development.ini
864 lines
| 29.5 KiB
| text/x-ini
|
IniLexer
/ configs / development.ini
r4169 | ## -*- coding: utf-8 -*- | ||
r631 | |||
r4169 | ; ######################################### | ||
; RHODECODE COMMUNITY EDITION CONFIGURATION | |||
; ######################################### | |||
r1 | |||
[DEFAULT] | |||
r4169 | ; Debug flag sets all loggers to debug, and enables request tracking | ||
r1 | debug = true | ||
r631 | |||
r4169 | ; ######################################################################## | ||
; EMAIL CONFIGURATION | |||
r4171 | ; These settings will be used by the RhodeCode mailing system | ||
r4169 | ; ######################################################################## | ||
r631 | |||
r4169 | ; prefix all emails subjects with given prefix, helps filtering out emails | ||
r631 | #email_prefix = [RhodeCode] | ||
r4169 | ; email FROM address all mails will be sent | ||
r1 | #app_email_from = rhodecode-noreply@localhost | ||
r631 | |||
r1 | #smtp_server = mail.server.com | ||
#smtp_username = | |||
#smtp_password = | |||
#smtp_port = | |||
#smtp_use_tls = false | |||
#smtp_use_ssl = true | |||
[server:main] | |||
r4169 | ; COMMON HOST/IP CONFIG | ||
r1 | host = 127.0.0.1 | ||
port = 5000 | |||
r4169 | ; ################################################## | ||
; WAITRESS WSGI SERVER - Recommended for Development | |||
; ################################################## | |||
r631 | |||
r4169 | ; use server type | ||
r1 | use = egg:waitress#main | ||
r4169 | |||
; number of worker threads | |||
r1 | threads = 5 | ||
r4169 | |||
; MAX BODY SIZE 100GB | |||
r1 | max_request_body_size = 107374182400 | ||
r4169 | |||
; Use poll instead of select, fixes file descriptors limits problems. | |||
; May not work on old windows systems. | |||
r1 | asyncore_use_poll = true | ||
r4169 | ; ########################### | ||
; GUNICORN APPLICATION SERVER | |||
; ########################### | |||
r631 | |||
r4169 | ; run with gunicorn --log-config rhodecode.ini --paste rhodecode.ini | ||
; Module to use, this setting shouldn't be changed | |||
r1 | #use = egg:gunicorn#main | ||
r4169 | |||
; Sets the number of process workers. More workers means more concurrent connections | |||
; RhodeCode can handle at the same time. Each additional worker also it increases | |||
; memory usage as each has it's own set of caches. | |||
; Recommended value is (2 * NUMBER_OF_CPUS + 1), eg 2CPU = 5 workers, but no more | |||
; than 8-10 unless for really big deployments .e.g 700-1000 users. | |||
; `instance_id = *` must be set in the [app:main] section below (which is the default) | |||
; when using more than 1 worker. | |||
r122 | #workers = 2 | ||
r4098 | |||
r4169 | ; Gunicorn access log level | ||
r4107 | #loglevel = info | ||
r4169 | ; Process name visible in process list | ||
r1 | #proc_name = rhodecode | ||
r4098 | |||
r4169 | ; Type of worker class, one of `sync`, `gevent` | ||
; Recommended type is `gevent` | |||
r2506 | #worker_class = gevent | ||
r4098 | |||
r4169 | ; The maximum number of simultaneous clients. Valid only for gevent | ||
r11 | #worker_connections = 10 | ||
r4098 | |||
r4169 | ; Max number of requests that worker will handle before being gracefully restarted. | ||
; Prevents memory leaks, jitter adds variability so not all workers are restarted at once. | |||
r1 | #max_requests = 1000 | ||
#max_requests_jitter = 30 | |||
r4098 | |||
r4169 | ; Amount of time a worker can spend with handling a request before it | ||
; gets killed and restarted. By default set to 21600 (6hrs) | |||
; Examples: 1800 (30min), 3600 (1hr), 7200 (2hr), 43200 (12h) | |||
r1 | #timeout = 21600 | ||
r4169 | ; The maximum size of HTTP request line in bytes. | ||
; 0 for unlimited | |||
r4098 | #limit_request_line = 0 | ||
r4169 | ; Limit the number of HTTP headers fields in a request. | ||
; By default this value is 100 and can't be larger than 32768. | |||
r4098 | #limit_request_fields = 32768 | ||
r4169 | ; Limit the allowed size of an HTTP request header field. | ||
; Value is a positive number or 0. | |||
; Setting it to 0 will allow unlimited header field sizes. | |||
r4098 | #limit_request_field_size = 0 | ||
r4169 | ; Timeout for graceful workers restart. | ||
; After receiving a restart signal, workers have this much time to finish | |||
; serving requests. Workers still alive after the timeout (starting from the | |||
; receipt of the restart signal) are force killed. | |||
; Examples: 1800 (30min), 3600 (1hr), 7200 (2hr), 43200 (12h) | |||
