DB DevOps Settings
Administrators open Settings from the DB DevOps menu. Every value on it is stored on the server and applies to everyone; nothing is kept in the browser.
Session & Security
Edit loads the values the server applies, with the range each accepts, and saves them together; a value outside its range is marked, Save waits, and the server refuses it with the reason if it is sent anyway.
| Value | Range | Default | What it changes |
|---|---|---|---|
| Auto-Logout on Inactivity | on or off | on | Whether idle users are signed out at all. Off disables Idle Timeout. |
| Idle Timeout (minutes) | 1 to 1440 | 10 | Minutes without pointer, keyboard or scroll activity before the browser signs the user out and returns to sign-in with the reason. |
| Max Login Attempts | 1 to 100 | 5 | Failed sign-ins in a row (wrong passwords and wrong MFA codes) that lock an account. |
| Lockout Duration (minutes) | 1 to 1440 | 15 | How long a locked account waits; sign-in then says Account locked. Try again in N minute(s). |
| Min Password Length | 12 to 200 | 12 | Characters every new password needs. |
| Enforce Password Complexity | on or off | on | Whether a new password also needs an uppercase and a lowercase letter, a digit and a symbol. |
The dialog shows the resulting rule as you type, and the account setup and password reset pages state the same rule. The first administrator, created by the setup wizard, needs at least 12 characters with every character class.
Approval Settings
The default number of signatures and whether people may approve their own work; see Approval Workflows.
Notifications
View states how this server sends email, read from MAIL_TRANSPORT and its settings in the server environment (see Environment Variables), and lists each message it sends by email: password reset links, invitations (through the licensing service), security alerts to ALERT_EMAIL_TO and issue reports to REPORT_ISSUE_EMAIL. Nothing here is edited; email is set in the environment.
Audit Log
Manage shows how many entries the audit trail holds and since when, and whether its hash chain is intact. Purge Entries Older Than (days) counts the entries that old as you type; Purge asks with that count before deleting them, and says how many it purged.
Identity Providers (SSO)
Single sign-on through SAML, OIDC and LDAP; see Identity Providers & SSO. Allow Local Authentication off, while single sign-on has a provider turned on, refuses password sign-in for everyone but administrators, who keep it so a provider outage cannot lock the organization out; the sign-in page says so. With no provider turned on, the switch changes nothing. If the saved settings cannot be loaded, the dialog says why and Save waits, so they are never saved over.
Repo Sources and AI Configuration
Repo Sources counts the sources and Manage opens the Repo Sources page. AI Configuration shows the provider, whether a key is set and how scripts are reviewed; Edit changes them (see AI Agents).