RRSCH (RunReveal Scheduler) Configuration Guide

RRSCH runs scheduled tasks and background workers in RunReveal, including detection queries, notifications, threat feeds, enrichments, and AI agents.

Basic Configuration
Common Configuration Options
Scheduler Types
Running RRSCH

Basic Configuration

RRSCH uses a JSON configuration file:

{
  "common": {
    "chdsn": "clickhouse://user:password@localhost:9000/dbname",
    "pgdsn": "postgres://user:password@localhost:5432/dbname?sslmode=verify-full",
    "baseurl": "http://localhost:8000",
    "appBaseURL": "http://localhost:3000",
    "secretsConfig": {
      "type": "none"
    }
  },
  "schedule": {
    "schedulers": [
      {
        "type": "query",
        "timer": 500,
        "fetchCount": 10,
        "visibilityTimeout": 10,
        "parallelism": 3
      },
      {
        "type": "notification-send"
      }
    ]
  }
}

Common Configuration Options

Option	Type	Description	Required
`common`	object	Shared configuration across RunReveal services	Yes
`schedule`	object	RRSCH scheduler configuration (see Scheduler Types)	Yes

`common` Object

Option	Type	Description	Required
`chdsn`	string	ClickHouse connection string	Yes
`pgdsn`	string	PostgreSQL connection string	Yes
`baseurl`	string	External API base URL	Yes
`internalBaseURL`	string	Internal API URL for service-to-service calls (falls back to `baseurl` when unset)	No
`appBaseURL`	string	Frontend application URL used in notification links and OAuth metadata	No
`secretsConfig`	object	Encryption provider configuration for database secrets	Yes

Running RRSCH

RRSCH can be run using the following command:

rrsch queries --config config.json

Command Line Arguments

Flag	Description	Default
`--config`	Path to configuration file	`config.json`

Environment Variables

Configuration values can reference environment variables by prefixing the value with $. For example:

{
  "common": {
    "pgdsn": "$POSTGRES_DSN"
  }
}