
-> `optional` **universalResolverEndpoint**: `string`
+> `optional` **universalResolverEndpoint?**: `string`
 
 Universal Resolver Endpoint.
 
@@ -1175,9 +1282,9 @@ Universal Resolver Endpoint.
 
 ***
 
-### identityProfileConnector?
+### identityProfileConnector? {#identityprofileconnector}
 
-> `optional` **identityProfileConnector**: `string`
+> `optional` **identityProfileConnector?**: `string`
 
 The type of identity profile connector: entity-storage.
 
@@ -1187,9 +1294,9 @@ The type of identity profile connector: entity-storage.
 
 ***
 
-### immutableProofVerificationMethodId?
+### immutableProofVerificationMethodId? {#immutableproofverificationmethodid}
 
-> `optional` **immutableProofVerificationMethodId**: `string`
+> `optional` **immutableProofVerificationMethodId?**: `string`
 
 The identity verification method id to use with immutable proofs.
 
@@ -1199,9 +1306,9 @@ The identity verification method id to use with immutable proofs.
 
 ***
 
-### attestationConnector?
+### attestationConnector? {#attestationconnector}
 
-> `optional` **attestationConnector**: `string`
+> `optional` **attestationConnector?**: `string`
 
 The type of attestation connector: entity-storage, iota.
 
@@ -1211,9 +1318,9 @@ The type of attestation connector: entity-storage, iota.
 
 ***
 
-### attestationVerificationMethodId?
+### attestationVerificationMethodId? {#attestationverificationmethodid}
 
-> `optional` **attestationVerificationMethodId**: `string`
+> `optional` **attestationVerificationMethodId?**: `string`
 
 The identity verification method id to use with attestation.
 
@@ -1223,9 +1330,9 @@ The identity verification method id to use with attestation.
 
 ***
 
-### dataProcessingEnabled?
+### dataProcessingEnabled? {#dataprocessingenabled}
 
-> `optional` **dataProcessingEnabled**: `string`
+> `optional` **dataProcessingEnabled?**: `string`
 
 Is the data processing enabled, defaults to false.
 
@@ -1235,9 +1342,9 @@ Is the data processing enabled, defaults to false.
 
 ***
 
-### dataConverterConnectors?
+### dataConverterConnectors? {#dataconverterconnectors}
 
-> `optional` **dataConverterConnectors**: `string`
+> `optional` **dataConverterConnectors?**: `string`
 
 The type of the default data converters, can be a comma separated list: json, xml.
 
@@ -1247,9 +1354,9 @@ The type of the default data converters, can be a comma separated list: json, xm
 
 ***
 
-### dataExtractorConnectors?
+### dataExtractorConnectors? {#dataextractorconnectors}
 
-> `optional` **dataExtractorConnectors**: `string`
+> `optional` **dataExtractorConnectors?**: `string`
 
 The type of the default data extractor, can be a comma separated list: json-path.
 
@@ -1259,9 +1366,9 @@ The type of the default data extractor, can be a comma separated list: json-path
 
 ***
 
-### auditableItemGraphEnabled?
+### auditableItemGraphEnabled? {#auditableitemgraphenabled}
 
-> `optional` **auditableItemGraphEnabled**: `string`
+> `optional` **auditableItemGraphEnabled?**: `string`
 
 Is the auditable item graph enabled, defaults to false.
 
@@ -1271,9 +1378,9 @@ Is the auditable item graph enabled, defaults to false.
 
 ***
 
-### auditableItemStreamEnabled?
+### auditableItemStreamEnabled? {#auditableitemstreamenabled}
 
-> `optional` **auditableItemStreamEnabled**: `string`
+> `optional` **auditableItemStreamEnabled?**: `string`
 
 Is the auditable item stream enabled, defaults to false.
 
@@ -1283,9 +1390,9 @@ Is the auditable item stream enabled, defaults to false.
 
 ***
 
-### documentManagementEnabled?
+### documentManagementEnabled? {#documentmanagementenabled}
 
-> `optional` **documentManagementEnabled**: `string`
+> `optional` **documentManagementEnabled?**: `string`
 
 Is the document management enabled, defaults to false.
 
@@ -1295,9 +1402,9 @@ Is the document management enabled, defaults to false.
 
