application.properties

# debug=true
# trace=true

server.tomcat.basedir=${TOMCAT_BASE_DIR}

server.port=${LABKEY_PORT}

spring.main.log-startup-info=true

spring.main.banner-mode=off

spring.application.name=labkey
server.servlet.application-display-name=labkey

# 2024-02-29 - if enabling logging.config setting, the file must exist at runtime or app will error and quit
#            - if logging.config and LOG4J_CONFIG_FILE env var are set differently, LOG4J_CONFIG_FILE wins
# logging.config=${$LOG4J_CONFIG_FILE:log4j2.xml}

# logging.pattern.console=
logging.pattern.console=%clr(%d{yyyy-MM-dd HH:mm:ss.SSS}){faint} E %clr(%-5.5p) %clr(%5.5replace(%p){'.+', ${PID:-}}){magenta} %clr(---){faint} %clr([%15.15t]){faint} %clr(${LOGGER_PATTERN:-%-40.40logger{39}}){cyan} %clr(:){faint} %m%n%wEx

logging.level.root=WARN

# custom tomcat group
logging.group.tomcat=org.apache.catalina, org.apache.coyote, org.apache.tomcat
logging.level.tomcat=${LOG_LEVEL_TOMCAT}

logging.level.org.apache.coyote.http2=OFF

# default groups
logging.level.web=${LOG_LEVEL_SPRING_WEB}
logging.level.sql=${LOG_LEVEL_SQL}

logging.level.net.sf.ehcache=ERROR

# logging.level.org.apache=TRACE
# logging.level.org.apache.catalina.core.Catalina=TRACE
logging.level.org.apache.catalina.core.ContainerBase.[Tomcat].[localhost]=TRACE
# logging.level.org.apache.catalina.core=TRACE
# logging.level.org.apache.catalina.LifecycleException=TRACE
logging.level.org.apache.catalina.loader.WebappClassLoaderBase=OFF
# logging.level.org.apache.catalina.session=TRACE
# logging.level.org.apache.catalina.startup.ContextConfig=OFF
# logging.level.org.apache.catalina.util.LifecycleBase=TRACE
# logging.level.org.apache.catalina.util=TRACE
# logging.level.org.apache.catalina=TRACE
# logging.level.org.apache.coyote=TRACE
# logging.level.org.apache.logging.log4j.core.net=TRACE
# logging.level.org.apache.naming=OFF
logging.level.org.apache.tomcat.util.IntrospectionUtils=OFF
# logging.level.org.apache.tomcat.util.net=TRACE
logging.level.org.apache.tomcat.util.scan=OFF
# logging.level.org.apache.tomcat.util=TRACE
logging.level.org.labkey.embedded.LabKeyServer=DEBUG
logging.level.org.springframework.boot.autoconfigure.logging.ConditionEvaluationReportLoggingListener=OFF
# logging.level.org.springframework.boot.autoconfigure=OFF
# logging.level.org.springframework.boot.context.embedded.tomcat.TomcatEmbeddedServletContainer=TRACE
# logging.level.org.springframework.boot.web.embedded.tomcat.TomcatWebServer=TRACE
# logging.level.org.springframework.boot.web.servlet.context=TRACE
# logging.level.org.springframework.boot.web.servlet=WARN
#logging.level.org.springframework.boot=INFO

logging.level.org.springframework.jdbc.core=WARN
logging.level.org.hibernate.SQL=WARN
logging.level.org.jooq.tools.LoggerListener=WARN
logging.level.org.springframework.core.codec=WARN
logging.level.org.springframework.http=WARN
logging.level.org.springframework.web=WARN
logging.level.org.springframework.boot.actuate.endpoint.web=WARN
logging.level.org.springframework.boot.web.servlet.ServletContextInitializerBeans=WARN
logging.level.org.springframework.boot=WARN

# logging.level.org.apache.catalina.loader.WebappClassLoaderBase=INFO
logging.level.org.apache.jasper.servlet.TldScanner=WARN
logging.level.org.apache.tomcat.util.digester.Digester=INFO

# logging.level.org.apache.tomcat.util.scan.StandardJarScanner=INFO
# logging.level.org.springframework.boot.autoconfigure.condition=INFO
# logging.level.org.springframework.core.env.PropertySourcesPropertyResolver=INFO

context.resources.jdbc.labkeyDataSource.type=javax.sql.DataSource
context.resources.jdbc.labkeyDataSource.driverClassName=org.postgresql.Driver
# context.resources.jdbc.labkeyDataSource.url=jdbc:postgresql://${POSTGRES_HOST:-localhost}:${POSTGRES_PORT:-5432}/${POSTGRES_DB:-${POSTGRES_USER}}${POSTGRES_PARAMETERS:-}
# context.resources.jdbc.labkeyDataSource.username=${POSTGRES_USER:-postgres}
# context.resources.jdbc.labkeyDataSource.password=${POSTGRES_PASSWORD:-}

