application.yml

logging:
  pattern:
    level: '%5p [${spring.application.name:},%X{traceId:-},%X{spanId:-}]'

server:
  port: 8080
  jetty:
    threads:
      max-queue-capacity: 100

spring:
  application:
    name: openvsx-server
  autoconfigure:
    # don't send traces to Zipkin in development
    exclude: org.springframework.boot.zipkin.autoconfigure.ZipkinAutoConfiguration
  profiles:
    include: ovsx
  cache:
    jcache:
      config: classpath:ehcache.xml
  datasource:
    url: jdbc:postgresql://localhost:5432/openvsx
    username: openvsx
    password: openvsx
  # Download analytics is disabled by default. When enabled it keeps its time-series schema in a
  # separate database, migrated on its own and requiring the timescaledb extension:
  #   ovsx.analytics.enabled: true
  #   ovsx.analytics.datasource.url: jdbc:postgresql://localhost:5433/openvsx_timeseries
  #   ovsx.analytics.datasource.username: openvsx
  #   ovsx.analytics.datasource.password: openvsx
  #   ovsx.analytics.datasource.maximum-pool-size: 5
  flyway:
    baseline-on-migrate: true
    baseline-version: 0.1.0
    baseline-description: JobRunr tables
  jpa:
    open-in-view: false
    properties:
      hibernate:
        dialect: org.hibernate.dialect.PostgreSQLDialect
    hibernate:
      ddl-auto: none
  session:
    store-type: jdbc
    jdbc:
      initialize-schema: never
  thymeleaf:
    check-template-location: false

  security:
      oauth2:
        client:
          registration:
            github:
              client-id: none
              client-secret: none

management:
  health:
    probes:
      enabled: true
  endpoints:
    web:
      exposure:
        include:
          - health
          - metrics
          - prometheus
  metrics:
    distribution:
      percentiles-histogram:
        http:
          server:
            requests: true
          client:
            requests: true

springdoc:
  model-and-view-allowed: true
  api-docs:
    version: openapi_3_0
  swagger-ui:
    path: /swagger-ui
    docExpansion: list
    operationsSorter: alpha
    supportedSubmitMethods:
      - get

jobrunr:
  job-scheduler:
    enabled: true
  background-job-server:
    enabled: true
    worker-count: 2
  dashboard:
    enabled: false
  database:
    type: sql
  miscellaneous:
    allow-anonymous-data-usage: false

bucket4j:
  enabled: true
  filters:
    - cache-name: buckets
      url: '/api/-/(namespace/create|publish)'
      http-response-headers:
        Access-Control-Allow-Origin: '*'
        Access-Control-Expose-Headers: X-Rate-Limit-Retry-After-Seconds, X-Rate-Limit-Remaining
      rate-limits:
        - cache-key: getParameter("token")
          bandwidths:
            - capacity: 15
              time: 1
              unit: seconds
    - cache-name: buckets
      url: '/vscode/asset/.*/.*/.*/Microsoft.VisualStudio.Services.Icons.Default'
      http-response-headers:
        Access-Control-Allow-Origin: '*'
        Access-Control-Expose-Headers: X-Rate-Limit-Retry-After-Seconds, X-Rate-Limit-Remaining
      rate-limits:
        - cache-key: getRemoteAddr()
          bandwidths:
            - capacity: 75
              time: 1
              unit: seconds
    - cache-name: buckets
      url: '/vscode/(?!asset/.*/.*/.*/Microsoft.VisualStudio.Services.Icons.Default).*|/api/(?!(.*/.*/review(/delete)?)|(-/(namespace/create|publish))).*'
      http-response-headers:
        Access-Control-Allow-Origin: '*'
        Access-Control-Expose-Headers: X-Rate-Limit-Retry-After-Seconds, X-Rate-Limit-Remaining
      rate-limits:
        - cache-key: getRemoteAddr()
          bandwidths:
            - capacity: 15
              time: 1
              unit: seconds

ovsx:
  publisher-agreement:
    # empty disables the agreement; a version such as 1, 1.0 or 1.0.0 requires signing it (a new major version requires re-signing unless allowed-versions says otherwise)
    version: ''
    # versions besides the current one whose signatures stay valid, such as '1.1,1.2' (quote a single one such as '1.10', which YAML reads as 1.1); empty accepts the same or a higher major version
    allowed-versions: ''
    # Markdown text of the agreement, served at /api/publisher-agreement; a Spring resource location such as file:/etc/openvsx/agreement.md
    text: ''
  databasesearch:
    enabled: false
  elasticsearch:
    clear-on-start: true
    host: 'localhost:9200'
  extension-control:
    update-on-start: true
  integrity:
    key-pair: create # create, renew, delete, 'undefined'
  registry:
    version: <OPENVSX_VERSION>
  # Set this in any deployment reachable from the open web, or the URLs in a response are derived
  # from headers the client sends. See doc/configuration.md, Server URL.
  #  server:
  #    url: https://openvsx.example
  storage:
    local:
      directory: /tmp