r4098 | #graceful_timeout = 3600 | ||
# The number of seconds to wait for requests on a Keep-Alive connection. | |||
# Generally set in the 1-5 seconds range. | |||
#keepalive = 2 | |||
r4169 | ; Maximum memory usage that each worker can use before it will receive a | ||
; graceful restart signal 0 = memory monitoring is disabled | |||
; Examples: 268435456 (256MB), 536870912 (512MB) | |||
; 1073741824 (1GB), 2147483648 (2GB), 4294967296 (4GB) | |||
r4098 | #memory_max_usage = 0 | ||
r4169 | ; How often in seconds to check for memory usage for each gunicorn worker | ||
r4098 | #memory_usage_check_interval = 60 | ||
r4169 | ; Threshold value for which we don't recycle worker if GarbageCollection | ||
; frees up enough resources. Before each restart we try to run GC on worker | |||
; in case we get enough free memory after that, restart will not happen. | |||
r4098 | #memory_usage_recovery_threshold = 0.8 | ||
r1 | |||
r4169 | |||
; Prefix middleware for RhodeCode. | |||
; recommended when using proxy setup. | |||
; allows to set RhodeCode under a prefix in server. | |||
; eg https://server.com/custom_prefix. Enable `filter-with =` option below as well. | |||
; And set your prefix like: `prefix = /custom_prefix` | |||
; be sure to also set beaker.session.cookie_path = /custom_prefix if you need | |||
; to make your cookies only work on prefix url | |||
r629 | [filter:proxy-prefix] | ||
use = egg:PasteDeploy#prefix | |||
prefix = / | |||
r1 | |||
[app:main] | |||
r4169 | ; The %(here)s variable will be replaced with the absolute path of parent directory | ||
; of this file | |||
; In addition ENVIRONMENT variables usage is possible, e.g | |||
; sqlalchemy.db1.url = {ENV_RC_DB_URL} | |||
r2986 | |||
r1 | use = egg:rhodecode-enterprise-ce | ||
r629 | |||
r4169 | ; enable proxy prefix middleware, defined above | ||
r1 | #filter-with = proxy-prefix | ||
r4169 | ; ############# | ||
; DEBUG OPTIONS | |||
; ############# | |||
pyramid.reload_templates = true | |||
r1 | # During development the we want to have the debug toolbar enabled | ||
pyramid.includes = | |||
pyramid_debugtoolbar | |||
debugtoolbar.hosts = 0.0.0.0/0 | |||
debugtoolbar.exclude_prefixes = | |||
/css | |||
/fonts | |||
/images | |||
/js | |||
## RHODECODE PLUGINS ## | |||
rhodecode.includes = | |||
rhodecode.api | |||
# api prefix url | |||
rhodecode.api.url = /_admin/api | |||
r4169 | ; enable debug style page | ||
debug_style = true | |||
r1 | |||
r4169 | ; ################# | ||
; END DEBUG OPTIONS | |||
; ################# | |||
; encryption key used to encrypt social plugin tokens, | |||
; remote_urls with credentials etc, if not set it defaults to | |||
; `beaker.session.secret` | |||
r269 | #rhodecode.encrypted_values.secret = | ||
r4169 | ; decryption strict mode (enabled by default). It controls if decryption raises | ||
; `SignatureVerificationError` in case of wrong key, or damaged encryption data. | |||
r281 | #rhodecode.encrypted_values.strict = false | ||
r4169 | ; Pick algorithm for encryption. Either fernet (more secure) or aes (default) | ||
; fernet is safer, and we strongly recommend switching to it. | |||
; Due to backward compatibility aes is used as default. | |||
r3522 | #rhodecode.encrypted_values.algorithm = fernet | ||
r4169 | ; Return gzipped responses from RhodeCode (static files/application) | ||
Martin Bornhold
|
r597 | gzip_responses = false | |
r1 | |||
r4169 | ; Auto-generate javascript routes file on startup | ||
r263 | generate_js_files = false | ||
r4169 | ; System global default language. | ||
; All available languages: en (default), be, de, es, fr, it, ja, pl, pt, ru, zh | |||
r1 | lang = en | ||
r4169 | ; Perform a full repository scan and import on each server start. | ||
; Settings this to true could lead to very long startup time. | |||
r1 | startup.import_repos = false | ||
r4169 | ; Uncomment and set this path to use archive download cache. | ||
; Once enabled, generated archives will be cached at this location | |||
; and served from the cache during subsequent requests for the same archive of | |||
; the repository. | |||
r1 | #archive_cache_dir = /tmp/tarballcache | ||
r4169 | ; URL at which the application is running. This is used for Bootstrapping | ||
; requests in context when no web request is available. Used in ishell, or | |||
; SSH calls. Set this for events to receive proper url for SSH calls. | |||
r2188 | app.base_url = http://rhodecode.local | ||
r4169 | ; Unique application ID. Should be a random unique string for security. | ||
