189 lines
6.3 KiB
Bash
189 lines
6.3 KiB
Bash
# ----------------------------------------------------------------------------
|
|
# 외부화 설정의 단일 출처. spring-dotenv 가 src/.env 에서 로드합니다
|
|
# (bootRun.workingDir = src/). 각 키의 허용값·결정 근거는 src/README.md 참조.
|
|
# ----------------------------------------------------------------------------
|
|
|
|
# ----- App identity -----
|
|
APP_NAME=ca-skeleton
|
|
SPRING_PROFILES_ACTIVE=local
|
|
|
|
# ----- Runtime safety (StartupSafetyValidator, D8) -----
|
|
APP_ERROR_DETAIL_EXPOSURE_ENABLED=false
|
|
APP_LOG_BODY_CAPTURE_ENABLED=false
|
|
APP_MULTI_INSTANCE_ENABLED=false
|
|
APP_MIGRATION_ON_STARTUP=true
|
|
APP_RATE_LIMIT_ENABLED=false
|
|
APP_RATE_LIMIT_CLIENT_IP_MODE=remote-addr-only
|
|
APP_RATE_LIMIT_PROVIDER=disabled
|
|
APP_RATE_LIMIT_REDIS_KEY_HMAC_SECRET=
|
|
APP_IDEMPOTENCY_TTL=24h
|
|
APP_IDEMPOTENCY_PROVIDER=jdbc
|
|
APP_IDEMPOTENCY_REDIS_KEY_HMAC_SECRET=
|
|
APP_IDEMPOTENCY_REDIS_NAMESPACE_ENVIRONMENT=local
|
|
APP_IDEMPOTENCY_PROCESSING_LEASE=30s
|
|
APP_IDEMPOTENCY_FAILURE_RETENTION=24h
|
|
APP_LEASE_PROVIDER=disabled
|
|
APP_LEASE_REDIS_KEY_HMAC_SECRET=
|
|
APP_LEASE_REDIS_NAMESPACE_ENVIRONMENT=local
|
|
APP_LEASE_REDIS_DRIFT_BUDGET=10ms
|
|
|
|
# ----- Async executor -----
|
|
APP_ASYNC_EXECUTOR_CORE_SIZE=10
|
|
APP_ASYNC_EXECUTOR_MAX_SIZE=50
|
|
APP_ASYNC_EXECUTOR_QUEUE_CAPACITY=200
|
|
|
|
# ----- Optional integration adapters (default: all disabled) -----
|
|
APP_CACHE_CANONICAL_DEFAULT_PROVIDER=disabled
|
|
# Sentinel primary revalidation cadence for canonically active Sentinel roles.
|
|
APP_REDIS_SENTINEL_DISCOVERY_REFRESH_PERIOD=30s
|
|
# Canonical role semantic readiness: refresh no more often than this interval.
|
|
APP_REDIS_SEMANTIC_PROBE_MINIMUM_INTERVAL=5s
|
|
# Fail closed when the last completed semantic observation is older than this bound.
|
|
APP_REDIS_SEMANTIC_PROBE_MAXIMUM_STALENESS=15s
|
|
APP_CACHE_REDIS_ENABLED=false
|
|
APP_CACHE_REDIS_CLIENT_MODE=managed
|
|
APP_CACHE_REDIS_HOST=localhost
|
|
APP_CACHE_REDIS_PORT=6379
|
|
APP_CACHE_REDIS_PASSWORD=
|
|
APP_CACHE_REDIS_KEY_HMAC_SECRET=
|
|
APP_CACHE_REDIS_COMMAND_TIMEOUT=2s
|
|
APP_CACHE_REDIS_MAXIMUM_QUEUED_COMMANDS=8
|
|
APP_CACHE_REDIS_MAXIMUM_IN_FLIGHT_BYTES=16777216
|
|
APP_CACHE_REDIS_NAMESPACE_ENVIRONMENT=local
|
|
APP_CACHE_REDIS_SEMANTIC_REGION=default
|
|
APP_CACHE_REDIS_MAXIMUM_VALUE_BYTES=1048576
|
|
