Admin Basics

Admin Basics

Ports, auth, env knobs, and deploy notes for operators. Deep: admin-basics.md.

Ports & URLs

Port	Surface	Notes
8080	Local zyvor-qa serve --port 8080	Dev default
30080	Lab / k3s NodePort	Persisted by deploy-remote.sh
443 / TLS	zyvor-qa serve --tls	In-process TLS (~/.zyvor-qa/tls)

curl -s http://127.0.0.1:8080/health

Auth

• Set DASHBOARD_PASSWORD (optional DASHBOARD_USER, default admin) to gate /dashboard and /api/dashboard/*
• Lab defaults are often admin / Admin@321 — rotate before exposure
• Sessions: signed cookies (12 h, or 30 days with “remember me”); login rate-limited
• GET /health and webhook paths stay reachable for probes / GitHub

Key environment (cheat sheet)

Variable	Purpose
ZYVOR_BASE_URL	Target under test
LLM_PROVIDER + keys	OpenAI / Anthropic / Azure / Google / Ollama
ZYVOR_PRODUCT_REPO	GitHub owner/repo
ENABLE_MULTI_BROWSER	Firefox + WebKit
ENABLE_AUTH_SETUP	Playwright storageState setup
ENABLE_EMULATION_PROJECTS	Dark / reduced-motion / locale projects
ZYVOR_GREP / ZYVOR_SHARD	Suite filters
ZYVOR_HAR_PATH	Default HAR for replay
ENABLE_REGRESSION / VISUAL_MAX_DIFF_RATIO	Visual thresholds
ENABLE_AUTOFIX / ENABLE_AUTOFIX_APPLY	Self-heal
GITHUB_WEBHOOK_SECRET	HMAC for /webhook/github
DASHBOARD_PASSWORD	Console login

Full table: Configuration · .env.example.

Deploy sketch

./scripts/deploy-remote.sh <host> <user> --quick --service
./scripts/deploy-remote.sh <host> <user> --k3s   # preferred when :30080 is NodePort

If k3s already owns :30080, don’t fight it with bare systemd — use --k3s.

Logs: journalctl -u zyvor-qa -f or kubectl logs deploy/zyvor-qa-webhook.

Security

• Always set dashboard password before exposing pod logs publicly
• Treat webhook secrets and LLM keys as production secrets
• Target policy / allowlists: Security and Target Policy
• Enterprise overlay: Enterprise

Related: Deploy and Releases · Using the Dashboard · Troubleshooting