r1 | app_instance_uuid = rc-production | ||
r4169 | ; Cut off limit for large diffs (size in bytes). If overall diff size on | ||
; commit, or pull request exceeds this limit this diff will be displayed | |||
; partially. E.g 512000 == 512Kb | |||
r2070 | cut_off_limit_diff = 512000 | ||
r4169 | ; Cut off limit for large files inside diffs (size in bytes). Each individual | ||
; file inside diff which exceeds this limit will be displayed partially. | |||
; E.g 128000 == 128Kb | |||
r2070 | cut_off_limit_file = 128000 | ||
r1 | |||
r4169 | ; Use cached version of vcs repositories everywhere. Recommended to be `true` | ||
r1 | vcs_full_cache = true | ||
r4169 | ; Force https in RhodeCode, fixes https redirects, assumes it's always https. | ||
; Normally this is controlled by proper flags sent from http server such as Nginx or Apache | |||
r1 | force_https = false | ||
r4169 | ; use Strict-Transport-Security headers | ||
r1 | use_htsts = false | ||
r4169 | ; Set to true if your repos are exposed using the dumb protocol | ||
r1 | git_update_server_info = false | ||
r4169 | ; RSS/ATOM feed options | ||
r1 | rss_cut_off_limit = 256000 | ||
rss_items_per_page = 10 | |||
rss_include_diff = false | |||
r4169 | ; gist URL alias, used to create nicer urls for gist. This should be an | ||
; url that does rewrites to _admin/gists/{gistid}. | |||
; example: http://gist.rhodecode.org/{gistid}. Empty means use the internal | |||
; RhodeCode url, ie. http[s]://rhodecode.server/_admin/gists/{gistid} | |||
r1 | gist_alias_url = | ||
r4169 | ; List of views (using glob pattern syntax) that AUTH TOKENS could be | ||
; used for access. | |||
; Adding ?auth_token=TOKEN_HASH to the url authenticates this request as if it | |||
; came from the the logged in user who own this authentication token. | |||
; Additionally @TOKEN syntax can be used to bound the view to specific | |||
; authentication token. Such view would be only accessible when used together | |||
; with this authentication token | |||
; list of all views can be found under `/_admin/permissions/auth_token_access` | |||
; The list should be "," separated and on a single line. | |||
; Most common views to enable: | |||
r1951 | # RepoCommitsView:repo_commit_download | ||
# RepoCommitsView:repo_commit_patch | |||
# RepoCommitsView:repo_commit_raw | |||
r2004 | # RepoCommitsView:repo_commit_raw@TOKEN | ||
r1951 | # RepoFilesView:repo_files_diff | ||
# RepoFilesView:repo_archivefile | |||
# RepoFilesView:repo_file_raw | |||
r1943 | # GistView:* | ||
r1 | api_access_controllers_whitelist = | ||
r4169 | ; Default encoding used to convert from and to unicode | ||
; can be also a comma separated list of encoding in case of mixed encodings | |||
r1 | default_encoding = UTF-8 | ||
r4169 | ; instance-id prefix | ||
; a prefix key for this instance used for cache invalidation when running | |||
; multiple instances of RhodeCode, make sure it's globally unique for | |||
; all running RhodeCode instances. Leave empty if you don't use it | |||
r1 | instance_id = | ||
r4169 | ; Fallback authentication plugin. Set this to a plugin ID to force the usage | ||
; of an authentication plugin also if it is disabled by it's settings. | |||
; This could be useful if you are unable to log in to the system due to broken | |||
; authentication settings. Then you can enable e.g. the internal RhodeCode auth | |||
; module to log in again and fix the settings. | |||
; Available builtin plugin IDs (hash is part of the ID): | |||
; egg:rhodecode-enterprise-ce#rhodecode | |||
; egg:rhodecode-enterprise-ce#pam | |||
; egg:rhodecode-enterprise-ce#ldap | |||
; egg:rhodecode-enterprise-ce#jasig_cas | |||
; egg:rhodecode-enterprise-ce#headers | |||
; egg:rhodecode-enterprise-ce#crowd | |||
r65 | #rhodecode.auth_plugin_fallback = egg:rhodecode-enterprise-ce#rhodecode | ||
r4169 | ; Flag to control loading of legacy plugins in py:/path format | ||
r4108 | auth_plugin.import_legacy_plugins = true | ||
r4169 | ; alternative return HTTP header for failed authentication. Default HTTP | ||
; response is 401 HTTPUnauthorized. Currently HG clients have troubles with | |||
; handling that causing a series of failed authentication calls. | |||
; Set this variable to 403 to return HTTPForbidden, or any other HTTP code | |||
; This will be served instead of default 401 on bad authentication | |||
r1 | auth_ret_code = | ||
r4169 | ; use special detection method when serving auth_ret_code, instead of serving | ||
; ret_code directly, use 401 initially (Which triggers credentials prompt) | |||
