Repository navigation
Expand file tree
/
Copy path.env.example
More file actions
81 lines (69 loc) · 6.68 KB
/
Copy path.env.example
File metadata and controls
81 lines (69 loc) · 6.68 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
# A long random secret used to sign sessions and tokens (min 32 characters)
STACKABLE_COCKPIT_SESSION_SECRET=change-me-to-a-long-random-secret-min-32-chars
# The publicly accessible base URL of this application
STACKABLE_COCKPIT_BASE_URL=http://localhost:5173
# OIDC discovery URL (Keycloak, Entra ID, or any compliant OIDC provider)
STACKABLE_COCKPIT_OIDC_DISCOVERY_URL=https://your-idp.example.com/realms/your-realm/.well-known/openid-configuration
# The client ID and secret registered in your OIDC provider
STACKABLE_COCKPIT_OIDC_CLIENT_ID=stackable-cockpit
STACKABLE_COCKPIT_OIDC_CLIENT_SECRET=your-client-secret
# Storage encryption key (64 hex characters) used to encrypt sensitive data in storage.
STORAGE_ENCRYPTION_KEY=F000000000000000000000000000000000000000000000000000000000000000
# STACKABLE_COCKPIT_STORAGE_TLS_CA_CERT=/path/to/ca.pem # CA certificate for S3 connections with TLS verification; replaces the system trust store
# PostgreSQL database (required)
DATABASE_HOST=localhost
DATABASE_PORT=5432
DATABASE_NAME=cockpit
DATABASE_USER=cockpit
DATABASE_PASSWORD=change-me
# DATABASE_TLS_MODE=verify-full # verify-full, require or disable (default: verify-full in production, disable otherwise)
# DATABASE_TLS_CA_CERT=/path/to/ca.pem # CA certificate for verify-full
# OIDC claim used as the Trino user for impersonation (default: preferred_username)
# STACKABLE_COCKPIT_TRINO_USER_CLAIM=preferred_username
# Extra OIDC scopes to request in addition to the defaults (openid profile email),
# space- or comma-separated. Use when the username/authorisation claim is only
# released by your IdP under a custom scope.
# STACKABLE_COCKPIT_OIDC_EXTRA_SCOPES=groups roles
# Logging
# LOG_LEVEL=debug # Minimum log level (debug, info, warn, error). Default: debug in dev, info in prod.
# LOG_PRETTY=true # Human-readable log output. Default: true in dev, false in prod.
# LOG_JSON_FILE=/var/log/stackable-cockpit/app.log # Optional: also write JSON logs to this file (for Vector aggregation).
# Optional: Pre-configure the Trino connection for all users.
# When STACKABLE_COCKPIT_TRINO_URL is set, the connection form is hidden and
# the specified Trino endpoint is used automatically. By default the logged-in
# user is forwarded to Trino as X-Trino-User (impersonation via the OIDC username).
# STACKABLE_COCKPIT_TRINO_URL=https://trino.example.com:8443
# STACKABLE_COCKPIT_TRINO_PUBLIC_URL=https://trino.example.com # Browser-facing Trino URL for "View in Trino" links (default: the Trino URL used for queries)
# STACKABLE_COCKPIT_TRINO_AUTH_TYPE=basic # "none" (default) or "basic"
# STACKABLE_COCKPIT_TRINO_AUTH_USERNAME=service-account
# STACKABLE_COCKPIT_TRINO_AUTH_PASSWORD=secret
# STACKABLE_COCKPIT_TRINO_USER_IMPERSONATION=false # Disable impersonation: run all queries as the auth user (requires basic auth). Default: true
# STACKABLE_COCKPIT_TRINO_TLS_INSECURE=false # Set to "true" to skip TLS certificate verification
# STACKABLE_COCKPIT_TRINO_TLS_CA_CERT=/path/to/ca.pem # Custom CA certificate file
# STACKABLE_COCKPIT_QUERY_TTL=1800 # Seconds before completed, unaccessed tab queries are evicted (default: 1800)
# Feature flags
# STACKABLE_COCKPIT_COMPLETION_ENABLED=false # Disable SQL editor code completion (default: true)