context.resources.jdbc.labkeyDataSource.url=@@jdbcUrl@@
context.resources.jdbc.labkeyDataSource.username=@@jdbcUser@@
context.resources.jdbc.labkeyDataSource.password=@@jdbcPassword@@

context.resources.jdbc.labkeyDataSource.maxTotal=${POSTGRES_MAX_TOTAL_CONNECTIONS}
context.resources.jdbc.labkeyDataSource.maxIdle=${POSTGRES_MAX_IDLE_CONNECTIONS}
context.resources.jdbc.labkeyDataSource.maxWaitMillis=${POSTGRES_MAX_WAIT_MILLIS}
context.resources.jdbc.labkeyDataSource.accessToUnderlyingConnectionAllowed=${POSTGRES_ACCESS_UNDERLYING_CONNECTIONS}
context.resources.jdbc.labkeyDataSource.validationQuery=${POSTGRES_VALIDATION_QUERY}

# send access logs to file:
# server.tomcat.accesslog.directory=/tmp
# server.tomcat.accesslog.enabled=true
# server.tomcat.accesslog.prefix=access
# server.tomcat.accesslog.suffix=.log
# server.tomcat.accesslog.rotate=false
## File-based Tomcat HTTP access logs are enabled by default and use our recommended pattern. Override as needed.
# server.tomcat.accesslog.pattern=%h %l %u %t "%r" %s %b %D %S %I "%{Referer}i" "%{User-Agent}i" %{LABKEY.username}s %{X-Forwarded-For}i

# send access logs to stdout (preferred for ECS):
server.tomcat.accesslog.enabled=true
server.tomcat.accesslog.directory=/dev
server.tomcat.accesslog.prefix=stdout
server.tomcat.accesslog.buffered=false
server.tomcat.accesslog.suffix=
server.tomcat.accesslog.file-date-format=

server.http2.enabled=true

server.ssl.enabled=true

server.ssl.ciphers=${TOMCAT_SSL_CIPHERS}
server.ssl.enabled-protocols=${TOMCAT_SSL_ENABLED_PROTOCOLS}
server.ssl.protocol=${TOMCAT_SSL_PROTOCOL}


# must match values in entrypoint.sh
server.ssl.key-alias=${TOMCAT_KEYSTORE_ALIAS}
server.ssl.key-store=${LABKEY_HOME}/${TOMCAT_KEYSTORE_FILENAME}
# server.ssl.key-store-password=${TOMCAT_KEYSTORE_PASSWORD}
server.ssl.key-store-type=${TOMCAT_KEYSTORE_FORMAT}

context.encryptionKey=@@encryptionKey@@


#
# as of time of writing, this cannot be changed via app props but is needed for
# management.endpoints.web.base-path below
#
server.servlet.context-path=/_

server.error.whitelabel.enabled=false

mail.smtpHost=@@smtpHost@@
mail.smtpUser=@@smtpUser@@
mail.smtpPort=@@smtpPort@@
mail.smtpPassword=@@smtpPassword@@
mail.smtpAuth=@@smtpAuth@@
mail.smtpFrom=@@smtpFrom@@
mail.smtpStartTlsEnable=@@smtpStartTlsEnable@@

management.endpoints.web.base-path=/

management.endpoints.enabled-by-default=false
management.endpoint.health.enabled=true
management.endpoint.shutdown.enabled=false

management.endpoints.web.exposure.include=health
management.endpoints.jmx.exposure.exclude=*

management.endpoint.env.keys-to-sanitize=.*user.*,.*pass.*,secret,key,token,.*credentials.*,vcap_services,sun.java.command,.*key-store.*

info.labkey.version=${LABKEY_VERSION}
info.labkey.distribution=${LABKEY_DISTRIBUTION}

server.tomcat.max-threads=50
server.servlet.session.timeout=60m
context.workDirLocation=/work/Tomcat/localhost

## START OF CSP ENFORCE BLOCK (DO NOT CHANGE THIS TEXT)
## CSP Version: e10
csp.enforce=\
    default-src 'self' https: ; \
    connect-src 'self' ${CONNECTION.SOURCES} ; \
    object-src 'none' ; \
    style-src 'self' https: 'unsafe-inline' ${STYLE.SOURCES} ; \
    img-src 'self' https: data: ${IMAGE.SOURCES} ; \
    font-src 'self' data: ${FONT.SOURCES} ; \
    script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-${REQUEST.SCRIPT.NONCE}' ; \
    base-uri 'self' ; \
    upgrade-insecure-requests ;\
    frame-ancestors 'self' ; \
    frame-src 'self' ${FRAME.SOURCES} ; \
    report-uri https://www.labkey.org/admin-contentsecuritypolicyreport.api?${CSP.REPORT.PARAMS} ;
## END OF CSP ENFORCE BLOCK (DO NOT CHANGE THIS TEXT)

## Load optional application.properties if file exists - used for one-off labkey cloud use cases etc.
spring.config.import=optional:file:${LABKEY_HOME}/config/optional.application.properties