 ***
 
-### synchronisedStorageEnabled?
+### synchronisedStorageEnabled? {#synchronisedstorageenabled}
 
-> `optional` **synchronisedStorageEnabled**: `string`
+> `optional` **synchronisedStorageEnabled?**: `string`
 
 Is the synchronised storage enabled, defaults to false.
 
@@ -1307,9 +1414,9 @@ Is the synchronised storage enabled, defaults to false.
 
 ***
 
-### synchronisedStorageTrustedUrl?
+### synchronisedStorageTrustedUrl? {#synchronisedstoragetrustedurl}
 
-> `optional` **synchronisedStorageTrustedUrl**: `string`
+> `optional` **synchronisedStorageTrustedUrl?**: `string`
 
 Url which points to the api for a trusted synchronised storage node, not required if this is a trusted node.
 
@@ -1319,9 +1426,9 @@ Url which points to the api for a trusted synchronised storage node, not require
 
 ***
 
-### synchronisedStorageVerifiableStorageKeyId?
+### synchronisedStorageVerifiableStorageKeyId? {#synchronisedstorageverifiablestoragekeyid}
 
-> `optional` **synchronisedStorageVerifiableStorageKeyId**: `string`
+> `optional` **synchronisedStorageVerifiableStorageKeyId?**: `string`
 
 The key for the smart contract which contains the verifiable storage pointer store for synchronised storage.
 This only required if using a custom verifiable storage item, otherwise it will default to the network name.
@@ -1332,9 +1439,9 @@ This only required if using a custom verifiable storage item, otherwise it will
 
 ***
 
-### synchronisedStorageBlobStorageEncryptionKeyId?
+### synchronisedStorageBlobStorageEncryptionKeyId? {#synchronisedstorageblobstorageencryptionkeyid}
 
-> `optional` **synchronisedStorageBlobStorageEncryptionKeyId**: `string`
+> `optional` **synchronisedStorageBlobStorageEncryptionKeyId?**: `string`
 
 The key from the vault which is used to encrypt the synchronised storage blobs.
 Only required for trusted nodes, as regular nodes will request from the trusted nodes.
@@ -1346,9 +1453,9 @@ Defaults to synchronised-storage-blob-encryption
 
 ***
 
-### synchronisedStorageBlobStorageKey?
+### synchronisedStorageBlobStorageKey? {#synchronisedstorageblobstoragekey}
 
-> `optional` **synchronisedStorageBlobStorageKey**: `string`
+> `optional` **synchronisedStorageBlobStorageKey?**: `string`
 
 The key used for blob encryption, should be ChaCha20Poly1305 encoded as base64.
 Only required for trusted nodes, as regular nodes will not write encrypted data.
@@ -1359,9 +1466,9 @@ Only required for trusted nodes, as regular nodes will not write encrypted data.
 
 ***
 
-### synchronisedStorageEntityUpdateIntervalMinutes?
+### synchronisedStorageEntityUpdateIntervalMinutes? {#synchronisedstorageentityupdateintervalminutes}
 
-> `optional` **synchronisedStorageEntityUpdateIntervalMinutes**: `string`
+> `optional` **synchronisedStorageEntityUpdateIntervalMinutes?**: `string`
 
 How often to check for entity updates in minutes.
 
@@ -1377,9 +1484,9 @@ How often to check for entity updates in minutes.
 
 ***
 
-### synchronisedStorageConsolidationIntervalMinutes?
+### synchronisedStorageConsolidationIntervalMinutes? {#synchronisedstorageconsolidationintervalminutes}
 
-> `optional` **synchronisedStorageConsolidationIntervalMinutes**: `string`
+> `optional` **synchronisedStorageConsolidationIntervalMinutes?**: `string`
 
 Interval to perform consolidation of changesets, only used if this is a trusted node.
 
@@ -1395,9 +1502,9 @@ Interval to perform consolidation of changesets, only used if this is a trusted
 
 ***
 
-### synchronisedStorageConsolidationBatchSize?
+### synchronisedStorageConsolidationBatchSize? {#synchronisedstorageconsolidationbatchsize}
 
-> `optional` **synchronisedStorageConsolidationBatchSize**: `string`
+> `optional` **synchronisedStorageConsolidationBatchSize?**: `string`
 
 The number of entities to process in a single consolidation batch, only used if this is a trusted node.
 
