The Configuration Settings allow you to configure various system-level settings including reCAPTCHA, API keys, security settings, cache management, and other advanced configurations.
Table of Contents
- Overview
- Accessing Configuration Settings
- reCAPTCHA Configuration
- API Keys
- Security Settings
- Cache Settings
- Slack Webhook Configuration
- Other Configurations
- Best Practices
Overview
Features
- ✅ reCAPTCHA setup
- ✅ API key management
- ✅ Security configurations
- ✅ Cache management
- ✅ Slack webhook setup
- ✅ System configurations
- ✅ Advanced settings
Admin Routes
- Configuration Settings:
/admin/settings/general/configurations
Accessing Configuration Settings
From Admin Panel
- Log in to admin panel
- Navigate to Settings → General → Configurations
- Or go directly to:
/admin/settings/general/configurations
Permissions Required
- Manage Settings:
manage-settingspermission
reCAPTCHA Configuration
What is reCAPTCHA?
reCAPTCHA protects your website from spam and abuse by verifying that users are human, not bots.
Setting Up reCAPTCHA
Get reCAPTCHA Keys
-
Go to Google reCAPTCHA:
- Visit Google reCAPTCHA
- Sign in with Google account
-
Create Site:
- Click + to create new site
- Enter site details:
- Label: Site name
- reCAPTCHA Type: v2 or v3
- Domains: Your domain(s)
-
Get Keys:
- Site Key: Public key (visible to users)
- Secret Key: Private key (server-side)
- Copy both keys
Configure in Admin
-
Enter Site Key:
- Paste Site Key
- Used in frontend forms
-
Enter Secret Key:
- Paste Secret Key
- Used for verification
-
Select reCAPTCHA Version:
- v2 Checkbox: "I'm not a robot" checkbox
- v2 Invisible: Invisible verification
- v3: Score-based verification
-
Save Settings:
- Click Save
- reCAPTCHA enabled
- Active on forms
reCAPTCHA Types
reCAPTCHA v2
Checkbox Version:
- Users click "I'm not a robot"
- May require image challenge
- Most user-friendly
Invisible Version:
- No user interaction
- Background verification
- Seamless experience
reCAPTCHA v3
Score-Based:
- No user interaction
- Returns risk score (0.0-1.0)
- Lower score = more likely bot
- Configure threshold
Testing reCAPTCHA
Test Mode
-
Use Test Keys:
- Google provides test keys
- Always pass verification
- For development
-
Test Keys:
- Site Key:
6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI - Secret Key:
6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe
- Site Key:
Production Testing
-
Test Forms:
- Submit contact forms
- Test registration
- Verify working
-
Check Logs:
- Review verification logs
- Check for errors
- Monitor success rate
API Keys
Managing API Keys
Adding API Keys
-
Navigate to Configuration:
- Go to Configuration Settings
- Find API Keys section
-
Add Key:
- Click Add API Key
- Enter:
- Name: Key identifier
- Key: API key value
- Service: Service name
- Description: Optional description
-
Save:
- Click Save
- Key stored securely
- Available for use
Common API Keys
Google Services:
- Maps API Key: Google Maps integration
- Analytics Key: Google Analytics
- Fonts API Key: Google Fonts
Social Media:
- Facebook App ID: Facebook integration
- Twitter API Key: Twitter integration
- LinkedIn API Key: LinkedIn integration
Payment Services:
- Stripe API Key: Stripe payments
- PayPal Client ID: PayPal payments
Other Services:
- Mailchimp API Key: Email marketing
- SendGrid API Key: Email service
- AWS Access Key: AWS services
API Key Security
Best Practices
-
Never Expose Keys:
- Don't commit to version control
- Use environment variables
- Restrict access
-
Rotate Regularly:
- Change keys periodically
- Revoke old keys
- Update in admin
-
Use Different Keys:
- Separate keys for test/production
- Different keys per environment
- Limit key permissions
Security Settings
Security Configuration
Password Requirements
Settings:
- Minimum Length: Minimum password length
- Require Uppercase: Must contain uppercase
- Require Lowercase: Must contain lowercase
- Require Numbers: Must contain numbers
- Require Symbols: Must contain symbols
Configuration:
-
Set Requirements:
- Configure password rules
- Set minimum length
- Enable requirements
-
Save:
- Click Save
- Requirements enforced
- Applied to new passwords
Session Settings
Configuration:
- Session Lifetime: Session duration (minutes)
- Remember Me Duration: Remember me duration (days)
- Session Timeout: Inactivity timeout