APP_CACHE_REDIS_L1_ENABLED=false
|
|
APP_CACHE_REDIS_L1_MAXIMUM_ENTRIES=10000
|
|
APP_CACHE_REDIS_L1_MAXIMUM_WEIGHT_BYTES=67108864
|
|
APP_CACHE_REDIS_L1_MAXIMUM_ENTRY_WEIGHT_BYTES=1048576
|
|
APP_CACHE_REDIS_L1_TTL=30s
|
|
APP_CACHE_REDIS_L1_GENERATION_RECHECK_INTERVAL=5s
|
|
APP_CACHE_REDIS_L1_INVALIDATION_QUEUE_CAPACITY=1024
|
|
APP_CACHE_DEFAULT_TTL=300s
|
|
APP_CACHE_NEGATIVE_TTL=60s
|
|
APP_MESSAGING_BROKER=
|
|
APP_MESSAGING_KAFKA_BROKERS=
|
|
APP_NOTIFICATION_SLACK_PROVIDER=
|
|
APP_NOTIFICATION_EMAIL_PROVIDER=
|
|
|
|
# ----- Logging: root & app levels -----
|
|
APP_LOG_LEVEL_ROOT=INFO
|
|
APP_LOG_LEVEL_APP=DEBUG
|
|
|
|
# ----- Logging: per-package levels -----
|
|
APP_LOG_LEVEL_SPRING=INFO
|
|
APP_LOG_LEVEL_WEB=INFO
|
|
APP_LOG_LEVEL_SQL=WARN
|
|
|
|
# ----- Logging: file output + rolling -----
|
|
APP_LOG_FILE_ENABLED=false
|
|
APP_LOG_FILE_PATH=logs/ca-skeleton.json
|
|
APP_LOG_FILE_MAX_SIZE=100MB
|
|
APP_LOG_FILE_MAX_HISTORY=14
|
|
APP_LOG_FILE_TOTAL_SIZE_CAP=3GB
|
|
|
|
# ----- Logging: async appender -----
|
|
APP_LOG_ASYNC_ENABLED=true
|
|
APP_LOG_ASYNC_QUEUE_SIZE=512
|
|
APP_LOG_ASYNC_DISCARDING_THRESHOLD=20
|
|
|
|
# ----- Logging: JSON encoder -----
|
|
APP_LOG_JSON_TIMEZONE=UTC
|
|
APP_LOG_JSON_TIMESTAMP_PATTERN=yyyy-MM-dd'T'HH:mm:ss.SSSXXX
|
|
APP_LOG_JSON_INCLUDE_CALLER_DATA=false
|
|
APP_LOG_JSON_LOGGER_NAME_LENGTH=0
|
|
|
|
# ----- Logging: sampling -----
|
|
APP_LOG_SAMPLING_RATE=1.0
|
|
|
|
# ----- Distributed tracing -----
|
|
OTEL_EXPORTER_OTLP_ENDPOINT=
|
|
APP_TRACING_ENABLED=true
|
|
APP_TRACING_SAMPLE_RATE=
|
|
|
|
# ----- Privacy: user_principal pseudonymization -----
|
|
APP_PRIVACY_PSEUDONYMIZATION_SALT=__LOCAL_DEV_pseudonymization_salt
|
|
|
|
# ----- Spring Boot bootstrap -----
|
|
SPRING_BANNER_MODE=console
|
|
SPRING_MAIN_LAZY_INITIALIZATION=false
|
|
SPRING_MAIN_LOG_STARTUP_INFO=true
|
|
SPRING_THREADS_VIRTUAL_ENABLED=true
|
|
|
|
# ----- Jackson: deserialization policy -----
|
|
SPRING_JACKSON_DESER_FAIL_ON_UNKNOWN_PROPERTIES=true
|
|
SPRING_JACKSON_DESER_FAIL_ON_NULL_FOR_PRIMITIVES=true
|
|
SPRING_JACKSON_DESER_FAIL_ON_IGNORED_PROPERTIES=true
|
|
SPRING_JACKSON_DESER_READ_UNKNOWN_ENUM_VALUES_AS_NULL=false
|
|
|
|
# ----- Jackson: serialization policy -----
|
|
SPRING_JACKSON_SER_WRITE_DATES_AS_TIMESTAMPS=false
|
|
|
|
# ----- Server / Tomcat -----
|
|
APP_SERVER_PORT=8080
|
|
APP_SERVER_SHUTDOWN=graceful
|
|