@@ -1413,9 +1520,9 @@ The number of entities to process in a single consolidation batch, only used if
 
 ***
 
-### synchronisedStorageMaxConsolidations?
+### synchronisedStorageMaxConsolidations? {#synchronisedstoragemaxconsolidations}
 
-> `optional` **synchronisedStorageMaxConsolidations**: `string`
+> `optional` **synchronisedStorageMaxConsolidations?**: `string`
 
 The maximum number of consolidations to keep in storage, only used if this is a trusted node.
 
@@ -1431,184 +1538,186 @@ The maximum number of consolidations to keep in storage, only used if this is a
 
 ***
 
-### federatedCatalogueEnabled?
+### federatedCatalogueFilters? {#federatedcataloguefilters}
 
-> `optional` **federatedCatalogueEnabled**: `string`
+> `optional` **federatedCatalogueFilters?**: `string`
 
-Is the federated catalogue enabled, defaults to false.
+Federated catalog filters, command separated list of filters to add.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`federatedCatalogueEnabled`](IEngineServerEnvironmentVariables.md#federatedcatalogueenabled)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`federatedCatalogueFilters`](IEngineServerEnvironmentVariables.md#federatedcataloguefilters)
 
 ***
 
-### federatedCatalogueCacheTtlMs?
+### trustGenerators? {#trustgenerators}
 
-> `optional` **federatedCatalogueCacheTtlMs**: `number`
+> `optional` **trustGenerators?**: `string`
 
-Federated catalog TTL for the cache.
+The trust generators to add to the factory, comma separated list.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`federatedCatalogueCacheTtlMs`](IEngineServerEnvironmentVariables.md#federatedcataloguecachettlms)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`trustGenerators`](IEngineServerEnvironmentVariables.md#trustgenerators)
 
 ***
 
-### federatedCatalogueClearingHouseApproverList?
+### trustVerifiers? {#trustverifiers}
 
-> `optional` **federatedCatalogueClearingHouseApproverList**: `string`
+> `optional` **trustVerifiers?**: `string`
 
-Federated catalog clearing house approver list, stringified array of DIDs.
+The trust verifiers to add to the factory, comma separated list.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`federatedCatalogueClearingHouseApproverList`](IEngineServerEnvironmentVariables.md#federatedcatalogueclearinghouseapproverlist)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`trustVerifiers`](IEngineServerEnvironmentVariables.md#trustverifiers)
 
 ***
 
-### rightsManagementEnabled?
+### trustVerificationMethodId? {#trustverificationmethodid}
 
-> `optional` **rightsManagementEnabled**: `string`
+> `optional` **trustVerificationMethodId?**: `string`
 
-Is the rights management enabled, defaults to false.
+The verification method to use for trust identities.
+Defaults to trust-assertion.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementEnabled`](IEngineServerEnvironmentVariables.md#rightsmanagementenabled)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`trustVerificationMethodId`](IEngineServerEnvironmentVariables.md#trustverificationmethodid)
 
 ***
 
-### rightsManagementBaseCallbackUrl?
+### trustJwtTtlSeconds? {#trustjwtttlseconds}
 
-> `optional` **rightsManagementBaseCallbackUrl**: `string`
+> `optional` **trustJwtTtlSeconds?**: `string`
 
-What is the base callback url for rights management negotiations e.g. https://my-node/rights-management.
+The trust time to live for generating JWTs.
+Defaults to undefined for never expiring.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementBaseCallbackUrl`](IEngineServerEnvironmentVariables.md#rightsmanagementbasecallbackurl)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`trustJwtTtlSeconds`](IEngineServerEnvironmentVariables.md#trustjwtttlseconds)
 
 ***
 
-### rightsManagementInformationSources?
+### rightsManagementCallbackPath? {#rightsmanagementcallbackpath}
 
-> `optional` **rightsManagementInformationSources**: `string`
+> `optional` **rightsManagementCallbackPath?**: `string`
 
-The rights management configuration which includes the information sources modules to load.
-Use the @json: prefix to specify the path to the JSON configuration file.
+Path under which the rights management service is mounted (single source
+of truth). The same value drives:
+- the server route mount (via engine config)
+- the PNP service's callback URL builder (`buildCallbackUrl`)
+- the PNP rest-client's pathPrefix (consumer side)
+Defaults to `rights-management`. Set when deploying behind a reverse proxy
+with path rewriting, K8s ingress with path-based routing, or any custom
+mount point.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementInformationSources`](IEngineServerEnvironmentVariables.md#rightsmanagementinformationsources)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementCallbackPath`](IEngineServerEnvironmentVariables.md#rightsmanagementcallbackpath)
 
