wombat/src/main/resources/application-dev.yaml.dist at master · illuin-tech/wombat · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
quarkus:
  # dev inherits the oidc profile (application-oidc.yaml and the "%oidc" block below), so `quarkus:dev` requires signing in.
  # Uncomment to run with authentication.
  #config:
  #  profile:
  #    parent: oidc
  # Alternative PostgreSQL Datasource for dev:
  # datasource:
  #   db-kind: postgresql
  #   username: wombat
  #   password: wombat
  #   jdbc:
  #     url: "jdbc:postgresql://localhost:5432/wombat"

# Connector endpoints for local mock / stub services
connector:
  boavizta:
    uri: "http://localhost:5001/v1/"
  ecologits:
    uri: "http://localhost:5002/"

monitor:
  environments-file: monitored/monitored-environments-dev.yaml

# Fold sampling rows every 5 minutes instead of every hour, so fresh activity reaches the UI within minutes
# Keep the defaults in production, see doc/compaction.md
compaction:
  cron: "0 1/5 * * * ?" # a minute past every 5-minute window
  window: 5m
  delay: 30s

# Local S3 Backup setup (e.g. SeaweedFS service), only used by the SQLite backend: drop it when running on PostgreSQL
# backup:
#   enabled: true
#   cron: "0 0 * * * ?"  # hourly
#   s3:
#     key-prefix: sqlite/
#     endpoint: http://localhost:8333
#     bucket: wombat-bucket
#     region: us-east-1
#     access-key: admin
#     secret-key: secret

# Optional Secret resolution directory:
# wombat:
#   secret:
#     directory:
#       path: /secrets

# Identity provider for dev mode, see doc/access-control.md. Register http://localhost:8080/auth/callback as a redirect URI.
"%oidc":
  quarkus:
    oidc:
      auth-server-url: https://your-idp.example.com
      client-id: <client-id>
      credentials:
        secret: <client-secret>
    http:
      auth:
        permission:
          dev-ui:
            policy: permit
            paths:
              - /q/dev/*
              - /q/dev-ui/*
  auth:
    # Without a mapped role every user is denied after signing in. Entries are provider roles or groups, "*" for every
    # signed-in user, or emails (entries containing "@", matched against the verified email).
    roles:
      admin: ["you@example.com"]
      user: ["*"]
    # allowed-email-domains: [example.com]
    # api-keys:
    #   max-lifetime: 365d
    #   allow-never-expiring: false