# System settings

Several global settings are available to be configured in Operations Center:

## Network settings

| Configuration         | Description                                                              | Value(s)          | Default                       |
| :---                  | :---                                                                     | :---              | :---                          |
| `address`             | Address of Operations Center which is used by managed servers to connect | https:\/\/address | same as `rest_server_address` |
| `rest_server_address` | Address/port over which the REST API will be served                      | address:port      | `*:7443`                      |

## Security settings

| Configuration                          | Description                                                              | Value(s)        | Default |
| :---                                   | :---                                                                     | :---            | :---    |
| `trusted_tls_client_cert_fingerprints` | List of SHA256 certificate fingerprints belonging to trusted TLS clients | list of strings |         |
| `oidc.issuer`                          | OIDC issuer                                                              | string          |         |
| `oidc.client_id`                       | OIDC client ID used for communication with OIDC issuer                   | string          |         |
| `oidc.scope`                           | Scopes to be requested                                                   | string          |         |
| `oidc.audience`                        | Audience the OIDC tokens should be verified against                      | string          |         |
| `oidc.claim`                           | Claim which should be used to identify the user or subject               | string          |         |
| `openfga.api_token`                    | API token used for communication with the OpenFGA system                 | string          |         |
| `openfga.api_url`                      | URL of the OpenFGA API                                                   | string          |         |
| `openfga.store_id`                     | ID of the OpenFGA store                                                  | string          |         |

## Update settings

| Configuration                    | Description                                                              | Value(s) | Default                                                     |
| :---                             | :---                                                                     | :---     | :---                                                        |
| `source`                         | Source is the URL of the origin, the updates should be fetched from      | string   | `https://images.linuxcontainers.org/os/`                    |
| `signature_verification_root_ca` | Certificate used to verify the signature of updates provided by `source` | string   | root certificate used to sign updates from default `source` |
| `filter_expression`              | Filter expression to filter updates, see [update] for details            | string   | `"stable" in channels`                                      |
| `file_filter_expression`         | Filter expression to filter update files, see [update] for details       | string   | `applies_to_architecture(architecture, "x86_64")`                           |