 ***
 
-### rightsManagementNegotiators?
+### rightsManagementPolicyInformationSources? {#rightsmanagementpolicyinformationsources}
 
-> `optional` **rightsManagementNegotiators**: `string`
+> `optional` **rightsManagementPolicyInformationSources?**: `string`
 
-The rights management configuration which includes the negotiator modules to load.
-Use the @json: prefix to specify the path to the JSON configuration file.
+The rights management policy information sources to add to the factory.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementNegotiators`](IEngineServerEnvironmentVariables.md#rightsmanagementnegotiators)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementPolicyInformationSources`](IEngineServerEnvironmentVariables.md#rightsmanagementpolicyinformationsources)
 
 ***
 
-### rightsManagementRequesters?
+### rightsManagementPolicyNegotiators? {#rightsmanagementpolicynegotiators}
 
-> `optional` **rightsManagementRequesters**: `string`
+> `optional` **rightsManagementPolicyNegotiators?**: `string`
 
-The rights management configuration which includes the requester modules to load.
-Use the @json: prefix to specify the path to the JSON configuration file.
+The rights management policy negotiators sources to add to the factory.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementRequesters`](IEngineServerEnvironmentVariables.md#rightsmanagementrequesters)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementPolicyNegotiators`](IEngineServerEnvironmentVariables.md#rightsmanagementpolicynegotiators)
 
 ***
 
-### rightsManagementExecutionActions?
+### rightsManagementPolicyRequesters? {#rightsmanagementpolicyrequesters}
 
-> `optional` **rightsManagementExecutionActions**: `string`
+> `optional` **rightsManagementPolicyRequesters?**: `string`
 
-The rights management configuration which includes the execution actions modules to load.
-Use the @json: prefix to specify the path to the JSON configuration file.
+The rights management policy requesters to add to the factory.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementExecutionActions`](IEngineServerEnvironmentVariables.md#rightsmanagementexecutionactions)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementPolicyRequesters`](IEngineServerEnvironmentVariables.md#rightsmanagementpolicyrequesters)
 
 ***
 
-### rightsManagementEnforcementProcessors?
+### rightsManagementPolicyExecutionActions? {#rightsmanagementpolicyexecutionactions}
 
-> `optional` **rightsManagementEnforcementProcessors**: `string`
+> `optional` **rightsManagementPolicyExecutionActions?**: `string`
 
-The rights management configuration which includes the enforcement processor modules to load.
-Use the @json: prefix to specify the path to the JSON configuration file.
+The rights management policy execution actions to add to the factory.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementEnforcementProcessors`](IEngineServerEnvironmentVariables.md#rightsmanagementenforcementprocessors)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementPolicyExecutionActions`](IEngineServerEnvironmentVariables.md#rightsmanagementpolicyexecutionactions)
 
 ***
 
-### rightsManagementArbiters?
+### rightsManagementPolicyEnforcementProcessors? {#rightsmanagementpolicyenforcementprocessors}
 
-> `optional` **rightsManagementArbiters**: `string`
+> `optional` **rightsManagementPolicyEnforcementProcessors?**: `string`
 
-The rights management configuration which includes the arbiter modules to load.
-Use the @json: prefix to specify the path to the JSON configuration file.
+The rights management policy enforcement processors to add to the factory.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementArbiters`](IEngineServerEnvironmentVariables.md#rightsmanagementarbiters)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementPolicyEnforcementProcessors`](IEngineServerEnvironmentVariables.md#rightsmanagementpolicyenforcementprocessors)
 
 ***
 
-### rightsManagementOffers?
+### rightsManagementPolicyArbiters? {#rightsmanagementpolicyarbiters}
 
-> `optional` **rightsManagementOffers**: `string`
+> `optional` **rightsManagementPolicyArbiters?**: `string`
 
-The rights management configuration which includes the offer modules to load.
-Use the @json: prefix to specify the path to the JSON configuration file.
+The rights management policy arbiters to add to the factory.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementOffers`](IEngineServerEnvironmentVariables.md#rightsmanagementoffers)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementPolicyArbiters`](IEngineServerEnvironmentVariables.md#rightsmanagementpolicyarbiters)
 
