Destroyed System configuration (markdown)
parent
57704f123a
commit
9d452e4da7
@ -1,163 +0,0 @@
|
|||||||
# System configuration
|
|
||||||
|
|
||||||
This section describes configuration of ReCodEx components. Bold items in lists
|
|
||||||
describing the values are mandatory, italic ones are optional.
|
|
||||||
|
|
||||||
## REST API
|
|
||||||
|
|
||||||
The API can be configured in `config.neon` and `config.local.neon` files in
|
|
||||||
`app/config` directory of the API project source tree. The first file is
|
|
||||||
predefined by authors and should not be modified. The second one is not present
|
|
||||||
and could be created by copying `config.local.neon.example` template in the
|
|
||||||
config directory. Local configuration have higher precedence, so it will
|
|
||||||
override default values from `config.neon`.
|
|
||||||
|
|
||||||
### Configurable items
|
|
||||||
|
|
||||||
Description of configurable items. All timeouts are in milliseconds if not
|
|
||||||
stated otherwise.
|
|
||||||
|
|
||||||
- accessManager -- configuration of access token in [JWT
|
|
||||||
standard](https://www.rfc-editor.org/rfc/rfc7519.txt). Do **not** modify
|
|
||||||
unless you really know what are you doing.
|
|
||||||
- fileServer -- connection to fileserver
|
|
||||||
- address -- URI of fileserver
|
|
||||||
- auth -- _username_ and _password_ for HTTP basic authentication
|
|
||||||
- timeouts -- _connection_ timeout for establishing new connection and
|
|
||||||
_request_ timeout for completing one request
|
|
||||||
- broker -- connection to broker
|
|
||||||
- address -- URI of broker
|
|
||||||
- auth -- _username_ and _password_ for broker callback authentication back
|
|
||||||
to API
|
|
||||||
- timeouts -- _ack_ timeout for first response that broker receives the
|
|
||||||
message, _send_ timeout how long try to send new job to the broker and
|
|
||||||
_result_ timeout how long to wait for confirmation if job can be processed
|
|
||||||
or not
|
|
||||||
- monitor -- connection to monitor
|
|
||||||
- address -- URI of monitor
|
|
||||||
- CAS -- CAS external authentication
|
|
||||||
- serviceId -- visible identifier of this service
|
|
||||||
- ldapConnection -- parameters for connecting to LDAP, _hostname_,
|
|
||||||
_base_dn_, _port_, _security_ and _bindName_
|
|
||||||
- fields -- names of LDAP keys for informations as _email_, _firstName_ and
|
|
||||||
_lastName_
|
|
||||||
- emails -- common configuration for sending email (addresses and template
|
|
||||||
variables)
|
|
||||||
- apiUrl -- base URL of API server including port (for referencing pictures
|
|
||||||
in messages)
|
|
||||||
- footerUrl -- link in the message footer
|
|
||||||
- siteName -- name of frontend (ReCodEx, or KSP for unique instance for KSP
|
|
||||||
course)
|
|
||||||
- githubUrl -- URL to GitHub repository of this project
|
|
||||||
- from -- sending email address
|
|
||||||
- failures -- admin messages on errors
|
|
||||||
- emails -- additional info for sending mails, _to_ is admin mail address,
|
|
||||||
_from_ is source address, _subjectPrefix_ is prefix of mail subject
|
|
||||||
- forgottenPassword -- user messages for changing passwords
|
|
||||||
- redirectUrl -- URL of web application where the password can be changed
|
|
||||||
- tokenExpiration -- expiration timeout of temporary token (in seconds)
|
|
||||||
- emails -- additional info for sending mails, _from_ is source address and
|
|
||||||
_subjectPrefix_ is prefix of mail subject
|
|
||||||
- mail -- configuration of sending mails
|
|
||||||
- smtp -- using SMTP server, have to be "true"
|
|
||||||
- host -- address of the server
|
|
||||||
- port -- sending port (common values are 25, 465, 587)
|
|
||||||
- username -- login to the server
|
|
||||||
- password -- password to the server
|
|
||||||
- secure -- security, values are empty for no security, "ssl" or "tls"
|
|
||||||
- context -- additional parameters, depending on used mail engine. For
|
|
||||||
examle self-signed certificates can be allowed as _verify_peer_ and
|
|
||||||
_verify_peer_name_ to false and _allow_self_signed_ to true under _ssl_
|
|
||||||
key (see example).
