|
| 1 | +# |
| 2 | +# Oxide API: example configuration file |
| 3 | +# |
| 4 | + |
| 5 | +[console] |
| 6 | +# Directory for static assets. Absolute path or relative to CWD. |
| 7 | +static_dir = "out/console-assets" |
| 8 | +session_idle_timeout_minutes = 480 # 8 hours |
| 9 | +session_absolute_timeout_minutes = 1440 # 24 hours |
| 10 | + |
| 11 | +# List of authentication schemes to support. |
| 12 | +[authn] |
| 13 | +schemes_external = ["session_cookie", "access_token"] |
| 14 | + |
| 15 | +[log] |
| 16 | +# Show log messages of this level and more severe |
| 17 | +level = "info" |
| 18 | + |
| 19 | +# Example output to a terminal (with colors) |
| 20 | +mode = "stderr-terminal" |
| 21 | + |
| 22 | +# Example output to a file, appending if it already exists. |
| 23 | +#mode = "file" |
| 24 | +#path = "logs/server.log" |
| 25 | +#if_exists = "append" |
| 26 | + |
| 27 | +# Configuration for interacting with the timeseries database |
| 28 | +[timeseries_db] |
| 29 | +address = "[::1]:8123" |
| 30 | + |
| 31 | +[deployment] |
| 32 | +# Identifier for this instance of Nexus |
| 33 | +id = "e6bff1ff-24fb-49dc-a54e-c6a350cd4d6c" |
| 34 | +rack_id = "c19a698f-c6f9-4a17-ae30-20d711b8f7dc" |
| 35 | + |
| 36 | +# Nexus may need to resolve external hosts (e.g. to grab IdP metadata). |
| 37 | +# These are the DNS servers it should use. |
| 38 | +external_dns_servers = ["1.1.1.1", "9.9.9.9"] |
| 39 | + |
| 40 | +[deployment.dropshot_external] |
| 41 | +# IP Address and TCP port on which to listen for the external API |
| 42 | +bind_address = "0.0.0.0:12220" |
| 43 | +default_request_body_max_bytes = 1048576 |
| 44 | +# To have Nexus's external HTTP endpoint use TLS, uncomment the line below. You |
| 45 | +# will also need to provide an initial TLS certificate during rack |
| 46 | +# initialization. If you're using this config file, you're probably running a |
| 47 | +# simulated system. In that case, the initial certificate is provided to the |
| 48 | +# simulated sled agent (acting as RSS) via command-line arguments. |
| 49 | +#tls = true |
| 50 | + |
| 51 | +[deployment.dropshot_internal] |
| 52 | +# IP Address and TCP port on which to listen for the internal API |
| 53 | +bind_address = "[::1]:12221" |
| 54 | +default_request_body_max_bytes = 1048576 |
| 55 | + |
| 56 | +[deployment.dropshot_lockstep] |
| 57 | +# IP Address and TCP port on which to listen for the lockstep API |
| 58 | +bind_address = "[::1]:12232" |
| 59 | +default_request_body_max_bytes = 1048576 |
| 60 | + |
| 61 | +[deployment.internal_dns] |
| 62 | +# Example address. |
| 63 | +# If you're using `omicron-dev run-all`, this is value is overwritten |
| 64 | +# by the address / port created after starting the Internal DNS server. |
| 65 | +type = "from_address" |
| 66 | +address = "[::1]:3535" |
| 67 | + |
| 68 | +[deployment.database] |
| 69 | +# URL for connecting to the database |
| 70 | +type = "from_url" |
| 71 | +url = "postgresql://root@[::1]:32221/omicron?sslmode=disable" |
| 72 | + |
| 73 | +# Tunable configuration parameters, for testing or experimentation |
| 74 | +[tunables] |
| 75 | + |
| 76 | +# The maximum allowed prefix (thus smallest size) for a VPC Subnet's |
| 77 | +# IPv4 subnetwork. This size allows for ~60 hosts. |
| 78 | +max_vpc_ipv4_subnet_prefix = 26 |
| 79 | + |
| 80 | +# Configuration for interacting with the dataplane daemon |
| 81 | +[dendrite.switch0] |
| 82 | +address = "[::1]:12224" |
| 83 | + |
| 84 | +[background_tasks] |
| 85 | +dns_internal.period_secs_config = 60 |
| 86 | +dns_internal.period_secs_servers = 60 |
| 87 | +dns_internal.period_secs_propagation = 60 |
| 88 | +dns_internal.max_concurrent_server_updates = 5 |
| 89 | +dns_external.period_secs_config = 60 |
| 90 | +dns_external.period_secs_servers = 60 |
| 91 | +dns_external.period_secs_propagation = 60 |
| 92 | +dns_external.max_concurrent_server_updates = 5 |
| 93 | +metrics_producer_gc.period_secs = 60 |