 ***
 
-### taskSchedulerEnabled?
+### rightsManagementPolicyObligationEnforcers? {#rightsmanagementpolicyobligationenforcers}
 
-> `optional` **taskSchedulerEnabled**: `string`
+> `optional` **rightsManagementPolicyObligationEnforcers?**: `string`
 
-Is the task scheduler enabled, defaults to false.
+The rights management policy obligation enforcers to add to the factory.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`taskSchedulerEnabled`](IEngineServerEnvironmentVariables.md#taskschedulerenabled)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`rightsManagementPolicyObligationEnforcers`](IEngineServerEnvironmentVariables.md#rightsmanagementpolicyobligationenforcers)
 
 ***
 
-### dataSpaceConnectorEnabled?
+### dataspaceEnabled? {#dataspaceenabled}
 
-> `optional` **dataSpaceConnectorEnabled**: `string`
+> `optional` **dataspaceEnabled?**: `string`
 
-Is the data space connector enabled, defaults to false.
+Is the dataspace enabled, defaults to false.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`dataSpaceConnectorEnabled`](IEngineServerEnvironmentVariables.md#dataspaceconnectorenabled)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`dataspaceEnabled`](IEngineServerEnvironmentVariables.md#dataspaceenabled)
 
 ***
 
-### dataSpaceConnectorRetainActivityLogsFor?
+### dataspaceRetainActivityLogsFor? {#dataspaceretainactivitylogsfor}
 
-> `optional` **dataSpaceConnectorRetainActivityLogsFor**: `string`
+> `optional` **dataspaceRetainActivityLogsFor?**: `string`
 
 The length of time to retain the activity logs for in minutes, set to -1 to keep forever.
 
@@ -1620,13 +1729,13 @@ The length of time to retain the activity logs for in minutes, set to -1 to keep
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`dataSpaceConnectorRetainActivityLogsFor`](IEngineServerEnvironmentVariables.md#dataspaceconnectorretainactivitylogsfor)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`dataspaceRetainActivityLogsFor`](IEngineServerEnvironmentVariables.md#dataspaceretainactivitylogsfor)
 
 ***
 
-### dataSpaceConnectorActivityLogsCleanUpInterval?
+### dataspaceActivityLogsCleanUpInterval? {#dataspaceactivitylogscleanupinterval}
 
-> `optional` **dataSpaceConnectorActivityLogsCleanUpInterval**: `string`
+> `optional` **dataspaceActivityLogsCleanUpInterval?**: `string`
 
 The interval for cleaning up the activity logs.
 
@@ -1638,290 +1747,282 @@ The interval for cleaning up the activity logs.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`dataSpaceConnectorActivityLogsCleanUpInterval`](IEngineServerEnvironmentVariables.md#dataspaceconnectoractivitylogscleanupinterval)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`dataspaceActivityLogsCleanUpInterval`](IEngineServerEnvironmentVariables.md#dataspaceactivitylogscleanupinterval)
 
 ***
 
-### vcAuthenticationEnabled?
+### dataspaceDataPlanePath? {#dataspacedataplanepath}
 
-> `optional` **vcAuthenticationEnabled**: `string`
+> `optional` **dataspaceDataPlanePath?**: `string`
 
-Enable verifiable credential authentication for the API.
+The data plane path for PULL transfers (path only, not full URL).
+Will be combined with public origin from hosting component.
+Required if PULL transfers should be supported.
+Example: "dataspace/entities"
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`vcAuthenticationEnabled`](IEngineServerEnvironmentVariables.md#vcauthenticationenabled)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`dataspaceDataPlanePath`](IEngineServerEnvironmentVariables.md#dataspacedataplanepath)
 
 ***
 
-### vcAuthenticationVerificationMethodId?
+### healthEnabled? {#healthenabled}
 
-> `optional` **vcAuthenticationVerificationMethodId**: `string`
+> `optional` **healthEnabled?**: `string`
 
-Verifiable credential assertion for node to node communication.
-Defaults to node-authentication-assertion.
+Are the health components enabled, defaults to false.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`vcAuthenticationVerificationMethodId`](IEngineServerEnvironmentVariables.md#vcauthenticationverificationmethodid)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`healthEnabled`](IEngineServerEnvironmentVariables.md#healthenabled)
 
