Configuration

Beyond the main config/config.json, core keeps a few self-healing files in config/core/. You usually will not need to touch these, but they are there when you do. Restart Kora after editing.

Geo

config/core/geo.json controls the GeoLite2 databases Kora uses to turn a request's IP into a country, region, and network (ASN). These power the geo columns in the request log and the country, region, and asn rule types.

Kora downloads each database once into a geo/ folder and reads it locally, so lookups are offline and fast after the first start. If a database can't be downloaded or loaded, geo lookups return empty and geo rules are skipped, so nothing breaks.

Request logs

config/core/logs.json holds the request and activity log settings under LOGS.

Each request row is expandable on the Requests dashboard page to show its location, network, headers, and body.

License statuses

config/core/licenses.json under LICENSES.STATUS defines the statuses a license can hold and how they behave. A license's status is checked on every validation: a negative status rejects the key and returns its message as the reason.

Each entry in TYPES is:

LINK maps the four built-in behaviors onto status names, so you can rename them:

Expiry is resolved automatically from the license's expires_at: a key past its expiry reports the EXPIRED status and fails validation, while one inside the EXPIRING window reports the EXPIRING status but still validates.

"STATUS": {
    "DEFAULT": "ACTIVE",
    "LINK": {
        "ACTIVE": { "STATUS": "ACTIVE" },
        "DISABLED": { "STATUS": "DISABLED" },
        "EXPIRED": { "STATUS": "EXPIRED" },
        "EXPIRING": { "STATUS": "EXPIRING", "WINDOW": "7d" }
    },
    "TYPES": [
        { "POSITIVITY": true,  "NAME": "ACTIVE",    "MESSAGE": "License is valid & active!" },
        { "POSITIVITY": false, "NAME": "SUSPENDED", "MESSAGE": "License has been suspended." },
        { "POSITIVITY": false, "NAME": "DISABLED",  "MESSAGE": "License has been manually disabled." }
    ]
}

Durations use a number plus a unit: ms, s, m, h, or d.

Custom validation response

By default, license validation returns a fixed JSON shape. If your product expects a different shape, turn on a custom response in config/core/licenses.json under LICENSES.VALIDATION and build the JSON yourself with placeholders.

Any string in a template is rendered with the placeholders below. A value that is exactly one placeholder keeps its real type (so "%ADDONS%" becomes an array, not a string); placeholders inside a longer string are substituted as text.

"VALIDATION": {
    "CUSTOM": true,
    "VALID": {
        "success": "%VALID%",
        "plan": "%PRODUCT%",
        "expires": "%EXPIRES_AT%",
        "features": "%VARIABLES%"
    },
    "INVALID": {
        "success": "%VALID%",
        "reason": "%MESSAGE%"
    }
}