| 94 | +# How frequently we check the list of stored TLS certificates. This is |
| 95 | +# approximately an upper bound on how soon after updating the list of |
| 96 | +# certificates it will take _other_ Nexus instances to notice and stop serving |
| 97 | +# them (on a sunny day). |
| 98 | +external_endpoints.period_secs = 60 |
| 99 | +nat_cleanup.period_secs = 30 |
| 100 | +bfd_manager.period_secs = 30 |
| 101 | +# How frequently to collect hardware/software inventory from the whole system |
| 102 | +# (even if we don't have reason to believe anything has changed). |
| 103 | +inventory.period_secs = 600 |
| 104 | +# Maximum number of past collections to keep in the database |
| 105 | +inventory.nkeep = 5 |
| 106 | +# Disable inventory collection altogether (for emergencies) |
| 107 | +inventory.disable = false |
| 108 | +phantom_disks.period_secs = 30 |
| 109 | +physical_disk_adoption.period_secs = 30 |
| 110 | +support_bundle_collector.period_secs = 30 |
| 111 | +decommissioned_disk_cleaner.period_secs = 60 |
| 112 | +blueprints.period_secs_load = 10 |
| 113 | +blueprints.period_secs_plan = 60 |
| 114 | +blueprints.period_secs_execute = 60 |
| 115 | +blueprints.period_secs_rendezvous = 300 |
| 116 | +blueprints.period_secs_collect_crdb_node_ids = 180 |
| 117 | +blueprints.period_secs_load_reconfigurator_config = 5 |
| 118 | +sync_service_zone_nat.period_secs = 30 |
| 119 | +switch_port_settings_manager.period_secs = 30 |
| 120 | +region_replacement.period_secs = 30 |
| 121 | +region_replacement_driver.period_secs = 30 |
| 122 | +# How frequently to query the status of active instances. |
| 123 | +instance_watcher.period_secs = 30 |
| 124 | +# How frequently to schedule new instance update sagas. |
| 125 | +instance_updater.period_secs = 30 |
| 126 | +# How frequently to attempt to restart Failed instances? |
| 127 | +instance_reincarnation.period_secs = 60 |
| 128 | +service_firewall_propagation.period_secs = 300 |
| 129 | +v2p_mapping_propagation.period_secs = 30 |
| 130 | +abandoned_vmm_reaper.period_secs = 60 |
| 131 | +saga_recovery.period_secs = 600 |
| 132 | +lookup_region_port.period_secs = 60 |
| 133 | +region_snapshot_replacement_start.period_secs = 30 |
| 134 | +region_snapshot_replacement_garbage_collection.period_secs = 30 |
| 135 | +region_snapshot_replacement_step.period_secs = 30 |
| 136 | +region_snapshot_replacement_finish.period_secs = 30 |
| 137 | +tuf_artifact_replication.period_secs = 300 |
| 138 | +tuf_artifact_replication.min_sled_replication = 1 |
| 139 | +tuf_repo_pruner.period_secs = 300 |
| 140 | +# How many extra recent target releases to keep |
| 141 | +# The system always keeps two: the current release and the previous one. |
| 142 | +# This number is in addition to that. |
| 143 | +tuf_repo_pruner.nkeep_extra_target_releases = 1 |
| 144 | +# How many extra recently uploaded repos to keep |
| 145 | +# The system always keeps one, assuming that the operator may be about to |
| 146 | +# update to it. This number is in addition to that. |
| 147 | +tuf_repo_pruner.nkeep_extra_newly_uploaded = 1 |
| 148 | +# In general, the webhook dispatcher will be activated when events are queued, |
| 149 | +# so we don't need to periodically activate it *that* frequently. |
| 150 | +alert_dispatcher.period_secs = 60 |
| 151 | +webhook_deliverator.period_secs = 60 |
| 152 | +read_only_region_replacement_start.period_secs = 30 |
| 153 | +sp_ereport_ingester.period_secs = 30 |
| 154 | + |
| 155 | +[default_region_allocation_strategy] |
| 156 | +# allocate region on 3 random distinct zpools, on 3 random distinct sleds. |
| 157 | +# type = "random_with_distinct_sleds" |
| 158 | + |
| 159 | +# the same as random_with_distinct_sleds, but without requiring distinct sleds |
| 160 | +type = "random" |
| 161 | + |
| 162 | +# setting `seed` to a fixed value will make dataset selection ordering use the |
| 163 | +# same shuffling order for every region allocation. |
| 164 | +# seed = 0 |
0 commit comments