; and then serve auth_ret_code to clients | |||
r1 | auth_ret_code_detection = false | ||
r4169 | ; locking return code. When repository is locked return this HTTP code. 2XX | ||
; codes don't break the transactions while 4XX codes do | |||
r1 | lock_ret_code = 423 | ||
r4169 | ; allows to change the repository location in settings page | ||
r1 | allow_repo_location_change = true | ||
r4169 | ; allows to setup custom hooks in settings page | ||
r1 | allow_custom_hooks_settings = true | ||
r4169 | ; Generated license token required for EE edition license. | ||
; New generated token value can be found in Admin > settings > license page. | |||
r1 | license_token = | ||
r4169 | ; This flag hides sensitive information on the license page such as token, and license data | ||
r4006 | license.hide_license_info = false | ||
r4169 | ; supervisor connection uri, for managing supervisor and logs. | ||
r1 | supervisor.uri = | ||
r4169 | |||
; supervisord group name/id we only want this RC instance to handle | |||
r1 | supervisor.group_id = dev | ||
r4169 | ; Display extended labs settings | ||
r1 | labs_settings_active = true | ||
r4169 | ; Custom exception store path, defaults to TMPDIR | ||
; This is used to store exception from RhodeCode in shared directory | |||
r3068 | #exception_tracker.store_path = | ||
r4276 | ; Send email with exception details when it happens | ||
#exception_tracker.send_email = false | |||
; Comma separated list of recipients for exception emails, | |||
; e.g admin@rhodecode.com,devops@rhodecode.com | |||
; Can be left empty, then emails will be sent to ALL super-admins | |||
#exception_tracker.send_email_recipients = | |||
; optional prefix to Add to email Subject | |||
#exception_tracker.email_prefix = [RHODECODE ERROR] | |||
r4169 | ; File store configuration. This is used to store and serve uploaded files | ||
r3432 | file_store.enabled = true | ||
r4169 | |||
; Storage backend, available options are: local | |||
r3432 | file_store.backend = local | ||
r4169 | |||
; path to store the uploaded binaries | |||
r3432 | file_store.storage_path = %(here)s/data/file_store | ||
r3019 | |||
r4169 | ; ############# | ||
; CELERY CONFIG | |||
; ############# | |||
r4171 | ; manually run celery: /path/to/celery worker -E --beat --app rhodecode.lib.celerylib.loader --scheduler rhodecode.lib.celerylib.scheduler.RcScheduler --loglevel DEBUG --ini /path/to/rhodecode.ini | ||
r2506 | |||
r1 | use_celery = false | ||
r4169 | ; connection url to the message broker (default redis) | ||
r3913 | celery.broker_url = redis://localhost:6379/8 | ||
r4169 | ; rabbitmq example | ||
r3913 | #celery.broker_url = amqp://rabbitmq:qweqwe@localhost:5672/rabbitmqhost | ||
r1 | |||
r4169 | ; maximum tasks to execute before worker restart | ||
r2359 | celery.max_tasks_per_child = 100 | ||
r1 | |||
r4169 | ; tasks will never be sent to the queue, but executed locally instead. | ||
r2359 | celery.task_always_eager = false | ||
r1 | |||
r4169 | ; ############# | ||
; DOGPILE CACHE | |||
; ############# | |||
; Default cache dir for caches. Putting this into a ramdisk can boost performance. | |||
; eg. /tmpfs/data_ramdisk, however this directory might require large amount of space | |||
r2965 | cache_dir = %(here)s/data | ||
r2846 | |||
r4169 | ; ********************************************* | ||
; `sql_cache_short` cache for heavy SQL queries | |||
; Only supported backend is `memory_lru` | |||
; ********************************************* | |||
rc_cache.sql_cache_short.backend = dogpile.cache.rc.memory_lru | |||
rc_cache.sql_cache_short.expiration_time = 30 | |||
; ***************************************************** | |||
; `cache_repo_longterm` cache for repo object instances | |||
; Only supported backend is `memory_lru` | |||
; ***************************************************** | |||
rc_cache.cache_repo_longterm.backend = dogpile.cache.rc.memory_lru | |||
; by default we use 30 Days, cache is still invalidated on push | |||
rc_cache.cache_repo_longterm.expiration_time = 2592000 | |||
; max items in LRU cache, set to smaller number to save memory, and expire last used caches | |||
rc_cache.cache_repo_longterm.max_size = 10000 | |||
; ************************************************* | |||
; `cache_perms` cache for permission tree, auth TTL | |||
; ************************************************* | |||
r2846 | rc_cache.cache_perms.backend = dogpile.cache.rc.file_namespace | ||
rc_cache.cache_perms.expiration_time = 300 | |||
