mirror of
https://github.com/DeBrosOfficial/orama.git
synced 2026-03-17 12:46:57 +00:00
114 lines
3.2 KiB
YAML
114 lines
3.2 KiB
YAML
node:
|
|
id: "{{.NodeID}}"
|
|
listen_addresses:
|
|
- "/ip4/0.0.0.0/tcp/{{.P2PPort}}"
|
|
data_dir: "{{.DataDir}}"
|
|
max_connections: 50
|
|
domain: "{{.Domain}}"
|
|
|
|
database:
|
|
data_dir: "{{.DataDir}}/rqlite"
|
|
replication_factor: 3
|
|
shard_count: 16
|
|
max_database_size: 1073741824
|
|
backup_interval: "24h"
|
|
rqlite_port: {{.RQLiteHTTPPort}}
|
|
rqlite_raft_port: {{.RQLiteRaftInternalPort}}
|
|
rqlite_join_address: "{{.RQLiteJoinAddress}}"
|
|
{{if .NodeCert}}# Node-to-node TLS encryption for Raft communication (direct RQLite TLS on port 7002)
|
|
node_cert: "{{.NodeCert}}"
|
|
node_key: "{{.NodeKey}}"
|
|
{{if .NodeCACert}}node_ca_cert: "{{.NodeCACert}}"
|
|
{{end}}{{if .NodeNoVerify}}node_no_verify: true
|
|
{{end}}{{end}}cluster_sync_interval: "30s"
|
|
peer_inactivity_limit: "24h"
|
|
min_cluster_size: 1
|
|
ipfs:
|
|
cluster_api_url: "http://localhost:{{.ClusterAPIPort}}"
|
|
api_url: "http://localhost:{{.IPFSAPIPort}}"
|
|
timeout: "60s"
|
|
replication_factor: 3
|
|
enable_encryption: true
|
|
|
|
discovery:
|
|
bootstrap_peers:
|
|
{{range .BootstrapPeers}} - "{{.}}"
|
|
{{end}}
|
|
discovery_interval: "15s"
|
|
bootstrap_port: {{.P2PPort}}
|
|
http_adv_address: "{{.HTTPAdvAddress}}"
|
|
raft_adv_address: "{{.RaftAdvAddress}}"
|
|
node_namespace: "default"
|
|
|
|
security:
|
|
enable_tls: false
|
|
|
|
logging:
|
|
level: "info"
|
|
format: "console"
|
|
|
|
# Built-in TURN server for WebRTC NAT traversal
|
|
turn_server:
|
|
enabled: true
|
|
listen_addr: "0.0.0.0:3478"
|
|
public_ip: "" # Auto-detect if empty, or set to your public IP
|
|
realm: "orama.network"
|
|
min_port: 49152
|
|
max_port: 65535
|
|
|
|
http_gateway:
|
|
enabled: true
|
|
listen_addr: "{{if .EnableHTTPS}}:{{.HTTPSPort}}{{else}}:{{.UnifiedGatewayPort}}{{end}}"
|
|
node_name: "{{.NodeID}}"
|
|
|
|
{{if .EnableHTTPS}}https:
|
|
enabled: true
|
|
domain: "{{.Domain}}"
|
|
auto_cert: true
|
|
cache_dir: "{{.TLSCacheDir}}"
|
|
http_port: {{.HTTPPort}}
|
|
https_port: {{.HTTPSPort}}
|
|
email: "admin@{{.Domain}}"
|
|
{{end}}
|
|
|
|
{{if .EnableHTTPS}}sni:
|
|
enabled: true
|
|
listen_addr: ":{{.RQLiteRaftPort}}"
|
|
cert_file: "{{.TLSCacheDir}}/{{.Domain}}.crt"
|
|
key_file: "{{.TLSCacheDir}}/{{.Domain}}.key"
|
|
routes:
|
|
# Note: Raft traffic bypasses SNI gateway - RQLite uses native TLS on port 7002
|
|
ipfs.{{.Domain}}: "localhost:4101"
|
|
ipfs-cluster.{{.Domain}}: "localhost:9098"
|
|
olric.{{.Domain}}: "localhost:3322"
|
|
{{end}}
|
|
|
|
# Full gateway configuration (for API, auth, pubsub, and internal service routing)
|
|
client_namespace: "default"
|
|
rqlite_dsn: "http://localhost:{{.RQLiteHTTPPort}}"
|
|
olric_servers:
|
|
- "127.0.0.1:3320"
|
|
olric_timeout: "10s"
|
|
ipfs_cluster_api_url: "http://localhost:{{.ClusterAPIPort}}"
|
|
ipfs_api_url: "http://localhost:{{.IPFSAPIPort}}"
|
|
ipfs_timeout: "60s"
|
|
|
|
# Routes for internal service reverse proxy (kept for backwards compatibility but not used by full gateway)
|
|
routes: {}
|
|
|
|
# TURN/STUN URLs returned to clients (points to built-in TURN server)
|
|
turn:
|
|
shared_secret: "dev-secret-12345"
|
|
ttl: "24h"
|
|
stun_urls:
|
|
- "stun:::3478"
|
|
turn_urls:
|
|
- "turn:::3478?transport=udp"
|
|
|
|
# SFU (Selective Forwarding Unit) configuration for WebRTC group calls
|
|
sfu:
|
|
enabled: true
|
|
max_participants: 10
|
|
media_timeout: "30s"
|
|
ice_servers: [] # Additional ICE servers beyond TURN config (optional)
|