3083c77a9e
Some checks failed
Build Test Deploy / docs (push) Has been cancelled
Build Test Deploy / deploy (push) Has been cancelled
Build Test Deploy / build-test (push) Has been cancelled
Build Test Deploy / authority-container (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
66 lines
2.4 KiB
Plaintext
66 lines
2.4 KiB
Plaintext
# Feedser configuration template for StellaOps deployments.
|
|
# Copy to ../etc/feedser.yaml (relative to the web service content root)
|
|
# and adjust the values to match your environment. Environment variables
|
|
# (prefixed with FEEDSER_) override these settings at runtime.
|
|
|
|
storage:
|
|
driver: mongo
|
|
# Mongo connection string. Use SRV URI or standard connection string.
|
|
dsn: "mongodb://feedser:feedser@mongo:27017/feedser?authSource=admin"
|
|
# Optional database name; defaults to the name embedded in the DSN or 'feedser'.
|
|
database: "feedser"
|
|
# Mongo command timeout in seconds.
|
|
commandTimeoutSeconds: 30
|
|
|
|
plugins:
|
|
# Feedser resolves plug-ins relative to the content root; override as needed.
|
|
baseDirectory: ".."
|
|
directory: "PluginBinaries"
|
|
searchPatterns:
|
|
- "StellaOps.Feedser.Plugin.*.dll"
|
|
|
|
telemetry:
|
|
enabled: true
|
|
enableTracing: false
|
|
enableMetrics: false
|
|
enableLogging: true
|
|
minimumLogLevel: "Information"
|
|
serviceName: "stellaops-feedser"
|
|
# Configure OTLP endpoint when shipping traces/metrics/logs out-of-band.
|
|
otlpEndpoint: ""
|
|
# Optional headers for OTLP exporters, for example authentication tokens.
|
|
otlpHeaders: {}
|
|
# Attach additional resource attributes to telemetry exports.
|
|
resourceAttributes:
|
|
deployment.environment: "local"
|
|
# Emit console exporters for local debugging.
|
|
exportConsole: true
|
|
|
|
authority:
|
|
enabled: false
|
|
# Temporary rollout flag. When true, Feedser logs anonymous access but does not fail requests
|
|
# without tokens. Set to false before 2025-12-31 UTC to enforce authentication fully.
|
|
allowAnonymousFallback: true
|
|
# Issuer advertised by StellaOps Authority (e.g. https://authority.stella-ops.local).
|
|
issuer: "https://authority.stella-ops.local"
|
|
# Optional explicit metadata address; defaults to {issuer}/.well-known/openid-configuration.
|
|
metadataAddress: ""
|
|
requireHttpsMetadata: true
|
|
backchannelTimeoutSeconds: 30
|
|
tokenClockSkewSeconds: 60
|
|
audiences:
|
|
- "api://feedser"
|
|
requiredScopes:
|
|
- "feedser.jobs.trigger"
|
|
# Outbound credentials Feedser can use to call Authority (client credentials flow).
|
|
clientId: "feedser-jobs"
|
|
# Prefer storing the secret outside of the config file. Provide either clientSecret or clientSecretFile.
|
|
clientSecret: ""
|
|
clientSecretFile: ""
|
|
clientScopes:
|
|
- "feedser.jobs.trigger"
|
|
# Networks allowed to bypass authentication (loopback by default for on-host cron jobs).
|
|
bypassNetworks:
|
|
- "127.0.0.1/32"
|
|
- "::1/128"
|