r4177 | ; file cache store path. Defaults to `cache_dir =` value or tempdir if both values are not set | ||
#rc_cache.cache_perms.arguments.filename = /tmp/cache_perms.db | |||
r2846 | |||
r4169 | ; alternative `cache_perms` redis backend with distributed lock | ||
r2846 | #rc_cache.cache_perms.backend = dogpile.cache.rc.redis | ||
#rc_cache.cache_perms.expiration_time = 300 | |||
r4169 | |||
; redis_expiration_time needs to be greater then expiration_time | |||
r2957 | #rc_cache.cache_perms.arguments.redis_expiration_time = 7200 | ||
r4169 | |||
r2846 | #rc_cache.cache_perms.arguments.host = localhost | ||
#rc_cache.cache_perms.arguments.port = 6379 | |||
#rc_cache.cache_perms.arguments.db = 0 | |||
r4169 | #rc_cache.cache_perms.arguments.socket_timeout = 30 | ||
; more Redis options: https://dogpilecache.sqlalchemy.org/en/latest/api.html#redis-backends | |||
r2846 | #rc_cache.cache_perms.arguments.distributed_lock = true | ||
r4819 | ; auto-renew lock to prevent stale locks, slower but safer. Use only if problems happen | ||
#rc_cache.cache_perms.arguments.lock_auto_renewal = true | |||
r4169 | |||
; *************************************************** | |||
; `cache_repo` cache for file tree, Readme, RSS FEEDS | |||
; *************************************************** | |||
r2846 | rc_cache.cache_repo.backend = dogpile.cache.rc.file_namespace | ||
rc_cache.cache_repo.expiration_time = 2592000 | |||
r4177 | ; file cache store path. Defaults to `cache_dir =` value or tempdir if both values are not set | ||
#rc_cache.cache_repo.arguments.filename = /tmp/cache_repo.db | |||
r2846 | |||
r4169 | ; alternative `cache_repo` redis backend with distributed lock | ||
r2846 | #rc_cache.cache_repo.backend = dogpile.cache.rc.redis | ||
#rc_cache.cache_repo.expiration_time = 2592000 | |||
r4169 | |||
; redis_expiration_time needs to be greater then expiration_time | |||
r2846 | #rc_cache.cache_repo.arguments.redis_expiration_time = 2678400 | ||
r4169 | |||
r2846 | #rc_cache.cache_repo.arguments.host = localhost | ||
#rc_cache.cache_repo.arguments.port = 6379 | |||
#rc_cache.cache_repo.arguments.db = 1 | |||
r4169 | #rc_cache.cache_repo.arguments.socket_timeout = 30 | ||
; more Redis options: https://dogpilecache.sqlalchemy.org/en/latest/api.html#redis-backends | |||
r2846 | #rc_cache.cache_repo.arguments.distributed_lock = true | ||
r4819 | ; auto-renew lock to prevent stale locks, slower but safer. Use only if problems happen | ||
#rc_cache.cache_repo.arguments.lock_auto_renewal = true | |||
r2883 | |||
r4169 | ; ############## | ||
; BEAKER SESSION | |||
; ############## | |||
r2957 | |||
r4169 | ; beaker.session.type is type of storage options for the logged users sessions. Current allowed | ||
; types are file, ext:redis, ext:database, ext:memcached, and memory (default if not specified). | |||
; Fastest ones are Redis and ext:database | |||
r1 | beaker.session.type = file | ||
r2846 | beaker.session.data_dir = %(here)s/data/sessions | ||
r1 | |||
r4169 | ; Redis based sessions | ||
r3539 | #beaker.session.type = ext:redis | ||
#beaker.session.url = redis://127.0.0.1:6379/2 | |||
r4169 | ; DB based session, fast, and allows easy management over logged in users | ||
r1 | #beaker.session.type = ext:database | ||
#beaker.session.table_name = db_session | |||
#beaker.session.sa.url = postgresql://postgres:secret@localhost/rhodecode | |||
#beaker.session.sa.url = mysql://root:secret@127.0.0.1/rhodecode | |||
#beaker.session.sa.pool_recycle = 3600 | |||
#beaker.session.sa.echo = false | |||
beaker.session.key = rhodecode | |||
beaker.session.secret = develop-rc-uytcxaz | |||
beaker.session.lock_dir = %(here)s/data/sessions/lock | |||
r4169 | ; Secure encrypted cookie. Requires AES and AES python libraries | ||
; you must disable beaker.session.secret to use this | |||
r1164 | #beaker.session.encrypt_key = key_for_encryption | ||
#beaker.session.validate_key = validation_key | |||
r1 | |||
r4169 | ; Sets session as invalid (also logging out user) if it haven not been | ||
; accessed for given amount of time in seconds | |||
r1 | beaker.session.timeout = 2592000 | ||
beaker.session.httponly = true | |||
r4169 | |||
; Path to use for the cookie. Set to prefix if you use prefix middleware | |||
r1164 | #beaker.session.cookie_path = /custom_prefix | ||
r1 | |||
r4169 | ; Set https secure cookie | ||
r1 | beaker.session.secure = false | ||
r4169 | ; default cookie expiration time in seconds, set to `true` to set expire | ||
; at browser close | |||
r1 | #beaker.session.cookie_expires = 3600 | ||
