Settings

Configuration

Presence only. No value is read into this page, because several of these are credentials.

• SNAPFALL_OWNER_API_URL

  The daemon connection. Without it there is no event stream, no approvals inbox, no job list and no workforce activation — those surfaces say so rather than showing zeros.

  not set
• SNAPFALL_OWNER_TOKENcredential

  Bearer credential for the owner API. Only meaningful when the daemon is configured and requires one.

  not set
• SNAPFALL_DASHBOARD_OWNER_SECRETcredential

  What the owner types to sign in to this dashboard (at least 32 characters, different from the owner token). Required whenever a daemon is configured: without it every owner control refuses rather than acting for an unknown visitor.

  not set
• SNAPFALL_DASHBOARD_HOSTS

  Optional comma-separated Host allowlist for owner and sign-in requests, e.g. the dashboard’s public hostname.

  not set
• SNAPFALL_DASHBOARD_ORIGIN

  The exact public origin(s) owner actions must come from, e.g. https://dash.example.com. Set it behind a reverse proxy that rewrites Host, or every owner action, sign-in included, is refused.

  not set
• SNAPFALL_DASHBOARD_TRUST_PROXY

  Set to 1 only when a proxy you control overwrites X-Forwarded-Host; the request host is then read from it. Unset, the header is ignored, since any client can send it.

  not set
• SNAPFALL_TREASURY_ADDRESS

  The organisation whose advance rate is read from FloatPool, and the operator the Audit page expects on the FloatPool operator allowlist. Unset is why Overview and Float show no advance rate — the eth_call is never issued, rather than issued and failing.

  not set
• SNAPFALL_NETWORK

  Which deployment this build reads: arc-testnet (unset) or arc-mainnet. Fixed at build time, so the whole build agrees on one chain.

  not set
• ARC_TESTNET_RPCcredential

  A private RPC endpoint for this network. Without it the public endpoint is used, which rate-limits historical log scans, so Float shows no rate history.

  not set
• SNAPFALL_FLOAT_SCAN_PUBLIC_RPC

  Opt in to running the historical log scan against the public endpoint anyway.

  not set
• SNAPFALL_EXPLORER_API

  The explorer logs API the job and activity history is read from. Arc testnet uses its public explorer by default; without one, history is scanned from the RPC.

  not set
• SNAPFALL_JOB_VAULT_ADDRESS

  Overrides the JobVault address from the deployment record.

  not set
• SNAPFALL_FLOAT_POOL_ADDRESS

  Overrides the FloatPool address from the deployment record.

  not set
• ARC_USDC_ADDRESS

  Overrides the USDC token address used for the 6dp treasury balance read.

  not set
• SNAPFALL_DEPLOYMENT_BLOCK

  Overrides the block the historical scan starts from.

  not set
• SNAPFALL_FLOAT_SCAN_CHUNK

  Per-request eth_getLogs range cap, tuned to the RPC provider.

  not set

Owner session

Owner controls act with the daemon’s owner token, which stays on the server. A visitor reaches them only after signing in with the dashboard owner secret; the session lasts 12 hours. Rotating the secret signs every browser out.

Reading the owner session…

The kill switch

The freeze registry is real and it is enforced: with it engaged, the daemon refuses settlement actions and advance proposals with 423 FROZEN, and the approvals lifecycle checks it at intake before a nonce is claimed.

It cannot be operated from this dashboard. The owner API exposes no freeze route, so there is no button here — one that failed during the incident it exists for would be worse than none. It is driven in the daemon process today; daemon/cmd/freeze-demo shows the engaged, restart and released paths against the event log.

This page previously stated that the global kill switch was included here. It was not, and saying so was the kind of claim this product exists to avoid making.