Settings:
- Default: 120 minutes
- Extended: 1440 minutes (24 hours)
- Custom: Set custom duration
Login Security
Settings:
- Max Login Attempts: Maximum failed attempts
- Lockout Duration: Account lockout time
- Two-Factor Auth: Enable 2FA (if available)
Configuration:
-
Set Limits:
- Configure max attempts
- Set lockout duration
- Enable 2FA
-
Save:
- Click Save
- Security enforced
- Active immediately
File Upload Security
Allowed File Types
Configuration:
- Images: JPG, PNG, GIF, SVG
- Documents: PDF, DOC, DOCX
- Videos: MP4, MOV, AVI
- Custom: Add custom types
File Size Limits
Settings:
- Max Upload Size: Maximum file size
- Image Max Size: Image size limit
- Document Max Size: Document size limit
Configuration:
- Default: 10MB
- Images: 5MB
- Documents: 20MB
- Custom: Set custom limits
Cache Settings
Cache Management
Cache Types
Available Caches:
- Application Cache: Application data
- Route Cache: Route definitions
- Config Cache: Configuration files
- View Cache: Compiled views
- Query Cache: Database queries
Clearing Cache
Manual Clear:
-
Go to Configuration:
- Navigate to Configuration Settings
- Find Cache section
-
Clear Cache:
- Click Clear All Cache
- Or clear specific cache type
- Cache cleared immediately
Cache Options:
- Clear Application Cache
- Clear Route Cache
- Clear Config Cache
- Clear View Cache
- Clear All Caches
Cache Configuration
Settings:
- Cache Driver: Cache storage method
- Cache Duration: How long to cache
- Cache Prefix: Cache key prefix
Drivers:
- File: File-based cache
- Database: Database cache
- Redis: Redis cache (if available)
- Memcached: Memcached (if available)
Slack Webhook Configuration
Setting Up Slack Webhook
Create Webhook
-
Go to Slack:
- Open Slack workspace
- Go to Apps → Incoming Webhooks
-
Create Webhook:
- Click Add to Slack
- Select channel
- Authorize app
- Copy webhook URL
Configure in Admin
-
Enter Webhook URL:
- Paste webhook URL
- Test connection
- Verify working
-
Configure Settings:
- Channel: Default channel
- Username: Bot username
- Icon: Bot icon URL
-
Save:
- Click Save
- Webhook active
- Notifications sent
Webhook Usage
Use Cases:
- System Notifications: System alerts
- Error Reports: Error notifications
- Activity Logs: Activity summaries
- Custom Notifications: Custom alerts
Other Configurations
System Settings
Timezone
Configuration:
- Default Timezone: System timezone
- User Timezone: User-specific timezone
- Date Format: Date display format
- Time Format: Time display format
Locale Settings
Configuration:
- Default Language: System language
- Supported Languages: Available languages
- Currency: Default currency
- Number Format: Number formatting
Integration Settings
Third-Party Services
Available Integrations:
- Analytics: Google Analytics, etc.
- Email Services: Mailchimp, SendGrid
- Social Media: Facebook, Twitter
- Payment Gateways: Stripe, PayPal
Configuration:
-
Select Service:
- Choose integration
- Enter credentials
- Configure settings
-
Test Connection:
- Test integration
- Verify working
- Save settings
Best Practices
Security
-
Protect API Keys:
- Never expose in code
- Use environment variables
- Rotate regularly
-
Enable reCAPTCHA:
- Protect forms from spam
- Use appropriate version
- Monitor effectiveness
-
Strong Passwords:
- Enforce requirements
- Regular password changes
- Enable 2FA if available
Performance
-
Use Caching:
- Enable appropriate caches
- Clear when needed
- Monitor cache performance
-
Optimize Settings:
- Configure for your needs
- Balance security/performance
- Test thoroughly
Maintenance
-
Regular Updates:
- Update API keys
- Review security settings
- Check integrations
-
Monitor Logs:
- Review error logs
- Check security logs
- Monitor activity
Troubleshooting
reCAPTCHA Not Working
Solutions:
- Verify keys are correct
- Check domain matches
- Verify reCAPTCHA version
- Test with test keys
- Check browser console
API Keys Not Working
Solutions:
- Verify key is correct
- Check key permissions
- Verify service is active
- Check API limits
- Review error logs
Cache Issues
Solutions:
- Clear all caches
- Check cache driver
- Verify permissions
- Check disk space
- Review cache settings
Related Documentation
Last Updated: [Date will be updated during final review]
← All Nexora – AI Business Management & Operations Software documentation