 ***
 
-### extensions?
+### healthIntervalSeconds? {#healthintervalseconds}
 
-> `optional` **extensions**: `string`
+> `optional` **healthIntervalSeconds?**: `string`
 
-A comma separated list of additional node extensions to load, the initialiseExtension method will be called for each extension.
+The interval in seconds for performing health checks, defaults to 60.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`extensions`](IEngineServerEnvironmentVariables.md#extensions)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`healthIntervalSeconds`](IEngineServerEnvironmentVariables.md#healthintervalseconds)
 
 ***
 
-### port?
+### healthStartupIntervalSeconds? {#healthstartupintervalseconds}
 
-> `optional` **port**: `string`
+> `optional` **healthStartupIntervalSeconds?**: `string`
 
-The port to serve the API from.
+The interval in seconds for performing health checks at startup, defaults to 2.
+This allows components that take a long time to initialize to be healthy before the first health check is performed.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`port`](IEngineServerEnvironmentVariables.md#port)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`healthStartupIntervalSeconds`](IEngineServerEnvironmentVariables.md#healthstartupintervalseconds)
 
 ***
 
-### host?
+### urlTransformerEncryptionKeyId? {#urltransformerencryptionkeyid}
 
-> `optional` **host**: `string`
+> `optional` **urlTransformerEncryptionKeyId?**: `string`
 
-The host to serve the API from.
+The id of the key in the vault to use for encrypting parameters in url transformer.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`host`](IEngineServerEnvironmentVariables.md#host)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`urlTransformerEncryptionKeyId`](IEngineServerEnvironmentVariables.md#urltransformerencryptionkeyid)
 
 ***
 
-### corsOrigins?
+### automationActionTypes? {#automationactiontypes}
 
-> `optional` **corsOrigins**: `string`
+> `optional` **automationActionTypes?**: `string`
 
-The CORS origins to allow, defaults to *.
+The type of the automation action to create, comma separate for more than one connector.
+values: fetch
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`corsOrigins`](IEngineServerEnvironmentVariables.md#corsorigins)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`automationActionTypes`](IEngineServerEnvironmentVariables.md#automationactiontypes)
 
 ***
 
-### httpMethods?
+### extensions? {#extensions}
 
-> `optional` **httpMethods**: `string`
+> `optional` **extensions?**: `string`
 
-The CORS methods to allow, defaults to GET, POST, PUT, DELETE, OPTIONS.
+A comma separated list of additional node extensions to load, the initialiseExtension method will be called for each extension.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`httpMethods`](IEngineServerEnvironmentVariables.md#httpmethods)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`extensions`](IEngineServerEnvironmentVariables.md#extensions)
 
 ***
 
-### httpAllowedHeaders?
+### port? {#port}
 
-> `optional` **httpAllowedHeaders**: `string`
+> `optional` **port?**: `string`
 
-The CORS headers to allow.
+The port to serve the API from.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`httpAllowedHeaders`](IEngineServerEnvironmentVariables.md#httpallowedheaders)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`port`](IEngineServerEnvironmentVariables.md#port)
 
 ***
 
-### httpExposedHeaders?
+### host? {#host}
 
-> `optional` **httpExposedHeaders**: `string`
+> `optional` **host?**: `string`
 
-The CORS headers to expose.
+The host to serve the API from.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`httpExposedHeaders`](IEngineServerEnvironmentVariables.md#httpexposedheaders)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`host`](IEngineServerEnvironmentVariables.md#host)
 
 ***
 
-### authAdminProcessorType?
+### corsOrigins? {#corsorigins}
 
-> `optional` **authAdminProcessorType**: `string`
+> `optional` **corsOrigins?**: `string`
 
-The type of auth admin processor to use on the API: entity-storage.
+The CORS origins to allow, defaults to *.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`authAdminProcessorType`](IEngineServerEnvironmentVariables.md#authadminprocessortype)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`corsOrigins`](IEngineServerEnvironmentVariables.md#corsorigins)
 
 ***
 
-### authProcessorType?
+### httpMethods? {#httpmethods}
 
-> `optional` **authProcessorType**: `string`
+> `optional` **httpMethods?**: `string`
 
-The type of auth processor to use on the API: entity-storage.
+The CORS methods to allow, defaults to GET, POST, PUT, DELETE, OPTIONS.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`authProcessorType`](IEngineServerEnvironmentVariables.md#authprocessortype)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`httpMethods`](IEngineServerEnvironmentVariables.md#httpmethods)
 