r4169 | ; ############################# | ||
; SEARCH INDEXING CONFIGURATION | |||
; ############################# | |||
r1 | |||
r4169 | ; Full text search indexer is available in rhodecode-tools under | ||
; `rhodecode-tools index` command | |||
; WHOOSH Backend, doesn't require additional services to run | |||
; it works good with few dozen repos | |||
r1 | search.module = rhodecode.lib.index.whoosh | ||
search.location = %(here)s/data/index | |||
r4169 | ; #################### | ||
; CHANNELSTREAM CONFIG | |||
; #################### | |||
; channelstream enables persistent connections and live notification | |||
; in the system. It's also used by the chat system | |||
r3270 | |||
r1279 | channelstream.enabled = false | ||
r526 | |||
r4169 | ; server address for channelstream server on the backend | ||
r526 | channelstream.server = 127.0.0.1:9800 | ||
r1279 | |||
r4169 | ; location of the channelstream server from outside world | ||
; use ws:// for http or wss:// for https. This address needs to be handled | |||
; by external HTTP server such as Nginx or Apache | |||
; see Nginx/Apache configuration examples in our docs | |||
r1279 | channelstream.ws_url = ws://rhodecode.yourserver.com/_channelstream | ||
r526 | channelstream.secret = secret | ||
r543 | channelstream.history.location = %(here)s/channelstream_history | ||
r4169 | ; Internal application path that Javascript uses to connect into. | ||
; If you use proxy-prefix the prefix should be added before /_channelstream | |||
r1279 | channelstream.proxy_path = /_channelstream | ||
r526 | |||
r4169 | ; ############################## | ||
; MAIN RHODECODE DATABASE CONFIG | |||
; ############################## | |||
#sqlalchemy.db1.url = sqlite:///%(here)s/rhodecode.db?timeout=30 | |||
#sqlalchemy.db1.url = postgresql://postgres:qweqwe@localhost/rhodecode | |||
#sqlalchemy.db1.url = mysql://root:qweqwe@localhost/rhodecode?charset=utf8 | |||
; pymysql is an alternative driver for MySQL, use in case of problems with default one | |||
#sqlalchemy.db1.url = mysql+pymysql://root:qweqwe@localhost/rhodecode | |||
sqlalchemy.db1.url = sqlite:///%(here)s/rhodecode.db?timeout=30 | |||
; see sqlalchemy docs for other advanced settings | |||
; print the sql statements to output | |||
sqlalchemy.db1.echo = false | |||
; recycle the connections after this amount of seconds | |||
sqlalchemy.db1.pool_recycle = 3600 | |||
sqlalchemy.db1.convert_unicode = true | |||
; the number of connections to keep open inside the connection pool. | |||
; 0 indicates no limit | |||
#sqlalchemy.db1.pool_size = 5 | |||
; The number of connections to allow in connection pool "overflow", that is | |||
; connections that can be opened above and beyond the pool_size setting, | |||
; which defaults to five. | |||
#sqlalchemy.db1.max_overflow = 10 | |||
; Connection check ping, used to detect broken database connections | |||
; could be enabled to better handle cases if MySQL has gone away errors | |||
#sqlalchemy.db1.ping_connection = true | |||
; ########## | |||
; VCS CONFIG | |||
; ########## | |||
vcs.server.enable = true | |||
vcs.server = localhost:9900 | |||
; Web server connectivity protocol, responsible for web based VCS operations | |||
; Available protocols are: | |||
; `http` - use http-rpc backend (default) | |||
vcs.server.protocol = http | |||
; Push/Pull operations protocol, available options are: | |||
; `http` - use http-rpc backend (default) | |||
vcs.scm_app_implementation = http | |||
; Push/Pull operations hooks protocol, available options are: | |||
; `http` - use http-rpc backend (default) | |||
vcs.hooks.protocol = http | |||
; Host on which this instance is listening for hooks. If vcsserver is in other location | |||
; this should be adjusted. | |||
vcs.hooks.host = 127.0.0.1 | |||
; Start VCSServer with this instance as a subprocess, useful for development | |||
vcs.start_server = false | |||
; List of enabled VCS backends, available options are: | |||
; `hg` - mercurial | |||
; `git` - git | |||
; `svn` - subversion | |||
vcs.backends = hg, git, svn | |||
; Wait this number of seconds before killing connection to the vcsserver | |||
vcs.connection_timeout = 3600 | |||
; Compatibility version when creating SVN repositories. Defaults to newest version when commented out. | |||
r4279 | ; Set a numeric version for your current SVN e.g 1.8, or 1.12 | ||
; Legacy available options are: pre-1.4-compatible, pre-1.5-compatible, pre-1.6-compatible, pre-1.8-compatible, pre-1.9-compatible | |||
#vcs.svn.compatible_version = 1.8 | |||
