Infrastructure Settings
This page covers configuration options for Brief Connect, that should be managed via Infrastructure deployment. Often they depend on various infrastructure resources, for example Azure Key Vault Secrets that are connected to the Brief Connect Backend API via a link to the Key Vault Secrets. Main reasons to manage it with infrastructure are:
- Infrastructure Dependencies: settings depend on certain resources to be provisioned and require some knowledge about those resources
- Security concern: Sensitive data should not leave infrastructure deployment process to reduce risks of data leaks
Overview
How to Configure Infrastructure Settings
All infrastructure settings are configured in Azure Resources and their settings. It is managed via infrastructure deployment process (pipeline) automatically, or as a manual deployment step.
For updating App settings via pipeline:
- Run infrastructure deployment process/pipeline to apply latest infrastructure changes.
For updating App settings manually:
- Navigate to your Azure Functions App or Azure Web App in the Azure portal
- Go to Settings - Environment Variables
- Add or modify settings as needed
- Important: Apply changes. It will restart the App automatically to apply changes.
List of infrastructure settings
Below you can find all infrastructure application settings controlled by Brief Connect application. It doesn't include settings that are provisioned automatically by Azure resources and used internally by Azure resources.
Brief Connect Backend settings
APPLICATIONINSIGHTS_CONNECTION_STRING: Connection string for Azure Application Insights telemetry.- Example:
InstrumentationKey=00000000-0000-0000-0000-000000000000;IngestionEndpoint=https://westeurope-0.in.applicationinsights.azure.com/ ClientCertificate: Server app certificate reference stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=https://my-kv.vault.azure.net/certificates/server-cert) TempMongoDbConnectionString: Temporary MongoDB connection string stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=https://my-kv.vault.azure.net/secrets/mongo-conn) FUNCTIONS_EXTENSION_VERSION: Azure Functions runtime extension version.- Example:
~4 FUNCTIONS_INPROC_NET8_ENABLED: Enables .NET 8 in-proc mode for Azure Functions.- Example:
true FUNCTIONS_WORKER_RUNTIME: Functions worker runtime.- Example:
dotnet RedisCacheConnectionString: Redis cache connection string stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=https://my-kv.vault.azure.net/secrets/redis-conn) StorageAccountConnectionString: Storage account connection string for app data stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=https://my-kv.vault.azure.net/secrets/app-storage-conn) WEBSITE_LOAD_USER_PROFILE: Loads the user profile for the app process.- Example:
1 AzureWebJobsStorage: Storage account connection string for Functions runtime stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=https://my-kv.vault.azure.net/secrets/func-storage-conn) BundleStore__ConnectionString: (Optional. Only required when Plugins Editor feature is enabled in Application Settings) Storage account connection string for plugins storage, stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=https://my-kv.vault.azure.net/secrets/plugins-storage-conn)
Brief Connect Integration API settings
APPLICATIONINSIGHTS_CONNECTION_STRING: Connection string for Azure Application Insights telemetry.- Example (ARM reference):
ApplicationInsightsResource.properties.ConnectionString ClientCertificate: Server app certificate reference stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=${KeyVaultResource.properties.vaultUri}certificates/BriefConnect-Server-App) TempMongoDbConnectionString: Temporary MongoDB connection string stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=${mongoSecretUri}) RedisCacheConnectionString: Redis cache connection string stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=${redisCacheSecretUri}) StorageAccountConnectionString: Storage account connection string for app data stored in Azure Key Vault.- Example (Key Vault reference):
@Microsoft.KeyVault(SecretUri=${storageAccountDataSecretUri})