# Settings

> The panel-editable configuration, grouped by category and stored in the database.

Source: https://joinnasnet.com/en/guides/nasnet-linux/settings/
Last updated: 2026-08-14

---

## Overview

**Settings** holds the configuration you can change without touching `.env`.
Values here live in the database, which makes them the effective configuration
once the panel is running, and several of them shadow an environment variable of
the same name, and the database copy is the one that applies. The page is a
category sidebar on the left and the fields for the selected category on the
right, with a save bar that appears once you have unsaved changes.

## Before you start

- Some changes only take effect on restart. ACME and the manual TLS file paths
  are the notable ones.
- A category with unsaved edits is marked **Modified** in the sidebar. Nothing
  is written until you save.
- The **Danger Zone** at the bottom of the page holds destructive actions. Read
  before clicking.

## Steps

1. Open **Settings** from the sidebar.
2. Pick a category, or search across every setting by name, key or description,
   the search box matches all three, which is the fastest way in when you know
   the key but not where it lives.
3. Change what you need. The save bar appears; save from there.
4. Restart the panel if you changed anything that says it needs one.
5. Use import and export to move a configuration between deployments.

## Reference

| Category | What it covers |
| -------- | -------------- |
| Server | Server infrastructure, URLs, and deployment settings. |
| Maintenance | Toggle service maintenance mode and notify active users. |
| General | Core system settings like site name, currency, and support links. |
| Subscription | Subscription limits, trial access, and notification preferences. |
| Payment | Payment methods, wallet addresses, and card details. |
| Telegram | Telegram bot configuration and messages. |
| Notifications | Configure admin notification channels and event toggles. |
| Client Profile | Customize client-facing subscription profiles. |
| Security | JWT token expiry and authentication settings. |
| Agent | Agent connection settings and TLS fingerprinting. |
| Xray Monitoring | Configure xray crash detection, notification throttling, and auto-disable behavior. |
| Data Retention | Data retention and cleanup policies. |

### Server

The category you will touch most. It groups into **URLs & Endpoints**
(`app_base_url`, `sub_panel_url`, `panel_base_path`), **HTTPS** (the ACME
settings and the manual certificate paths, with an automatic/manual mode
selector), **Monitoring** (`metrics_enabled` and the metrics basic-auth
credentials), **Server Runtime** (`app_port`, `log_level`) and **Outbound
Proxy**, a SOCKS5 proxy for hub-side outbound traffic that each feature opts
into individually, falling back to a direct connection with a warning if the
URL is empty or invalid.

### Data Retention

Every retention field is a number of days, and `0` means keep forever. The
group covers node metrics and dashboard history, per-hour access-log caps and
the pipeline grace window, per-subscription IP and daily usage records, and the
operational tables, covering audit logs, provisioning tasks, notification logs, alert
events and chat messages.

### Maintenance

Turning on global maintenance mode puts a banner across the top of the panel and
stops users purchasing or renewing. You can attach a message that is shown
alongside it.

## Troubleshooting

**A change in `.env` did not take effect.** For any key that also exists here,
the database value wins once the panel has run. Change it in Settings, not in
`.env`.

## Related

- [TLS and domains](/en/guides/nasnet-linux/tls-and-domains/)
- [Metrics and monitoring](/en/guides/nasnet-linux/monitoring/)
- [Telegram bot](/en/guides/nasnet-linux/telegram-bot/)
- [Alerts](/en/guides/nasnet-linux/alerts/)