| servlet.hostname | Assigns a static hostname. If not set, hostname is determined via TCP naming system lookup. | – |
| servlet.port.http | Port through which Orchestra is accessible via HTTP. | – |
| servlet.port.https | Port through which Orchestra is accessible via HTTPS. | – |
| servlet.MINTHREADS | Minimum number of threads reserved for processing all HTTP traffic. | – |
| servlet.MAXTHREADS | Maximum number of threads reserved for processing all HTTP traffic. | – |
| application.access.control | Value of the HTTP header Access-Control-Allow-Origin. Use * to avoid cross-site scripting issues. | * |
| application.path | Directory path for web applications served by Orchestra’s internal web server. Scanned at startup. | – |
| application.classloader | Defines classloader behavior:
JAVA = standard parent-first
LOCAL = prioritize app classes | JAVA / LOCAL |
| application.excludedApps | Comma-separated list of web apps excluded from registration in the web engine. | – |
| SECURE.CIPHERS.MODE | Cipher suites for SSL:
DEFAULT = JVM defaults
ALL = enable all available ciphers | DEFAULT |
| SECURE.CIPHERS.EXCLUDE | Comma-separated list of excluded SSL ciphers. Supports regex. If default, HTTP server defaults are used. | – |
| SECURE.PROTOCOLS.MODE | SSL protocols:
DEFAULT = JVM defaults
ALL = enable all available protocols | DEFAULT |
| SECURE.PROTOCOLS.EXCLUDE | Comma-separated list of excluded SSL protocols. If default, HTTP server defaults are used. | – |
| servlet.maxidletime | Maximum idle time before a connection is considered inactive. | – |