 ***
 
-### authSigningKeyId?
+### httpAllowedHeaders? {#httpallowedheaders}
 
-> `optional` **authSigningKeyId**: `string`
+> `optional` **httpAllowedHeaders?**: `string`
 
-The id of the key in the vault to use for signing in auth operations.
+The CORS headers to allow.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`authSigningKeyId`](IEngineServerEnvironmentVariables.md#authsigningkeyid)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`httpAllowedHeaders`](IEngineServerEnvironmentVariables.md#httpallowedheaders)
 
 ***
 
-### mimeTypeProcessors?
+### httpExposedHeaders? {#httpexposedheaders}
 
-> `optional` **mimeTypeProcessors**: `string`
+> `optional` **httpExposedHeaders?**: `string`
 
-Additional MIME type processors to include, comma separated.
+The CORS headers to expose.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`mimeTypeProcessors`](IEngineServerEnvironmentVariables.md#mimetypeprocessors)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`httpExposedHeaders`](IEngineServerEnvironmentVariables.md#httpexposedheaders)
 
 ***
 
-### routeLoggingIncludeBody?
+### publicOrigin? {#publicorigin}
 
-> `optional` **routeLoggingIncludeBody**: `string`
+> `optional` **publicOrigin?**: `string`
 
-Include the body in the REST logging output, useful for debugging.
+The public origin URL for the API e.g. https://api.example.com:1234
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`routeLoggingIncludeBody`](IEngineServerEnvironmentVariables.md#routeloggingincludebody)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`publicOrigin`](IEngineServerEnvironmentVariables.md#publicorigin)
 
 ***
 
-### routeLoggingFullBase64?
+### authAdminProcessorType? {#authadminprocessortype}
 
-> `optional` **routeLoggingFullBase64**: `string`
+> `optional` **authAdminProcessorType?**: `string`
 
-Include the full base 64 output in the REST logging output, useful for debugging.
+The type of auth admin processor to use on the API: entity-storage.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`routeLoggingFullBase64`](IEngineServerEnvironmentVariables.md#routeloggingfullbase64)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`authAdminProcessorType`](IEngineServerEnvironmentVariables.md#authadminprocessortype)
 
 ***
 
-### routeLoggingObfuscateProperties?
+### authProcessorType? {#authprocessortype}
 
-> `optional` **routeLoggingObfuscateProperties**: `string`
+> `optional` **authProcessorType?**: `string`
 
-List of properties to obfuscate in the REST logging output, comma separated.
+The type of auth processor to use on the API: entity-storage.
 
 #### Inherited from
 
-[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`routeLoggingObfuscateProperties`](IEngineServerEnvironmentVariables.md#routeloggingobfuscateproperties)
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`authProcessorType`](IEngineServerEnvironmentVariables.md#authprocessortype)
 
 ***
 
-### features?
+### authSigningKeyId? {#authsigningkeyid}
 
-> `optional` **features**: `string`
+> `optional` **authSigningKeyId?**: `string`
 
-The features that are enabled on the node.
+The id of the key in the vault to use for signing in auth operations.
 
-#### Default
+#### Inherited from
 
-```ts
-[]
-```
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`authSigningKeyId`](IEngineServerEnvironmentVariables.md#authsigningkeyid)
 
 ***
 
-### nodeIdentity?
-
-> `optional` **nodeIdentity**: `string`
+### hostingParamEncryptionKeyId? {#hostingparamencryptionkeyid}
 
-The identity of the node which, if empty and node-identity feature is enabled it will be generated.
+> `optional` **hostingParamEncryptionKeyId?**: `string`
 
-***
-
-### nodeMnemonic?
+The id of the key in the vault to use for encrypting hosting parameters in auth operations.
 
-> `optional` **nodeMnemonic**: `string`
+#### Inherited from
 
-The mnemonic for the identity, if empty and node-identity feature is enabled it will be randomly generated.
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`hostingParamEncryptionKeyId`](IEngineServerEnvironmentVariables.md#hostingparamencryptionkeyid)
 
 ***
 
-### organizationIdentity?
+### mimeTypeProcessors? {#mimetypeprocessors}
 
-> `optional` **organizationIdentity**: `string`
+> `optional` **mimeTypeProcessors?**: `string`
 
-If the node-admin-user feature is enabled, this will be the organization of the user, if one is not provided it will be generated
-
-***
-
-### organizationMnemonic?
+Additional MIME type processors to include, comma separated.
 
