authz-service/src/main/resources/docker/authAPI.props

   1 ##\r
   2 ## AUTHZ API (authz-service) Properties\r
   3 ##\r
   4 #hostname=localhost\r
   5 hostname=0.0.0.0\r
   6 # Standard AFT for THIS box, and THIS box is in St Louis.  Put your own LAT/LONG in here.  Use "bing.com/maps" or \r
   7 # SWMTools (geoloc for DataCenters) to get YOURs\r
   8 \r
   9 AFT_LATITUDE=32.780140\r
  10 AFT_LONGITUDE=-96.800451\r
  11 AFT_ENVIRONMENT=AFTUAT\r
  12 DEPLOYED_VERSION=2.0.SAMPLE\r
  13 \r
  14 ##DME2 related parameters\r
  15 DMEServiceName=service=org.onap.aaf.authz.AuthorizationService/version=2.0/envContext=DEV/routeOffer=BAU_SE\r
  16 \r
  17 #DME2 can limit Port Ranges with the following:\r
  18 #AFT_DME2_PORT_RANGE=8101-8029,8100\r
  19 #DME2 picks any unused port in +1024 range\r
  20 #AFT_DME2_PORT=0\r
  21 AFT_DME2_ALLOW_PORT_CACHING=false\r
  22 aaf_root_ns=org.openecomp\r
  23 \r
  24 # Point to "Common" files, used between all the AAF Services. ... \r
  25 \r
  26 # DEVELOPER ONLY SETTING!!!!!  DO NOT USE on ANY BOX other than your Developer box, and it\r
  27 # would be better if you got a Cert for that, and remove this!  There is nothing stupider than\r
  28 # an unsecured Security Service.\r
  29 cadi_trust_all_x509=true\r
  30 \r
  31 # Public (i.e. Verisign) Key stores.\r
  32 # AFT_DME2_KEYSTORE=\r
  33 # AFT_DME2_KEYSTORE_PASSWORD=\r
  34 # AFT_DME2_KEY_PASSWORD=\r
  35 # cadi_truststore=\r
  36 # cadi_truststore_password=\r
  37 \r
  38 # Standard for this App/Machine\r
  39 aaf_env=DEV\r
  40 aaf_data_dir=../data\r
  41 cadi_loglevel=WARN\r
  42 aaf_id=<osaaf's Application Identity>\r
  43 aaf_password=enc:31-LFPNtP9Yl1DZKAz1rx8N8YfYVY8VKnnDr\r
  44 \r
  45 aaf_conn_timeout=6000\r
  46 aaf_timeout=10000\r
  47 aaf_user_expires=600000\r
  48 aaf_clean_interval=45000\r
  49 aaf_refresh_trigger_count=3\r
  50 aaf_high_count=30000\r
  51 \r
  52 # Basic Auth\r
  53 aaf_default_realm=openecomp.org\r
  54 #aaf_domain_support=.org\r
  55 basic_realm=openecomp.org\r
  56 basic_warn=false\r
  57 aaf_root_ns=org.openecomp\r
  58 localhost_deny=false\r
  59 \r
  60 \r
  61 # Cassandra\r
  62 # IP:Cass DataCenter:Latitude:Longitude,IP....\r
  63 cassandra.clusters=127.0.0.1\r
  64 cassandra.clusters.port=9042\r
  65 cassandra.clusters.user=authz\r
  66 cassandra.clusters.password=authz\r
  67 ## Exceptions from Cassandra which require resetting the Cassandra Connections\r
  68 cassandra.reset.exceptions=com.datastax.driver.core.exceptions.NoHostAvailableException:"no host was tried":"Connection has been closed"\r
  69 \r
  70 # Consistency Settings\r
  71 cassandra.writeConsistency.ns=LOCAL_QUORUM\r
  72 cassandra.writeConsistency.perm=LOCAL_QUORUM\r
  73 cassandra.writeConsistency.role=LOCAL_QUORUM\r
  74 cassandra.writeConsistency.user_role=LOCAL_QUORUM\r
  75 cassandra.writeConsistency.cred=LOCAL_QUORUM\r
  76 cassandra.writeConsistency.ns_attrib=LOCAL_QUORUM\r
  77 \r
  78 ## Supported Plugin Organizational Units\r
  79 Organization.com.osaaf=org.onap.aaf.osaaf.defOrg.DefaultOrg\r
  80 \r
  81 ## Email Server settings for Def Organization.\r
  82 #Sender's email ID needs to be mentioned\r
  83 com.osaaf.mailFromUserId=mailid@bogus.com\r
  84 com.osaaf.supportEmail=support@bogus.com\r
  85 com.osaaf.mailHost=smtp.bogus.com\r
  86 \r
  87 # Standard AAF DME2 Props\r
  88 AFT_DME2_REMOVE_PERSISTENT_CACHE_ON_STARTUP=TRUE\r
  89 AFT_DME2_DISABLE_PERSISTENT_CACHE=TRUE\r
  90 AFT_DME2_DISABLE_PERSISTENT_CACHE_LOAD=TRUE\r
  91 \r
  92 ## SSL OPTIONAL ONLY IN DEVELOPMENT PC/Local... WHATEVER YOU DO, don't use this on any box than your local PC\r
  93 AFT_DME2_SSL_ENABLE=false\r
  94 # for when you turn on SSL... Only TLSv1.1+ is secure as of 2016\r
  95 AFT_DME2_SSL_WANT_CLIENT_AUTH=TRUE\r
  96 AFT_DME2_SSL_INCLUDE_PROTOCOLS=TLSv1.1,TLSv1.2\r
  97 AFT_DME2_SSL_VALIDATE_CERTS=FALSE\r
  98 AFT_DME2_CLIENT_IGNORE_SSL_CONFIG=false\r
  99 \r
 100 ## Extra CA Trusts, for Certifiate Manager to build truststore with external CAs\r
 101 cm_trust_cas=VerisignG3_CA.cer;VerisignG4_CA.cer;VerisignG5_CA.cer\r
 102 \r
 103 \r
 104 #cadi_prop_files=com.osaaf.common.props;com.osaaf.props\r
 105 cadi_prop_files=opt/app/aaf/authz-service/1.0.0-SNAPSHOT/etc/com.osaaf.common.props;opt/app/aaf/authz-service/1.0.0-SNAPSHOT/etc/com.osaaf.props\r
 106 CACHE_HIGH_COUNT=40000\r
 107 CACHE_CLEAN_INTERVAL=60000\r
 108 \r
 109 \r
 110 \r
 111 \r