Configuration

Configuration

Open the Admin Console at /admin. Platform configuration is persisted in MongoDB and writes require an authenticated database administrator.

What administrators can configure

• Branding, public landing-page copy, navigation, legal links, and feature flags.
• Pricing, payment gateway references, and billing return URLs.
• Funding, templates, social resources, and tools data sources.
• Workspace modules, partner-facing behavior, and dashboard notifications.
• AI providers and models; sensitive fields are redacted from browser bootstrap payloads and encrypted server-side when saved.
• Strategic Report sections, document types, agents, role/prompt definitions, order, and reusable CSS-declaration layouts.

Funding catalog sources

The shared catalog supports JSON catalogs, Google Sheets, and Airtable. Configure sources in Admin > Data Sources, enable them, then run a manual sync.

Google Sheets imports a public or link-readable sheet as CSV. Airtable requires a server-side proxy: its personal access token must remain in an environment variable, never in the browser. Source data is upserted by source and record identity; records missing from a completed sync are archived.

Funding sources recognize columns such as Program Name, Type, Provider, Amount, Deadline, Match, URL, and Location; common alternatives are mapped automatically.

Strategic Reports

Each enabled section needs a document type and an assigned agent. Layouts are written as CSS declarations, for example:

padding: 36px 42px; background: #ffffff; gap: 18px;

The generation service has no Python-side default section set: it reads the active Admin Console configuration when generating. Keep at least one section, document type, and agent available.

Environment modes and secrets

OPENBCON_ENVIRONMENT_MODE is server-authoritative and selects the Test or Live PostgreSQL and MongoDB database boundaries. Change it in the environment and restart Node and Python services; a request cannot switch modes.

Keep database URLs, APP_STATE_ENCRYPTION_KEY, model provider keys, Stripe secrets, OAuth secrets, and Airtable tokens server-side. See Security for production controls.