App settings
Liberty Next → Administer → App: every setting of the install, section by section — App (name, address, sub-path, language, UI defaults, hot reload, Oracle thick mode), Server log, Sign-in, Nomaflow, Change packages, License, AI Assistant, Notifications (email), OpenID Connect (SSO), PDF branding, and the read-only Deployment values — what each field does, which secrets are encrypted, and what needs a restart.
Security
6 items
Environment variables
The environment variables Liberty Next reads — secrets, configuration folders, database bootstrap, container behaviour, operations — the ${VARIABLE} references allowed in every TOML file, and the variables of the Docker .env file.
Hot reload
How Liberty Next applies configuration changes without a restart: Reload config (POST /admin/reload), the file watcher of [app] hot_reload and what it reloads per file, pools, Liberty Next → Administer → App, and what still needs a restart.
Encryption & secrets
How Liberty Next keeps secrets out of its configuration files in clear: ENC: values encrypted with the master key, secret fields encrypted on every save from Settings, ${VARIABLE} references, liberty-crypto, and what to do with the master key.