Nacos2.2.2开启鉴权配置

时间:2025-02-14 22:27:45
# # Copyright 1999-2021 Alibaba Group Holding Ltd. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # /licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # #*************** Spring Boot Related Configurations ***************# ### Default web context path: =/nacos ### Include message field -message=ALWAYS ### Default web server port: =8848 #*************** Network Related Configurations ***************# ### If prefer hostname over ip for Nacos server addresses in : # -hostname-over-ip=false ### Specify local server's IP: # -address= #*************** Config Module Related Configurations ***************# ### If use MySQL as datasource: ### Deprecated configuration property, it is recommended to use `` replaced. =mysql # =mysql ### Count of DB: =1 ### Connect URL of DB: .0=jdbc:mysql://127.0.0.1:3306/nacos?characterEncoding=utf8&connectTimeout=1000&socketTimeout=3000&autoReconnect=true&useUnicode=true&useSSL=false&serverTimezone=UTC .0=root .0=123456 ### Connection pool configuration: hikariCP =30000 =10000 =20 =2 #*************** Naming Module Related Configurations ***************# ### If enable data warmup. If set to false, the server would accept request without local data preparation: # =true ### If enable the instance auto expiration, kind like of health check of instance: # =true ### Add in 2.0.0 ### The interval to clean empty service, unit: milliseconds. # =60000 ### The expired time to clean empty service, unit: milliseconds. # -time=60000 ### The interval to clean expired metadata, unit: milliseconds. # =5000 ### The expired time to clean metadata, unit: milliseconds. # -time=60000 ### The delay time before push task to execute from service changed, unit: milliseconds. # =500 ### The timeout for push task execute, unit: milliseconds. # =5000 ### The delay time for retrying failed push task, unit: milliseconds. # =1000 ### Since 2.0.3 ### The expired time for inactive client, unit: milliseconds. # =180000 #*************** CMDB Module Related Configurations ***************# ### The interval to dump external CMDB in seconds: # =3600 ### The interval of polling data change event in seconds: # =10 ### The interval of loading labels in seconds: # =300 ### If turn on data loading task: # =false #*************** Metrics Related Configurations ***************# ### Metrics for prometheus #=* ### Metrics for elastic search =false #=http://localhost:9200 ### Metrics for influx =false #=springboot #=http://localhost:8086 #-create-db=true #=one #=true #*************** Access Log Related Configurations ***************# ### If turn on the access log: =true ### The access log pattern: =%h %l %u %t "%r" %s %b %D %{User-Agent}i %{Request-Source}i ### The directory of access log: =file:. #*************** Access Control Related Configurations ***************# ### If enable spring security, this option is deprecated in 1.2.0: #=false ### The ignore urls of auth =/,/error,/**/*.css,/**/*.js,/**/*.html,/**/*.map,/**/*.svg,/**/*.png,/**/*.ico,/console-ui/public/**,/v1/auth/**,/v1/console/health/**,/actuator/**,/v1/console/server/** ### The auth system to use, currently only 'nacos' and 'ldap' is supported: =nacos ### If turn on auth system: =true ### Turn on/off caching of auth information. By turning on this switch, the update of auth information would have a 15 seconds delay. =true ### Since 1.4.1, Turn on/off white auth for user-agent: nacos-server, only for upgrade from old version. =false ### Since 1.4.1, worked when =true and =false. ### The two properties is the white list for auth and used by identity the request from other server. =example =example ### worked when =nacos ### The token expiration in seconds: =false =18000 ### The default token (Base64 String): =VGhpc0lzTXlDdXN0b21TZWNyZXRLZXkwMTIzNDU2Nzg= ### worked when =ldap,{0} is Placeholder,replace login username #=ldap://localhost:389 #=dc=example,dc=org #=cn=admin,${} #=admin #=cn={0},dc=example,dc=org #=uid #=true #*************** Istio Related Configurations ***************# ### If turn on the MCP server: =false #*************** Core Related Configurations ***************# ### set the WorkerID manually # -id= ### Member-MetaData # = # = # = ### MemberLookup ### Addressing pattern category, If set, the priority is highest # =[file,address-server] ## Set the cluster list with a configuration file or command-line argument # =192.168.16.101:8847?raft_port=8807,192.168.16.101?raft_port=8808,192.168.16.101:8849?raft_port=8809 ## for AddressServerMemberLookup # Maximum number of retries to query the address server upon initialization # =5 ## Server domain name address of [address-server] mode # = ## Server port of [address-server] mode # =8080 ## Request address of [address-server] mode # =/nacos/serverlist #*************** JRaft Related Configurations ***************# ### Sets the Raft cluster election timeout, default value is 5 second # .election_timeout_ms=5000 ### Sets the amount of time the Raft snapshot will execute periodically, default is 30 minute # .snapshot_interval_secs=30 ### raft internal worker threads # .core_thread_num=8 ### Number of threads required for raft business request processing # .cli_service_thread_num=4 ### raft linear read strategy. Safe linear reads are used by default, that is, the Leader tenure is confirmed by heartbeat # .read_index_type=ReadOnlySafe ### rpc request timeout, default 5 seconds # .rpc_request_timeout_ms=5000 #*************** Distro Related Configurations ***************# ### Distro data sync delay time, when sync task delayed, task will be merged for same data key. Default 1 second. # =1000 ### Distro data sync timeout for one sync data, default 3 seconds. # =3000 ### Distro data sync retry delay time when sync data failed or timeout, same behavior with delayMs, default 3 seconds. # =3000 ### Distro data verify interval time, verify synced data whether expired for a interval. Default 5 seconds. # =5000 ### Distro data verify timeout for one verify, default 3 seconds. # =3000 ### Distro data load retry delay when load snapshot data failed, default 30 seconds. # =30000 ### enable to support prometheus service discovery #=true ### Since 2.3 #*************** Grpc Configurations ***************# ## sdk grpc(between nacos server and client) configuration ## Sets the maximum message size allowed to be received on the server. #-inbound-message-size=10485760 ## Sets the time(milliseconds) without read activity before sending a keepalive ping. The typical default is two hours. #-alive-time=7200000 ## Sets a time(milliseconds) waiting for read activity after sending a keepalive ping. Defaults to 20 seconds. #-alive-timeout=20000 ## Sets a time(milliseconds) that specify the most aggressive keep-alive time clients are permitted to configure. The typical default is 5 minutes #-keep-alive-time=300000 ## cluster grpc(inside the nacos server) configuration #-inbound-message-size=10485760 ## Sets the time(milliseconds) without read activity before sending a keepalive ping. The typical default is two hours. #-alive-time=7200000 ## Sets a time(milliseconds) waiting for read activity after sending a keepalive ping. Defaults to 20 seconds. #-alive-timeout=20000 ## Sets a time(milliseconds) that specify the most aggressive keep-alive time clients are permitted to configure. The typical default is 5 minutes #-keep-alive-time=300000