mirror of
https://github.com/bigchaindb/bigchaindb.git
synced 2024-10-13 13:34:05 +00:00
Update docs with SSL environment variables (#1536)
* Update docs with TLS env variables * Document ssl, login and password env vars * Update docs and add default values in example configuration
This commit is contained in:
@@ -37,6 +37,14 @@ For convenience, here's a list of all the relevant environment variables (docume
|
||||
`BIGCHAINDB_LOG_FMT_CONSOLE`<br>
|
||||
`BIGCHAINDB_LOG_FMT_LOGFILE`<br>
|
||||
`BIGCHAINDB_LOG_GRANULAR_LEVELS`<br>
|
||||
`BIGCHAINDB_DATABASE_SSL`<br>
|
||||
`BIGCHIANDB_DATABASE_LOGIN`<br>
|
||||
`BIGCHAINDB_DATABASE_PASSWORD`<br>
|
||||
`BIGCHAINDB_DATABASE_CA_CERT`<br>
|
||||
`BIGCHAINDB_DATABASE_CERTFILE`<br>
|
||||
`BIGCHAINDB_DATABASE_KEYFILE`<br>
|
||||
`BIGCHAINDB_DATABASE_KEYFILE_PASSPHRASE`<br>
|
||||
`BIGCHAINDB_DATABASE_CRLFILE`<br>
|
||||
|
||||
The local config file is `$HOME/.bigchaindb` by default (a file which might not even exist), but you can tell BigchainDB to use a different file by using the `-c` command-line option, e.g. `bigchaindb -c path/to/config_file.json start`
|
||||
or using the `BIGCHAINDB_CONFIG_PATH` environment variable, e.g. `BIGHAINDB_CONFIG_PATH=.my_bigchaindb_config bigchaindb start`.
|
||||
@@ -103,6 +111,19 @@ The settings with names of the form `database.*` are for the database backend
|
||||
* `database.replicaset` is only relevant if using MongoDB; it's the name of the MongoDB replica set, e.g. `bigchain-rs`.
|
||||
* `database.connection_timeout` is the maximum number of milliseconds that BigchainDB will wait before giving up on one attempt to connect to the database backend.
|
||||
* `database.max_tries` is the maximum number of times that BigchainDB will try to establish a connection with the database backend. If 0, then it will try forever.
|
||||
* `database.ssl` is a flag that determines if BigchainDB connects to the
|
||||
backend database over TLS/SSL or not. This can be set to either `true` or
|
||||
`false` (the default).
|
||||
Note: This parameter is only supported for the MongoDB backend currently.
|
||||
* `database.login` and `database.password` are the login and password used to
|
||||
authenticate to the database before performing any operations, specified in
|
||||
plaintext. The default values for both are currently `null`, which means that
|
||||
BigchainDB will not authenticate with the backend database.
|
||||
Note: These parameters are only supported for the MongoDB backend currently.
|
||||
* `database.ca_cert`, `database.certfile`, `database.keyfile` and `database.crlfile` are the paths to the CA, signed certificate, private key and certificate revocation list files respectively.
|
||||
Note: These parameters are only supported for the MongoDB backend currently.
|
||||
* `database.keyfile_passphrase` is the private key decryption passphrase, specified in plaintext.
|
||||
Note: This parameter is only supported for the MongoDB backend currently.
|
||||
|
||||
**Example using environment variables**
|
||||
```text
|
||||
@@ -138,7 +159,15 @@ If you used `bigchaindb -y configure mongodb` to create a default local config f
|
||||
"name": "bigchain",
|
||||
"replicaset": "bigchain-rs",
|
||||
"connection_timeout": 5000,
|
||||
"max_tries": 3
|
||||
"max_tries": 3,
|
||||
"login": null,
|
||||
"password": null
|
||||
"ssl": false,
|
||||
"ca_cert": null,
|
||||
"crlfile": null,
|
||||
"certfile": null,
|
||||
"keyfile": null,
|
||||
"keyfile_passphrase": null,
|
||||
}
|
||||
```
|
||||
|
||||
|
||||
Reference in New Issue
Block a user