133 lines
6.3 KiB
YAML
133 lines
6.3 KiB
YAML
# ===================================================================
|
|
# Spring Boot configuration for the "prod" profile.
|
|
#
|
|
# This configuration overrides the application.yml file.
|
|
#
|
|
# More information on profiles: https://www.jhipster.tech/profiles/
|
|
# More information on configuration properties: https://www.jhipster.tech/common-application-properties/
|
|
# ===================================================================
|
|
|
|
# ===================================================================
|
|
# Standard Spring Boot properties.
|
|
# Full reference is available at:
|
|
# http://docs.spring.io/spring-boot/docs/current/reference/html/common-application-properties.html
|
|
# ===================================================================
|
|
|
|
logging:
|
|
level:
|
|
ROOT: INFO
|
|
org.hostsharing.hsadminng: INFO
|
|
io.github.jhipster: INFO
|
|
|
|
spring:
|
|
devtools:
|
|
restart:
|
|
enabled: false
|
|
livereload:
|
|
enabled: false
|
|
datasource:
|
|
type: com.zaxxer.hikari.HikariDataSource
|
|
url: jdbc:postgresql://localhost:5432/hsadminNg
|
|
username: hsadminNg
|
|
password:
|
|
hikari:
|
|
poolName: Hikari
|
|
auto-commit: false
|
|
jpa:
|
|
database-platform: io.github.jhipster.domain.util.FixedPostgreSQL82Dialect
|
|
database: POSTGRESQL
|
|
show-sql: false
|
|
properties:
|
|
hibernate.id.new_generator_mappings: true
|
|
hibernate.connection.provider_disables_autocommit: true
|
|
hibernate.cache.use_second_level_cache: false
|
|
hibernate.cache.use_query_cache: false
|
|
hibernate.generate_statistics: true
|
|
liquibase:
|
|
contexts: prod
|
|
mail:
|
|
host: localhost
|
|
port: 25
|
|
username:
|
|
password:
|
|
thymeleaf:
|
|
cache: true
|
|
|
|
# ===================================================================
|
|
# To enable TLS in production, generate a certificate using:
|
|
# keytool -genkey -alias hsadminng -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore keystore.p12 -validity 3650
|
|
#
|
|
# You can also use Let's Encrypt:
|
|
# https://maximilian-boehm.com/hp2121/Create-a-Java-Keystore-JKS-from-Let-s-Encrypt-Certificates.htm
|
|
#
|
|
# Then, modify the server.ssl properties so your "server" configuration looks like:
|
|
#
|
|
# server:
|
|
# port: 443
|
|
# ssl:
|
|
# key-store: classpath:config/tls/keystore.p12
|
|
# key-store-password: password
|
|
# key-store-type: PKCS12
|
|
# key-alias: hsadminng
|
|
# # The ciphers suite enforce the security by deactivating some old and deprecated SSL cipher, this list was tested against SSL Labs (https://www.ssllabs.com/ssltest/)
|
|
# ciphers: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 ,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,TLS_RSA_WITH_CAMELLIA_256_CBC_SHA,TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
|
|
# ===================================================================
|
|
server:
|
|
port: 8080
|
|
compression:
|
|
enabled: true
|
|
mime-types: text/html,text/xml,text/plain,text/css, application/javascript, application/json
|
|
min-response-size: 1024
|
|
|
|
# ===================================================================
|
|
# JHipster specific properties
|
|
#
|
|
# Full reference is available at: https://www.jhipster.tech/common-application-properties/
|
|
# ===================================================================
|
|
|
|
jhipster:
|
|
http:
|
|
version: V_1_1 # To use HTTP/2 you will need SSL support (see above the "server.ssl" configuration)
|
|
cache: # Used by the CachingHttpHeadersFilter
|
|
timeToLiveInDays: 1461
|
|
cache: # Cache configuration
|
|
ehcache: # Ehcache configuration
|
|
time-to-live-seconds: 3600 # By default objects stay 1 hour in the cache
|
|
max-entries: 1000 # Number of objects in each cache entry
|
|
security:
|
|
authentication:
|
|
jwt:
|
|
# This token must be encoded using Base64 and be at least 256 bits long (you can type `openssl rand -base64 64` on your command line to generate a 512 bits one)
|
|
# As this is the PRODUCTION configuration, you MUST change the default key, and store it securely:
|
|
# - In the JHipster Registry (which includes a Spring Cloud Config server)
|
|
# - In a separate `application-prod.yml` file, in the same folder as your executable WAR file
|
|
# - In the `JHIPSTER_SECURITY_AUTHENTICATION_JWT_BASE64_SECRET` environment variable
|
|
base64-secret: ZDFlMDUzODIzMTUzZDEwZjExN2E5ZjAzY2VhZmYzNDE1YjhlYWUxZGRhMGU3ODZiNjRkNjVlNzEwZjExYWY4YzczM2NlYzI5YWE1OTRkNWM0YThlYjZjZjA5Zjc5YWJkOTgzYjdhZjQxZWQyZGUyYjFlYjI5ZDE3NmE4M2UzYjQ=
|
|
# Token is valid 24 hours
|
|
token-validity-in-seconds: 86400
|
|
token-validity-in-seconds-for-remember-me: 2592000
|
|
mail: # specific JHipster mail property, for standard properties see MailProperties
|
|
from: hsadminNg@localhost
|
|
base-url: http://my-server-url-to-change # Modify according to your server's URL
|
|
metrics:
|
|
logs: # Reports metrics in the logs
|
|
enabled: false
|
|
report-frequency: 60 # in seconds
|
|
logging:
|
|
logstash: # Forward logs to logstash over a socket, used by LoggingConfiguration
|
|
enabled: false
|
|
host: localhost
|
|
port: 5000
|
|
queue-size: 512
|
|
|
|
# ===================================================================
|
|
# Application specific properties
|
|
# Add your own application properties here, see the ApplicationProperties class
|
|
# to have type-safe configuration, like in the JHipsterProperties above
|
|
#
|
|
# More documentation is available at:
|
|
# https://www.jhipster.tech/common-application-properties/
|
|
# ===================================================================
|
|
|
|
# application:
|