APP_SERVER_SHUTDOWN_TIMEOUT=30s
|
|
APP_SERVER_TOMCAT_MAX_THREADS=200
|
|
APP_SERVER_TOMCAT_MIN_SPARE_THREADS=10
|
|
APP_SERVER_TOMCAT_ACCEPT_COUNT=100
|
|
APP_SERVER_TOMCAT_MAX_CONNECTIONS=8192
|
|
APP_SERVER_TOMCAT_CONNECTION_TIMEOUT=20s
|
|
APP_SERVER_COMPRESSION_ENABLED=true
|
|
APP_SERVER_COMPRESSION_MIN_RESPONSE_SIZE=1024
|
|
APP_SERVER_FORWARD_HEADERS_STRATEGY=framework
|
|
APP_SERVER_ERROR_INCLUDE_STACKTRACE=never
|
|
APP_SERVER_ERROR_INCLUDE_MESSAGE=never
|
|
|
|
# ----- Presentation -----
|
|
PRESENTATION_API_BASE_PATH=/api
|
|
|
|
# ----- Auth (OIDC resource server) -----
|
|
APP_SECURITY_AUTH_MODE=jwt
|
|
APP_SECURITY_JWT_ISSUER=http://localhost:8081/realms/ca-skeleton
|
|
APP_SECURITY_JWT_AUDIENCE=ca-skeleton-api
|
|
SECURITY_PUBLIC_PATHS=/api/healthcheck
|
|
APP_SESSION_COOKIE_NAME=CA_SESSION
|
|
APP_SESSION_COOKIE_SECURE=true
|
|
APP_SESSION_COOKIE_HTTP_ONLY=true
|
|
APP_SESSION_COOKIE_SAME_SITE=Lax
|
|
APP_SESSION_COOKIE_PATH=/
|
|
APP_SESSION_CSRF_COOKIE_NAME=XSRF-TOKEN
|
|
APP_SESSION_CSRF_HEADER_NAME=X-XSRF-TOKEN
|
|
APP_SESSION_REDIS_KEY_HMAC_SECRET=
|
|
APP_SESSION_REDIS_NAMESPACE_ENVIRONMENT=local
|
|
APP_SESSION_IDLE_TIMEOUT=30m
|
|
APP_SESSION_ABSOLUTE_LIFETIME=8h
|
|
APP_SESSION_TOUCH_INTERVAL=1m
|
|
APP_SESSION_TOMBSTONE_TTL=5m
|
|
APP_SESSION_MAXIMUM_ENVELOPE_BYTES=32768
|
|
APP_SESSION_MAXIMUM_ATTRIBUTES=64
|
|
APP_SESSION_MAXIMUM_SCALAR_BYTES=8192
|
|
|
|
# ----- CORS -----
|
|
APP_SECURITY_CORS_ENABLED=true
|
|
APP_SECURITY_CORS_ORIGINS=http://localhost:3000
|
|
APP_SECURITY_CORS_ALLOWED_METHODS=
|
|
APP_SECURITY_CORS_ALLOWED_HEADERS=*
|
|
APP_SECURITY_CORS_ALLOW_CREDENTIALS=true
|
|
APP_SECURITY_CORS_MAX_AGE=3600
|
|
|
|
# ----- Database (Postgres) -----
|
|
APP_DATASOURCE_URL=jdbc:postgresql://localhost:5433/ca_skeleton
|
|
APP_DATASOURCE_USERNAME=ca_skeleton
|
|
APP_DATASOURCE_PASSWORD=ca_skeleton
|
|
APP_DATASOURCE_DRIVER=org.postgresql.Driver
|
|
APP_DATASOURCE_DDL_AUTO=update
|
|
APP_DATASOURCE_SHOW_SQL=false
|
|
APP_DATASOURCE_FORMAT_SQL=false
|
|
APP_DATASOURCE_OPEN_IN_VIEW=false
|
|
|
|
# ----- Database: HikariCP connection pool -----
|
|
APP_DATASOURCE_POOL_MAX_SIZE=10
|
|
APP_DATASOURCE_POOL_MIN_IDLE=2
|
|
APP_DATASOURCE_CONNECTION_TIMEOUT=30000
|
|
APP_DATASOURCE_POOL_IDLE_TIMEOUT=600000
|
|
APP_DATASOURCE_POOL_MAX_LIFETIME=1800000
|
|
|
|
# ----- Management / Actuator -----
|
|
MANAGEMENT_SERVER_PORT=9001
|