Cloud Configuration Guide

Environment-Based Configuration

Configure your cloud provider via environment variables for maximum security and simplicity:

🎨 Branding & White-Label Configuration

Customize the service for your organization. These settings are cloud-agnostic and apply to all providers.

# Landing Page Redirect
# Redirect the root URL ("/") to your own portal instead of the AIVINOVA landing page
# Leave empty to show the default landing page
Branding__LandingPageRedirectUrl=https://portal.yourcompany.com

# Download Error Page
# Redirect browser users to your custom error page when a public download link fails
# Query parameters are appended automatically: ?error=LINK_EXPIRED&code=410
# Leave empty to return the default JSON error response
Branding__DownloadErrorPageUrl=https://portal.yourcompany.com/download-error

# API Documentation
# Set to false to hide the Scalar API docs UI and OpenAPI endpoint
# Default: true
Branding__ShowApiDocs=false

System Validation

Verify your cloud configuration at runtime using Admin API endpoints:

1. Validate Runtime Configuration

   Test live connections to all configured cloud services:

   POST /api/admin/system/validate-config

   curl -X POST https://your-api.azurewebsites.net/api/admin/system/validate-config \
     -H "Authorization: Bearer YOUR_ADMIN_JWT_TOKEN"
   
   # Response:
   {
     "isValid": true,
     "validatedAt": "2026-02-09T10:30:00Z",
     "storage": {
       "success": true,
       "tested": true,
       "providerName": "Azure",
       "details": { "accountName": "aivinovadocs" }
     },
     "secrets": {
       "success": true,
       "tested": true,
       "providerName": "Azure",
       "details": { "keyVaultUri": "https://kv-prod.vault.azure.net/" }
     },
     "backup": {
       "success": true,
       "tested": true,
       "providerName": "Azure"
     },
     "secretReferences": {
       "allSecretsExist": true,
       "totalReferences": 5,
       "existingSecrets": 5,
       "missingSecrets": 0
     }
   }

   ✅ Live Connection Tests

   This endpoint tests actual connections to your storage, Key Vault, and backup services. Use it during deployment validation or troubleshooting!

2. Check Backup Status

   Query cloud-native backup configuration status:

   GET /api/admin/system/backup-status

   curl https://your-api.azurewebsites.net/api/admin/system/backup-status \
     -H "Authorization: Bearer YOUR_ADMIN_JWT_TOKEN"
   
   # Response:
   {
     "success": true,
     "overallStatus": "Protected",
     "storage": {
       "pointInTimeRestoreEnabled": true,
       "restoreDays": 7,
       "versioningEnabled": true,
       "softDeleteEnabled": true,
       "softDeleteDays": 7
     },
     "database": {
       "automaticBackupsEnabled": true,
       "shortTermRetentionDays": 7,
       "longTermRetentionEnabled": false,
       "earliestRestorePoint": "2026-02-02T10:30:00Z"
     },
     "secrets": {
       "softDeleteEnabled": true,
       "purgeProtectionEnabled": true,
       "softDeleteRetentionDays": 90
     }
   }

   Compliance & Audit

   Use this endpoint for compliance checks to verify backup protection meets your requirements (GDPR, ISO 27001, etc.).

3. Health Check

   Comprehensive health check for monitoring dashboards:

   GET /health

   curl https://your-api.azurewebsites.net/health
   
   # Response:
   {
     "status": "healthy",
     "timestamp": "2026-02-09T10:30:00Z",
     "totalResponseTimeMs": 234.5,
     "checks": {
       "database": { "status": "healthy", "responseTimeMs": 123.4 },
       "blobstorage": { "status": "healthy", "responseTimeMs": 89.2 }
     }
   }