# STACKABLE_COCKPIT_STORAGE_BROWSER_ENABLED=true # Enable S3/HDFS file browser (default: false)
# PUBLIC_STACKABLE_COCKPIT_STORAGE_RESTORE_TABS=true # File browser: continue where you left off — restore open tabs from the last session (default: false)
# PUBLIC_STACKABLE_COCKPIT_INFINITE_SCROLL_ENABLED=true # Load CSV and Parquet preview rows lazily while scrolling; any other value than "true" disables it (default: true)
# PUBLIC_STACKABLE_COCKPIT_STORAGE_CUT_COPY_ENABLED=true # Enables cut/copy and dragging in the storage browser; client-only, the server work is gated by paste/move (default: false)
# PUBLIC_STACKABLE_COCKPIT_STORAGE_PASTE_ENABLED=true # Enables paste in the storage browser; the transfer API accepts copies only with this, and moves with this or MOVE_ENABLED (default: false)
# PUBLIC_STACKABLE_COCKPIT_STORAGE_RENAME_ENABLED=true # Enables rename in the storage browser; also enforced by the transfer API (default: false)
# PUBLIC_STACKABLE_COCKPIT_STORAGE_MOVE_ENABLED=true # Enables drag-and-drop move in the storage browser (dragging also needs CUT_COPY_ENABLED); the transfer API accepts moves with this or PASTE_ENABLED (default: false)
# Storage browser limits and settings
# STACKABLE_COCKPIT_TEXT_PREVIEW_BYTES=262144 # Max bytes fetched for text, TSV and JSON previews; editable files are fetched completely (default: 262144)
# STACKABLE_COCKPIT_IMAGE_PREVIEW_BYTES=5242880 # Max bytes fetched for image previews (default: 5242880)
# STACKABLE_COCKPIT_PDF_PREVIEW_BYTES=26214400 # Max bytes fetched for PDF previews (default: 26214400)
# STACKABLE_COCKPIT_FILE_PREVIEW_ROWS=250 # Max rows in tabular file previews (default: 250)
# STACKABLE_COCKPIT_FILE_PREVIEW_COLUMNS=50 # Max columns in tabular file previews (default: 50)
# STACKABLE_COCKPIT_ARCHIVE_PREVIEW_MAX_MB=100 # Max size in megabytes of an archive opened for preview, checked against its compressed size, the total size of the listed entries and the size of an extracted entry (default: 100)
# STACKABLE_COCKPIT_ARCHIVE_CACHE_MAX_MB=512 # Max total size of archives cached in /tmp for previews, in megabytes; raised to at least twice ARCHIVE_PREVIEW_MAX_MB (default: 512)
# STACKABLE_COCKPIT_PARQUET_PREVIEW_DISALLOWED_COMPRESSION_TYPES=gzip-no_offset # Comma-separated list of compression types to disallow from parquet data preview (default: "gzip-no_offset")
# BODY_SIZE_LIMIT=6M # adapter-node request body limit; must be at least MAX_EDITABLE_FILE_SIZE (default: 6M in the container image, 512K otherwise)
# PUBLIC_STACKABLE_COCKPIT_MAX_EDITABLE_FILE_SIZE=1048576 # Max file size (in bytes) of editable text files in the storage browser; BODY_SIZE_LIMIT must be at least this large (default: 5 MiB)
# PUBLIC_STACKABLE_COCKPIT_PAGE_SIZES=25,50,100 # Comma-separated page size options for paginated list views (default: 25,50,100)
# PUBLIC_STACKABLE_COCKPIT_DEFAULT_PAGE_SIZE=25 # Page size selected when no user preference is stored; must be one of PAGE_SIZES (default: first page size)
# PUBLIC_STACKABLE_COCKPIT_MAX_RECENT_FILES=15 # Number of recently visited storage locations kept in local storage (default: 15)
# PUBLIC_STACKABLE_COCKPIT_UPLOAD_CONCURRENCY=3 # Maximum number of concurrent file uploads (default: 3)
# STACKABLE_COCKPIT_STORAGE_TRANSFER_CONCURRENCY=8 # Objects copied at once within one copy, move or rename request (default: 8)
# STACKABLE_COCKPIT_DOWNLOAD_HISTORY_RETENTION_DAYS=30 # Days a user's download history is kept; an integer from 1 to 3650, any other value stops startup (default: 30)