|
|
||||||
|
|
||||||
Outside the parameters section of configuration is configuration for Doctrine.
|
|
||||||
It is ORM framework which maps PHP objects (entities) into database tables and
|
|
||||||
rows. The configuration is simple, required items are only _user_, _password_
|
|
||||||
and _host_ with _dbname_, i.e. address of database computer (mostly localhost)
|
|
||||||
with name of ReCodEx database.
|
|
||||||
|
|
||||||
### Example local configuration file
|
|
||||||
|
|
||||||
```{.yml}
|
|
||||||
parameters:
|
|
||||||
accessManager:
|
|
||||||
leeway: 60
|
|
||||||
issuer: https://recodex.projekty.ms.mff.cuni.cz
|
|
||||||
audience: https://recodex.projekty.ms.mff.cuni.cz
|
|
||||||
expiration: 86400 # 24 hours in seconds
|
|
||||||
usedAlgorithm: HS256
|
|
||||||
allowedAlgorithms:
|
|
||||||
- HS256
|
|
||||||
verificationKey: "recodex-123"
|
|
||||||
fileServer:
|
|
||||||
address: http://127.0.0.1:9999
|
|
||||||
auth:
|
|
||||||
username: "user"
|
|
||||||
password: "pass"
|
|
||||||
timeouts:
|
|
||||||
connection: 500
|
|
||||||
broker:
|
|
||||||
address: tcp://127.0.0.1:9658
|
|
||||||
auth:
|
|
||||||
username: "user"
|
|
||||||
password: "pass"
|
|
||||||
timeouts:
|
|
||||||
ack: 100
|
|
||||||
send: 5000
|
|
||||||
result: 1000
|
|
||||||
monitor:
|
|
||||||
address: wss://recodex.projekty.ms.mff.cuni.cz:4443/ws
|
|
||||||
CAS:
|
|
||||||
serviceId: "cas-uk"
|
|
||||||
ldapConnection:
|
|
||||||
hostname: "ldap.cuni.cz"
|
|
||||||
base_dn: "ou=people,dc=cuni,dc=cz"
|
|
||||||
port: 389
|
|
||||||
security: SSL
|
|
||||||
bindName: "cunipersonalid"
|
|
||||||
fields:
|
|
||||||
email: "mail"
|
|
||||||
firstName: "givenName"
|
|
||||||
lastName: "sn"
|
|
||||||
emails:
|
|
||||||
apiUrl: https://recodex.projekty.ms.mff.cuni.cz:4000
|
|
||||||
footerUrl: https://recodex.projekty.ms.mff.cuni.cz
|
|
||||||
siteName: "ReCodEx"
|
|
||||||
githubUrl: https://github.com/ReCodEx
|
|
||||||
from: "ReCodEx <noreply@example.com>"
|
|
||||||
failures:
|
|
||||||
emails:
|
|
||||||
to: "Admin Name <admin@example.com>"
|
|
||||||
from: %emails.from%
|
|
||||||
subjectPrefix: "ReCodEx Failure Report - "
|
|
||||||
forgottenPassword:
|
|
||||||
redirectUrl: "https://recodex.projekty.ms.mff.cuni.cz/
|
|
||||||
forgotten-password/change"
|
|
||||||
tokenExpiration: 600 # 10 minues
|
|
||||||
emails:
|
|
||||||
from: %emails.from%
|
|
||||||
subjectPrefix: "ReCodEx Forgotten Password Request - "
|
|
||||||
mail:
|
|
||||||
smtp: true
|
|
||||||
host: "smtp.ps.stdin.cz"
|
|
||||||
port: 587
|
|
||||||
username: "user"
|
|
||||||
password: "pass"
|
|
||||||
secure: "tls"
|
|
||||||
context:
|
|
||||||
ssl:
|
|
||||||
verify_peer: false
|
|
||||||
verify_peer_name: false
|
|
||||||
allow_self_signed: true
|
|
||||||
doctrine:
|
|
||||||
user: "user"
|
|
||||||
password: "pass"
|
|
||||||
host: localhost
|
|
||||||
dbname: "recodex-api"
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
<!---
|
|
||||||
// vim: set formatoptions=tqn flp+=\\\|^\\*\\s* textwidth=80 colorcolumn=+1:
|
|
||||||
-->
|
|
||||||
|
|
Loading…
Reference in New Issue