Skip to content

Configuration parameters


The KeepManagementURL setting in your notes.ini is the URL needed for the Domino REST API Domino task to talk to the Java side of Domino REST API. By default, this is set to http. If you have updated your security to https, you must update this URL. For more information, see Domino REST API task.


Domino REST API comes with reasonable default configuration settings. They allow you to start evaluating and testing out-of-the-box. For an actual deployment, you want to understand the details as outlined here.

Understanding configuration

The configuration follows the concept of and Overlay File System, where the base configuration is retrieved from the jar file and then overlaid with all the JSON files (if present) in the keepconfig.d directory within the Notes data directory and finally, the environment parameters, if any of those exist.


Parameters are case sensitive.

Parameter Description
PORT: 8880 HTTP(S) port for the Domino REST API service.
ADMINPORT: 8889 HTTP Port for the Admin listener. It should not be reachable from outside.
METRICSPORT: 8890 Endpoint for Prometheus Metrics.
GodeMode: true/false Should local users in KeepConfig be recognized.
JwtDuration Lifetime in minutes for the internal JWT provider. Default value is 60mins.
JwtMaxDuration Maximum lifetime in minutes that the JWT tokens get accepted.
DEBUG: true/false Debug mode. Creates more console output.
PEMCert If your TLS is PEM format (e.g. LetsEncrypt), the path to the certificate file.
TLSFile TLS file with key for jks, pem or pfx.
TLSPassword Password for jks and pfx key file.
shutdownkey Passphrase for posting to http://localhost:adminport/shutdown to shut down Domino REST API.

Configuration retrieval

The current configuration can be retrieved (with sensitive information masked) on the management port: e.g.