Server & networking
Global · server
string
api_key
Shared secret guarding the proxy's internal management API.
- Config key
api_key- Scope
- Global · server
- Type
- string
- Default
- none
A secret required by the proxy's internal management endpoints (rule updates, cache purge, etc.). Leave it unset only when those endpoints are unreachable from outside; otherwise set a strong, unique value.
🛡️Treat it like a password
Anyone with this key can reconfigure the proxy. Store it in a secret manager, rotate it periodically, and never commit it.
api_key = "<long-random-secret>"