-> `optional` **organizationMnemonic**: `string`
+#### Inherited from
 
-The mnemonic for the organization, if empty and node-admin-user feature is enabled it will be randomly generated.
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`mimeTypeProcessors`](IEngineServerEnvironmentVariables.md#mimetypeprocessors)
 
 ***
 
-### adminUserIdentity?
+### routeLoggingIncludeBody? {#routeloggingincludebody}
 
-> `optional` **adminUserIdentity**: `string`
+> `optional` **routeLoggingIncludeBody?**: `string`
 
-If the node-admin-user feature is enabled, this will be the identity of the user, if one is not provided it will be generated
-
-***
-
-### adminUserMnemonic?
+Include the body in the REST logging output, useful for debugging.
 
-> `optional` **adminUserMnemonic**: `string`
+#### Inherited from
 
-The mnemonic for the admin user, if empty and node-admin-user feature is enabled it will be randomly generated.
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`routeLoggingIncludeBody`](IEngineServerEnvironmentVariables.md#routeloggingincludebody)
 
 ***
 
-### adminUserName?
+### routeLoggingFullBase64? {#routeloggingfullbase64}
 
-> `optional` **adminUserName**: `string`
+> `optional` **routeLoggingFullBase64?**: `string`
 
-If the node-admin-user feature is enabled, this will be the name of the user.
+Include the full base 64 output in the REST logging output, useful for debugging.
 
-#### Default
+#### Inherited from
 
-```ts
-admin@node
-```
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`routeLoggingFullBase64`](IEngineServerEnvironmentVariables.md#routeloggingfullbase64)
 
 ***
 
-### adminUserPassword?
+### routeLoggingObfuscateProperties? {#routeloggingobfuscateproperties}
 
-> `optional` **adminUserPassword**: `string`
+> `optional` **routeLoggingObfuscateProperties?**: `string`
 
-If the node-admin-user feature is enabled, this will be the password of the user, if empty it will be randomly generated.
+List of properties to obfuscate in the REST logging output, comma separated.
+
+#### Inherited from
+
+[`IEngineServerEnvironmentVariables`](IEngineServerEnvironmentVariables.md).[`routeLoggingObfuscateProperties`](IEngineServerEnvironmentVariables.md#routeloggingobfuscateproperties)
 
 ***
 
-### extensionsMaxSizeMb?
+### extensionsMaxSizeMb? {#extensionsmaxsizemb}
 
-> `optional` **extensionsMaxSizeMb**: `number`
+> `optional` **extensionsMaxSizeMb?**: `number`
 
 Maximum size in MB for HTTPS extensions downloads.
 
@@ -1933,9 +2034,9 @@ Maximum size in MB for HTTPS extensions downloads.
 
 ***
 
-### extensionsClearCache?
+### extensionsClearCache? {#extensionsclearcache}
 
-> `optional` **extensionsClearCache**: `boolean`
+> `optional` **extensionsClearCache?**: `boolean`
 
 Whether to clear the extensions cache on startup.
 
@@ -1947,9 +2048,9 @@ false
 
 ***
 
-### extensionsCacheDirectory?
+### extensionsCacheDirectory? {#extensionscachedirectory}
 
-> `optional` **extensionsCacheDirectory**: `string`
+> `optional` **extensionsCacheDirectory?**: `string`
 
 Custom directory for extensions cache storage.
 
@@ -1961,9 +2062,9 @@ Custom directory for extensions cache storage.
 
 ***
 
-### extensionsCacheTtlHours?
+### extensionsCacheTtlHours? {#extensionscachettlhours}
 
-> `optional` **extensionsCacheTtlHours**: `number`
+> `optional` **extensionsCacheTtlHours?**: `number`
 
 TTL in hours for HTTPS extensions cache.
 
@@ -1975,9 +2076,9 @@ TTL in hours for HTTPS extensions cache.
 
 ***
 
-### extensionsForceRefresh?
+### extensionsForceRefresh? {#extensionsforcerefresh}
 
-> `optional` **extensionsForceRefresh**: `boolean`
+> `optional` **extensionsForceRefresh?**: `boolean`
 
 Force refresh of all cached extensions.