mirror of
https://github.com/bigchaindb/bigchaindb.git
synced 2024-10-13 13:34:05 +00:00
b6ec3e5f5c
* Support for secure TLS communication in MongoDB, MongoDB Monitoring Agent and MongoDB Backup Agent - Move from Golang to Bash for entrypoint program - Update image tag to 2.0 for Backup and Monitoring Agents and to 3.4.4 for MongoDB - Add documentation * changed title & rewrote Step 1 of workflow.rst * copy-edited ca-installation.rst * copy-edited & modified structure of workflow.rst * moved repeated Easy-RSA install & config docs to new page * edited the sentences describing the Easy-RSA dirs * copy-edited the page about generating server certificate * copy-edited the page about generating client certificate * renamed page to 'How to Set Up a Self-Signed Certificate Authority' * copy-edited page about how to revoke a certificate * Comments on how to uniquely name all instances in the cluster * Added comments about the other questions when setting up a CA * Added note about one Agent Api Key per Cloud Manager backup * docs: clarified instructions for generating server CSR * docs: added back 'from your PKI infrastructure' * docs: fixed step & added step re/ FQDNs & certs in workflow.rst * docs: added note re/ the Distinguished Name * Update docs for env vars setup * docs: added tip: how to get help with the easyrsa command
101 lines
1.9 KiB
Plaintext
101 lines
1.9 KiB
Plaintext
# mongod.conf
|
|
|
|
# for documentation of all options, see:
|
|
# http://docs.mongodb.org/manual/reference/configuration-options/
|
|
|
|
# where to write logging data.
|
|
systemLog:
|
|
verbosity: 0
|
|
# traceAllExceptions: true
|
|
timeStampFormat: iso8601-utc
|
|
component:
|
|
accessControl:
|
|
verbosity: 0
|
|
command:
|
|
verbosity: 0
|
|
control:
|
|
verbosity: 0
|
|
ftdc:
|
|
verbosity: 0
|
|
geo:
|
|
verbosity: 0
|
|
index:
|
|
verbosity: 0
|
|
network:
|
|
verbosity: 0
|
|
query:
|
|
verbosity: 0
|
|
replication:
|
|
verbosity: 0
|
|
sharding:
|
|
verbosity: 0
|
|
storage:
|
|
verbosity: 0
|
|
journal:
|
|
verbosity: 0
|
|
write:
|
|
verbosity: 0
|
|
|
|
processManagement:
|
|
fork: false
|
|
pidFilePath: /tmp/mongod.pid
|
|
|
|
net:
|
|
port: MONGODB_PORT
|
|
bindIp: 0.0.0.0
|
|
maxIncomingConnections: 8192
|
|
wireObjectCheck: false
|
|
unixDomainSocket:
|
|
enabled: false
|
|
pathPrefix: /tmp
|
|
filePermissions: 0700
|
|
http:
|
|
enabled: false
|
|
compression:
|
|
compressors: snappy
|
|
ssl:
|
|
mode: requireSSL
|
|
PEMKeyFile: MONGODB_KEY_FILE_PATH
|
|
#PEMKeyPassword: MONGODB_KEY_FILE_PASSWORD
|
|
CAFile: MONGODB_CA_FILE_PATH
|
|
CRLFile: MONGODB_CRL_FILE_PATH
|
|
|
|
#allowConnectionsWithoutCertificates: false
|
|
#allowInvalidHostnames: false
|
|
#weakCertificateValidation: false
|
|
#allowInvalidCertificates: false
|
|
|
|
#security: TODO
|
|
# authorization: enabled
|
|
# clusterAuthMode: x509
|
|
|
|
setParameter:
|
|
enableLocalhostAuthBypass: true
|
|
#notablescan: 1 TODO
|
|
#logUserIds: 1 TODO
|
|
|
|
storage:
|
|
dbPath: /data/db
|
|
indexBuildRetry: true
|
|
journal:
|
|
enabled: true
|
|
commitIntervalMs: 100
|
|
directoryPerDB: true
|
|
engine: wiredTiger
|
|
wiredTiger:
|
|
engineConfig:
|
|
journalCompressor: snappy
|
|
collectionConfig:
|
|
blockCompressor: snappy
|
|
indexConfig:
|
|
prefixCompression: true # TODO false may affect performance?
|
|
|
|
operationProfiling:
|
|
mode: slowOp
|
|
slowOpThresholdMs: 100
|
|
|
|
replication:
|
|
replSetName: REPLICA_SET_NAME
|
|
enableMajorityReadConcern: true
|
|
|