Server-side configuration
Profiles & security
The default profile is loaded from server environment variables. Custom secrets are encrypted at rest and are never returned by the API.
Available TEST profiles
The preferred profile id is remembered in a signed HttpOnly cookie.