r4169 | |||
r1 | |||
r4169 | ; #################################################### | ||
; Subversion proxy support (mod_dav_svn) | |||
; Maps RhodeCode repo groups into SVN paths for Apache | |||
; #################################################### | |||
; Enable or disable the config file generation. | |||
svn.proxy.generate_config = false | |||
; Generate config file with `SVNListParentPath` set to `On`. | |||
svn.proxy.list_parent_path = true | |||
; Set location and file name of generated config file. | |||
svn.proxy.config_file_path = %(here)s/mod_dav_svn.conf | |||
; alternative mod_dav config template. This needs to be a valid mako template | |||
; Example template can be found in the source code: | |||
; rhodecode/apps/svn_support/templates/mod-dav-svn.conf.mako | |||
#svn.proxy.config_template = ~/.rccontrol/enterprise-1/custom_svn_conf.mako | |||
; Used as a prefix to the `Location` block in the generated config file. | |||
; In most cases it should be set to `/`. | |||
svn.proxy.location_root = / | |||
; Command to reload the mod dav svn configuration on change. | |||
; Example: `/etc/init.d/apache2 reload` or /home/USER/apache_reload.sh | |||
; Make sure user who runs RhodeCode process is allowed to reload Apache | |||
#svn.proxy.reload_cmd = /etc/init.d/apache2 reload | |||
; If the timeout expires before the reload command finishes, the command will | |||
; be killed. Setting it to zero means no timeout. Defaults to 10 seconds. | |||
#svn.proxy.reload_timeout = 10 | |||
; #################### | |||
; SSH Support Settings | |||
; #################### | |||
r1 | |||
r4169 | ; Defines if a custom authorized_keys file should be created and written on | ||
; any change user ssh keys. Setting this to false also disables possibility | |||
; of adding SSH keys by users from web interface. Super admins can still | |||
; manage SSH Keys. | |||
ssh.generate_authorized_keyfile = false | |||
; Options for ssh, default is `no-pty,no-port-forwarding,no-X11-forwarding,no-agent-forwarding` | |||
# ssh.authorized_keys_ssh_opts = | |||
; Path to the authorized_keys file where the generate entries are placed. | |||
; It is possible to have multiple key files specified in `sshd_config` e.g. | |||
; AuthorizedKeysFile %h/.ssh/authorized_keys %h/.ssh/authorized_keys_rhodecode | |||
ssh.authorized_keys_file_path = ~/.ssh/authorized_keys_rhodecode | |||
; Command to execute the SSH wrapper. The binary is available in the | |||
; RhodeCode installation directory. | |||
; e.g ~/.rccontrol/community-1/profile/bin/rc-ssh-wrapper | |||
ssh.wrapper_cmd = ~/.rccontrol/community-1/rc-ssh-wrapper | |||
; Allow shell when executing the ssh-wrapper command | |||
ssh.wrapper_cmd_allow_shell = false | |||
; Enables logging, and detailed output send back to the client during SSH | |||
; operations. Useful for debugging, shouldn't be used in production. | |||
ssh.enable_debug_logging = true | |||
; Paths to binary executable, by default they are the names, but we can | |||
; override them if we want to use a custom one | |||
ssh.executable.hg = ~/.rccontrol/vcsserver-1/profile/bin/hg | |||
ssh.executable.git = ~/.rccontrol/vcsserver-1/profile/bin/git | |||
ssh.executable.svn = ~/.rccontrol/vcsserver-1/profile/bin/svnserve | |||
; Enables SSH key generator web interface. Disabling this still allows users | |||
; to add their own keys. | |||
ssh.enable_ui_key_generator = true | |||
; ################# | |||
; APPENLIGHT CONFIG | |||
; ################# | |||
; Appenlight is tailored to work with RhodeCode, see | |||
; http://appenlight.rhodecode.com for details how to obtain an account | |||
; Appenlight integration enabled | |||
r1 | appenlight = false | ||
appenlight.server_url = https://api.appenlight.com | |||
appenlight.api_key = YOUR_API_KEY | |||
r73 | #appenlight.transport_config = https://api.appenlight.com?threaded=1&timeout=5 | ||
r1 | |||
r4169 | ; used for JS client | ||
r1 | appenlight.api_public_key = YOUR_API_PUBLIC_KEY | ||
r4169 | ; TWEAK AMOUNT OF INFO SENT HERE | ||
r1 | |||
r4169 | ; enables 404 error logging (default False) | ||
r1 | appenlight.report_404 = false | ||
r4169 | ; time in seconds after request is considered being slow (default 1) | ||
r1 | appenlight.slow_request_time = 1 | ||
r4169 | ; record slow requests in application | ||
; (needs to be enabled for slow datastore recording and time tracking) | |||
r1 | appenlight.slow_requests = true | ||
r4169 | ; enable hooking to application loggers | ||
r1 | appenlight.logging = true | ||
