Configuration

Management Configuration

The management server is a single plain-HTTP listener (no TLS) hosting cross-cutting operational endpoints: a /health readiness probe and the self-signed certificate at /certs/pubkey and /certs/privkey. See Services for details.

DescriptionFlagEnvironment variableDefault
Management server address-management-addrLOCALAZ_MANAGEMENT_ADDR:8000

Service Configuration

ServiceFlagEnvironment variableDefault
Blob Storage-blob-addrLOCALAZ_BLOB_ADDR:10000
Queue Storage-queue-addrLOCALAZ_QUEUE_ADDR:10001
Table Storage-table-addrLOCALAZ_TABLE_ADDR:10002
Event Grid-eventgrid-addrLOCALAZ_EVENTGRID_ADDR:10003
Web PubSub-webpubsub-addrLOCALAZ_WEBPUBSUB_ADDR:10004
Service Bus-servicebus-addrLOCALAZ_SERVICEBUS_ADDR:5672
Monitor Logs-monitor-addrLOCALAZ_MONITOR_ADDR:10005
Key Vault-keyvault-addrLOCALAZ_KEYVAULT_ADDR:10008

Control Plane Configuration

DescriptionFlagEnvironment variableDefault
Entra ID (AAD) address-aad-addrLOCALAZ_AAD_ADDR:10006
Resource Manager (ARM) address-arm-addrLOCALAZ_ARM_ADDR:10007
Cloud Name-arm-cloud-nameLOCALAZ_ARM_CLOUD_NAMElocalaz
Hosts used to reach the control plane-advertise-hostLOCALAZ_ADVERTISE_HOST127.0.0.1

TLS Configuration

Every HTTP service is served over TLS (Service Bus, being AMQP, is the only plaintext listener). When no certificate is supplied, localaz generates a self-signed one and writes it to <data>/tls/localaz.{crt,key} on startup. Trust that certificate in your clients:

export SSL_CERT_FILE=<data>/tls/localaz.crt
DescriptionFlagEnvironment variableDefault
Path to the PEM encoded public key of a certificate-tls-certLOCALAZ_TLS_CERTauto-generated
Path to the PEM encoded private key of a certificate-tls-keyLOCALAZ_TLS_KEYauto-generated

Supply both -tls-cert and -tls-key to serve your own certificate instead of the auto-generated one.

Storage Configuration

DescriptionFlagEnvironment variableDefault
Path to on-disk directory where to store persisted data-dataLOCALAZ_DATA_DIR/data