Statistics
| Branch: | Tag: | Revision:

root / snf-cyclades-app / conf / 20-snf-cyclades-app-api.conf @ 7fccf095

History | View | Annotate | Download (7.1 kB)

1
## -*- coding: utf-8 -*-
2
##
3
## API configuration
4
######################
5
#
6
#
7
#DEBUG = False
8
#
9
## Top-level URL for deployment. Numerous other URLs depend on this.
10
#CYCLADES_BASE_URL = "https://host:port/cyclades"
11
#
12
## The API will return HTTP Bad Request if the ?changes-since
13
## parameter refers to a point in time more than POLL_LIMIT seconds ago.
14
#POLL_LIMIT = 3600
15
#
16
## Astakos groups that have access to '/admin' views.
17
#ADMIN_STATS_PERMITTED_GROUPS = ["admin-stats"]
18
#
19
##
20
## Network Configuration
21
##
22
#
23
## CYCLADES_DEFAULT_SERVER_NETWORKS setting contains a list of networks to
24
## connect a newly created server to, *if the user has not* specified them
25
## explicitly in the POST /server API call.
26
## Each member of the list may be a network UUID, a tuple of network UUIDs,
27
## "SNF:ANY_PUBLIC_IPV4" [any public network with an IPv4 subnet defined],
28
## "SNF:ANY_PUBLIC_IPV6 [any public network with only an IPV6 subnet defined],
29
##  or "SNF:ANY_PUBLIC" [any public network].
30
##
31
## Access control and quota policy are enforced, just as if the user had
32
## specified the value of CYCLADES_DEFAULT_SERVER_NETWORKS in the content
33
## of the POST /call, after processing of "SNF:*" directives."
34
#CYCLADES_DEFAULT_SERVER_NETWORKS = []
35
#
36
## This setting contains a list of networks which every new server
37
## will be forced to connect to, regardless of the contents of the POST
38
## /servers call, or the value of CYCLADES_DEFAULT_SERVER_NETWORKS.
39
## Its format is identical to that of CYCLADES_DEFAULT_SERVER_NETWORKS.
40
#
41
## WARNING: No access control or quota policy are enforced.
42
## The server will get all IPv4/IPv6 addresses needed to connect to the
43
## networks specified in CYCLADES_FORCED_SERVER_NETWORKS, regardless
44
## of the state of the floating IP pool of the user, and without
45
## allocating any floating IPs."
46
#CYCLADES_FORCED_SERVER_NETWORKS = []
47
#
48
#
49
## Maximum allowed network size for private networks.
50
#MAX_CIDR_BLOCK = 22
51
#
52
## Default settings used by network flavors
53
#DEFAULT_MAC_PREFIX = 'aa:00:0'
54
#DEFAULT_BRIDGE = 'br0'
55
#
56
## Network flavors that users are allowed to create through API requests
57
#API_ENABLED_NETWORK_FLAVORS = ['MAC_FILTERED']
58
#
59
## Settings for IP_LESS_ROUTED network:
60
## -----------------------------------
61
## In this case VMCs act as routers that forward the traffic to/from VMs, based
62
## on the defined routing table($DEFAULT_ROUTING_TABLE) and ip rules, that
63
## exist in every node, implenting an IP-less routed and proxy-arp setup.
64
#DEFAULT_ROUTING_TABLE = 'snf_public'
65
#
66
## Settings for MAC_FILTERED network:
67
## ------------------------------------------
68
## All networks of this type are bridged to the same bridge. Isolation between
69
## networks is achieved by assigning a unique MAC-prefix to each network and
70
## filtering packets via ebtables.
71
#DEFAULT_MAC_FILTERED_BRIDGE = 'prv0'
72
#
73
#
74
## Firewall tags should contain '%s' to be filled with the NIC
75
## ID.
76
#GANETI_FIREWALL_ENABLED_TAG = 'synnefo:network:%s:protected'
77
#GANETI_FIREWALL_DISABLED_TAG = 'synnefo:network:%s:unprotected'
78
#GANETI_FIREWALL_PROTECTED_TAG = 'synnefo:network:%s:limited'
79
#
80
## The default firewall profile that will be in effect if no tags are defined
81
#DEFAULT_FIREWALL_PROFILE = 'DISABLED'
82
#
83
## Fixed mapping of user VMs to a specific backend.
84
## e.g. BACKEND_PER_USER = {'example@synnefo.org': 2}
85
#BACKEND_PER_USER = {}
86
#
87
#
88
## Encryption key for the instance hostname in the stat graphs URLs. Set it to
89
## a random string and update the STATS_SECRET_KEY setting in the snf-stats-app
90
## host (20-snf-stats-app-settings.conf) accordingly.
91
#CYCLADES_STATS_SECRET_KEY = "secret key"
92
#
93
## URL templates for the stat graphs.
94
## The API implementation replaces '%s' with the encrypted backend id.
95
#CPU_BAR_GRAPH_URL = 'http://stats.example.synnefo.org/stats/v1.0/cpu-bar/%s'
96
#CPU_TIMESERIES_GRAPH_URL = 'http://stats.example.synnefo.org/stats/v1.0/cpu-ts/%s'
97
#NET_BAR_GRAPH_URL = 'http://stats.example.synnefo.org/net-bar/stats/v1.0/%s'
98
#NET_TIMESERIES_GRAPH_URL = 'http://stats.example.synnefo.org/stats/v1.0/net-ts/%s'
99
#
100
## Recommended refresh period for server stats
101
#STATS_REFRESH_PERIOD = 60
102
#
103
## The maximum number of file path/content pairs that can be supplied on server
104
## build
105
#MAX_PERSONALITY = 5
106
#
107
## The maximum size, in bytes, for each personality file
108
#MAX_PERSONALITY_SIZE = 10240
109
#
110
#
111
## Authentication URL of the astakos instance to be used for user management
112
#ASTAKOS_AUTH_URL = 'https://accounts.example.synnefo.org/identity/v2.0'
113
#
114
## Key for password encryption-decryption. After changing this setting, synnefo
115
## will be unable to decrypt all existing Backend passwords. You will need to
116
## store again the new password by using 'snf-manage backend-modify'.
117
## SECRET_ENCRYPTION_KEY may up to 32 bytes. Keys bigger than 32 bytes are not
118
## supported.
119
#SECRET_ENCRYPTION_KEY= "Password Encryption Key"
120
#
121
## Astakos service token
122
## The token used for astakos service api calls (e.g. api to retrieve user email
123
## using a user uuid)
124
#CYCLADES_SERVICE_TOKEN = ''
125