r4169 | ; minimum log level for log capture | ||
r1 | appenlight.logging.level = WARNING | ||
r4169 | ; send logs only from erroneous/slow requests | ||
; (saves API quota for intensive logging) | |||
r1 | appenlight.logging_on_error = false | ||
r4169 | ; list of additional keywords that should be grabbed from environ object | ||
; can be string with comma separated list of words in lowercase | |||
; (by default client will always send following info: | |||
; 'REMOTE_USER', 'REMOTE_ADDR', 'SERVER_NAME', 'CONTENT_TYPE' + all keys that | |||
; start with HTTP* this list be extended with additional keywords here | |||
r1 | appenlight.environ_keys_whitelist = | ||
r4169 | ; list of keywords that should be blanked from request object | ||
; can be string with comma separated list of words in lowercase | |||
; (by default client will always blank keys that contain following words | |||
; 'password', 'passwd', 'pwd', 'auth_tkt', 'secret', 'csrf' | |||
; this list be extended with additional keywords set here | |||
r1 | appenlight.request_keys_blacklist = | ||
r4169 | ; list of namespaces that should be ignores when gathering log entries | ||
; can be string with comma separated list of namespaces | |||
; (by default the client ignores own entries: appenlight_client.client) | |||
r1 | appenlight.log_namespace_blacklist = | ||
r4793 | ; Statsd client config, this is used to send metrics to statsd | ||
; We recommend setting statsd_exported and scrape them using Promethues | |||
#statsd.enabled = false | |||
#statsd.statsd_host = 0.0.0.0 | |||
#statsd.statsd_port = 8125 | |||
#statsd.statsd_prefix = | |||
#statsd.statsd_ipv6 = false | |||
r4819 | |||
r4169 | ; Dummy marker to add new entries after. | ||
; Add any custom entries below. Please don't remove this marker. | |||
r1279 | custom.conf = 1 | ||
Martin Bornhold
|
r562 | ||
r4169 | ; ##################### | ||
; LOGGING CONFIGURATION | |||
; ##################### | |||
r1 | [loggers] | ||
r2846 | keys = root, sqlalchemy, beaker, celery, rhodecode, ssh_wrapper | ||
r1 | |||
[handlers] | |||
keys = console, console_sql | |||
[formatters] | |||
keys = generic, color_formatter, color_formatter_sql | |||
r4169 | ; ####### | ||
; LOGGERS | |||
; ####### | |||
r1 | [logger_root] | ||
level = NOTSET | |||
handlers = console | |||
r2125 | [logger_sqlalchemy] | ||
level = INFO | |||
handlers = console_sql | |||
qualname = sqlalchemy.engine | |||
propagate = 0 | |||
r1 | |||
[logger_beaker] | |||
level = DEBUG | |||
handlers = | |||
qualname = beaker.container | |||
propagate = 1 | |||
[logger_rhodecode] | |||
level = DEBUG | |||
handlers = | |||
qualname = rhodecode | |||
propagate = 1 | |||
r2043 | [logger_ssh_wrapper] | ||
level = DEBUG | |||
handlers = | |||
qualname = ssh_wrapper | |||
propagate = 1 | |||
r2359 | [logger_celery] | ||
level = DEBUG | |||
handlers = | |||
qualname = celery | |||
r2043 | |||
r4169 | ; ######## | ||
; HANDLERS | |||
; ######## | |||
r1 | |||
[handler_console] | |||
class = StreamHandler | |||
r1279 | args = (sys.stderr, ) | ||
r1 | level = DEBUG | ||
formatter = color_formatter | |||
r4819 | ; To enable JSON formatted logs replace generic with json | ||
; This allows sending properly formatted logs to grafana loki or elasticsearch | |||
#formatter = json | |||
r1 | |||
[handler_console_sql] | |||
r4169 | ; "level = DEBUG" logs SQL queries and results. | ||
; "level = INFO" logs SQL queries. | |||
; "level = WARN" logs neither. (Recommended for production systems.) | |||
r1 | class = StreamHandler | ||
r1279 | args = (sys.stderr, ) | ||
r2846 | level = WARN | ||
r1 | formatter = color_formatter_sql | ||
r4169 | ; ########## | ||
; FORMATTERS | |||
; ########## | |||
r1 | |||
[formatter_generic] | |||
r1409 | class = rhodecode.lib.logging_formatter.ExceptionAwareFormatter | ||
r2605 | format = %(asctime)s.%(msecs)03d [%(process)d] %(levelname)-5.5s [%(name)s] %(message)s | ||
r1 | datefmt = %Y-%m-%d %H:%M:%S | ||
[formatter_color_formatter] | |||
class = rhodecode.lib.logging_formatter.ColorFormatter | |||
r2605 | format = %(asctime)s.%(msecs)03d [%(process)d] %(levelname)-5.5s [%(name)s] %(message)s | ||
r1 | datefmt = %Y-%m-%d %H:%M:%S | ||
[formatter_color_formatter_sql] | |||
class = rhodecode.lib.logging_formatter.ColorFormatterSql | |||
r2965 | format = %(asctime)s.%(msecs)03d [%(process)d] %(levelname)-5.5s [%(name)s] %(message)s | ||
r1 | datefmt = %Y-%m-%d %H:%M:%S | ||
r4819 | |||
[formatter_json] | |||
format = %(message)s | |||
class = rhodecode.lib._vendor.jsonlogger.JsonFormatter |