Configuration

Issuance toggles & runtime environmentdemo
Toggles persist to dashboard_setting in the real panel; here they're cosmetic. Back to landing
Issuance modes
Allow server-side keygen
If off, only CSR uploads are accepted.
Allow GOST keys
Requires OWNCA_GOST_ENGINE=on.
Allow RSA keys
Allow ECDSA / Ed25519
Offer .gost.p12 export (TK-26 / RFC 9337+9548)
Allow profile editing
Environment variables (read at boot)
NameEffective valueSource
OWNCA_STORAGE_DIR/var/lib/owncacompose
OWNCA_GOST_ENGINEoncompose
OWNCA_GOST_PFX_DEFAULTkuznyechik-ctr-acpkmcompose
OWNCA_DB_HOSTpostgresqlcompose
OWNCA_DB_NAMEowncacompose
OWNCA_DB_USERowncacompose
OWNCA_DB_PASSWORD●●●●●●●●●●secret
OWNCA_DEFAULT_LANGrucompose
OWNCA_TRUST_X_REAL_IP1compose
DJANGO_DEBUG0compose
DJANGO_ALLOWED_HOSTSca.ownca.example, localhostcompose
DJANGO_SECRET_KEY●●●●●●●●●●secret