    
126
## PROXY Astakos services under the following path
127
#CYCLADES_PROXY_PREFIX = '_astakos'
128

    
129
# Tune the size of the http connection pool to astakos.
130
#CYCLADES_ASTAKOSCLIENT_POOLSIZE = 50
131
#
132
## Template to use to build the FQDN of VMs. The setting will be formated with
133
## the id of the VM.
134
#CYCLADES_SERVERS_FQDN = 'snf-%(id)s.vm.example.synnefo.org'
135
#
136
## Description of applied port forwarding rules (DNAT) for Cyclades VMs. This
137
## setting contains a mapping from the port of each VM to a tuple contaning the
138
## destination IP/hostname and the new port: (host, port). Instead of a tuple a
139
## python callable object may be used which must return such a tuple. The caller
140
## will pass to the callable the following positional arguments, in the
141
## following order:
142
## * server_id: The ID of the VM in the DB
143
## * ip_address: The IPv4 address of the public VM NIC
144
## * fqdn: The FQDN of the VM
145
## * user: The UUID of the owner of the VM
146
##
147
## Here is an example describing the mapping of the SSH port of all VMs to
148
## the external address 'gate.example.synnefo.org' and port 60000+server_id.
149
## e.g. iptables -t nat -A prerouting -d gate.example.synnefo.org \
150
## --dport (61000 # $(VM_ID)) -j DNAT --to-destination $(VM_IP):22
151
##CYCLADES_PORT_FORWARDING = {
152
##    22: lambda ip_address, server_id, fqdn, user:
153
##               ("gate.example.synnefo.org", 61000 + server_id),
154
##}
155
#CYCLADES_PORT_FORWARDING = {}
156

    
157
## Extra configuration options required for snf-vncauthproxy (>=1.5)
158
#CYCLADES_VNCAUTHPROXY_OPTS = {
159
#    # These values are required for VNC console support. They should match a
160
#    # user / password configured in the snf-vncauthproxy authentication / users
161
#    # file (/var/lib/vncauthproxy/users).
162
#    'auth_user': 'synnefo',
163
#    'auth_password': 'secret_password',
164
#    # server_address and server_port should reflect the --listen-address and
165
#    # --listen-port options passed to the vncauthproxy daemon
166
#    'server_address': '127.0.0.1',
167
#    'server_port': 24999,
168
#    # Set to True to enable SSL support on the control socket.
169
#    'enable_ssl': False,
170
#    # If you enabled SSL support for snf-vncauthproxy you can optionally
171
#    # provide a path to a CA file and enable strict checkfing for the server
172
#    # certficiate.
173
#    'ca_cert': None,
174
#    'strict': False,
175
#}