Administration

# Server Settings

Configure global server settings and integrations

Loading settings
⚠️

## Failed to load settings

### General Settings

Setup Name
Default Agent
Default Environment
Max Concurrent Agents Limit how many agents can run simultaneously (tasks exceeding this limit will be queued)
CoderFlow Commit Attribution Appends "Co-Authored-By: CoderFlow" to commit messages
Trust Proxy Enable when CoderFlow is behind a reverse proxy (Cloudflare, nginx, load balancer). Required for HTTPS-aware OAuth callback URLs and accurate client IPs in audit logs. Restart the server to apply.

### AI Providers

Manage global AI provider accounts. These accounts remain available as a fallback when a user has not configured a personal account for a provider.

### Model Configuration

Configure which models to use for each AI provider

Claude Model
Claude Effort Level
Codex Model
Codex Reasoning Level
Gemini Model
Grok Model
Grok Effort Level

### Agent Keepalive Settings

Configure automatic token refresh for each agent to keep them authenticated and responsive

#### Claude

Refresh Interval (hours)
Loading status...

#### Codex

Refresh Interval (hours)
Loading status...

#### Gemini

Refresh Interval (hours)
Loading status...

#### Bob

Refresh Interval (hours)
Loading status...

#### Grok

Refresh Interval (hours)
Loading status...

### Git Providers

Configure Git providers for repository authentication. Environments can reference these providers to access private repositories.

Container Token Expiration
days
Containers can access Git credentials until expiration; start a new task to renew
Setup Repository Authentication
Controls how setup repository pull/push operations in Environments and Skills authenticate.
Setup Repo Provider
Required when using Git Provider mode. Uses app credentials from the selected provider.

### Email Settings (SMTP)

SMTP Host
SMTP Port
Use TLS/SSL Enable for port 465, disable for port 587 with STARTTLS
Username
Password
From Address
From Name

#### Test Configuration

Test Recipient

### Slack Integration

Connect a Slack bot so users can @mention CoderFlow, run the generated slash command to create tasks, and use its link command to connect their Slack identity.

Quick Setup: Create Slack App from Manifest

1. Go to api.slack.com/apps and click Create New App → From an app manifest
2. Select your workspace, click Next, choose the JSON tab
3. Copy the manifest below and paste it in
4. Click Next, review, and Create
5. Copy Signing Secret from Basic Information, and Bot Token from OAuth & Permissions (install the app first)

The manifest uses the Slack Webhook Base URL when set, otherwise the Task Link Base URL or current server URL.

Enabled
Bot Token
Signing Secret
Default Environment
Used when no channel mapping or env: prefix is specified
App Suffix Distinguishes this CoderFlow server in Slack. A suffix like team generates CoderFlow Team and /coderflow-team.
Task Link Base URL Base URL for task links and Slack account-link pages. Leaving this blank is only safe when Slack webhooks call the normal CoderFlow app URL; set it explicitly when using Slack Webhook Base URL or the Slack-only ingress listener.
Slack Webhook Base URL Public base URL Slack calls for events, commands, and interactions. Use this for a Slack-only ingress listener; keep Task Link Base URL pointed at the normal CoderFlow app.
Ingress Listener Read-only startup configuration from environment variables. This field does not open ports or change firewall, proxy, or container settings.

#### Channel Mappings

Map Slack channels to specific environments. Messages in mapped channels auto-select the configured environment.

#### Test Configuration

### Microsoft Teams Integration

Connect a Microsoft Teams bot so users can mention CoderFlow or message the bot directly to create tasks.

Quick Setup: Teams App Manifest

1. Create an Azure Bot / Microsoft app registration and set its messaging endpoint to ``
2. Paste the Microsoft App ID and client secret below
3. Copy the manifest below into a Teams app package with color and outline icons
4. Upload the app in Teams for your tenant or team

The manifest uses Task Link Base URL when set, otherwise the current server origin. Teams app packages also require icon files.

Enabled
Microsoft App ID The app ID from the Azure Bot or app registration used by the Teams bot.
Client Secret
App Type
Use SingleTenant only when the bot app registration is restricted to one tenant.
Tenant ID
Default Environment
Used when no Teams channel mapping or env: prefix is specified.
Task Link Base URL Required when Teams is enabled. Use the public HTTPS base URL for task links, account-link pages, and the generated Teams messaging endpoint.

#### Channel Mappings

Map Teams channels or conversations to specific environments. Use the channel ID from Teams activity logs or admin inspection.

#### Test Configuration

### Jira Integration

Connect to Jira so users can import issues as tasks and post results back as comments.

Enabled
Account Type
Service accounts use api.atlassian.com with a Cloud ID for API routing
Jira Site URL Your Jira instance URL (used for browse links and API calls)
Cloud ID
Enter the Site URL above, then click Fetch to auto-detect, or enter manually
Email The email address associated with the Jira account
API Token

#### Test Configuration

### Single Sign-On (OIDC)

Behind a reverse proxy serving HTTPS (Cloudflare, nginx, load balancer)? Enable Trust Proxy in General settings so OAuth callback URLs are sent as `https://`.

Enable SSO
Identity Provider
Button Text
Client ID *
Client Secret *
Leave blank to keep existing secret
Issuer URL *
The OIDC discovery URL for your identity provider
Auto-provision users

Automatically create user accounts when someone logs in via SSO for the first time.

Default access

Access binding assigned to auto-provisioned users. Can be changed later per user.

Allow local login

Show username/password form alongside SSO button. Disable for SSO-only authentication.

### CA Certificates

Add custom CA certificates for containers to trust internal/corporate certificate authorities.

### Update Management

Configure how the server can be updated and restarted from the Administration page.

Enable Web Updates

When enabled, admins can apply updates and restart the server from the Health tab on the Server Administration page.

Update Command

Command to install a new version. Use `{version}` as a placeholder for the target version number.

Restart Command

Command to restart the server process after an update. Leave empty to use SIGTERM and rely on an external process manager to bring the service back up.

## Add Git Provider

Choose the type of provider to add:

## Create GitHub App

Create a GitHub App for repository access. When you click Next, you'll be redirected to GitHub to approve and install the app.

Note: You must be logged into GitHub logged into GitHub before proceeding.

Provider Name * Lowercase alphanumeric with hyphens. Used to reference this provider in environments.
GitHub App Name * Name for the GitHub App (visible on GitHub)
Description
GitHub Host *
Hostname * Your GitHub Enterprise Server hostname
Owner *
Organization Name * The GitHub organization where the app will be created

## Add Git Provider

Provider Name * Lowercase alphanumeric with hyphens
Provider Type *
App ID *
Installation ID *
Installation Settings
Client ID *
Client Secret
Private Key (PEM) *
Organization * Azure DevOps organization name
Tenant ID * Microsoft Entra ID tenant ID (GUID format)
Client ID * App Registration client ID (GUID format)
Authentication Method *
Client Secret *
Certificate (PEM with Private Key) *

## Delete Git Provider

Are you sure you want to delete the git provider ""?

This action cannot be undone.

## Manage Teams —

Access Mode
Controls which teams can use this provider when configuring environment repos.
Assigned Teams
Add Team

## Add CA Certificate

Name *
Certificate (PEM) *

## Certificate Viewer:

#### Issued To

Common Name (CN)
Organization (O)
Organizational Unit (OU)

#### Issued By

Common Name (CN)
Organization (O)
Organizational Unit (OU)

#### Validity Period

Issued On
Expires On

#### SHA-256 Fingerprints

Certificate
Public Key

## Git Connection Required

Connect your account to the following Git provider to continue: