OC_LOG_LEVEL
STORAGE_SYSTEM_LOG_LEVEL | 1.0.0 | string | The log level. Valid values are: 'panic', 'fatal', 'error', 'warn', 'info', 'debug', 'trace'. | "error" |
STORAGE_SYSTEM_DEBUG_ADDR | 1.0.0 | string | Bind address of the debug server, where metrics, health, config and debug endpoints will be exposed. | "127.0.0.1:9217" |
STORAGE_SYSTEM_DEBUG_TOKEN | 1.0.0 | string | Token to secure the metrics endpoint | "" |
STORAGE_SYSTEM_DEBUG_PPROF | 1.0.0 | bool | Enables pprof, which can be used for profiling | "false" |
STORAGE_SYSTEM_DEBUG_ZPAGES | 1.0.0 | bool | Enables zpages, which can be used for collecting and viewing in-memory traces. | "false" |
STORAGE_SYSTEM_GRPC_ADDR | 1.0.0 | string | The bind address of the GRPC service. | "127.0.0.1:9215" |
OC_GRPC_PROTOCOL
STORAGE_SYSTEM_GRPC_PROTOCOL | 1.0.0 | string | The transport protocol of the GPRC service. | "tcp" |
STORAGE_SYSTEM_HTTP_ADDR | 1.0.0 | string | The bind address of the HTTP service. | "127.0.0.1:9216" |
STORAGE_SYSTEM_HTTP_PROTOCOL | 1.0.0 | string | The transport protocol of the HTTP service. | "tcp" |
OC_JWT_SECRET
STORAGE_SYSTEM_JWT_SECRET | 1.0.0 | string | The secret to mint and validate jwt tokens. | "" |
OC_REVA_GATEWAY | 1.0.0 | string | The CS3 gateway endpoint. | "eu.opencloud.api.gateway" |
OC_GRPC_CLIENT_TLS_MODE | 1.0.0 | string | TLS mode for grpc connection to the go-micro based grpc services. Possible values are 'off', 'insecure' and 'on'. 'off': disables transport security for the clients. 'insecure' allows using transport security, but disables certificate verification (to be used with the autogenerated self-signed certificates). 'on' enables transport security, including server certificate verification. | "" |
OC_GRPC_CLIENT_TLS_CACERT | 1.0.0 | string | Path/File name for the root CA certificate (in PEM format) used to validate TLS server certificates of the go-micro based grpc services. | "" |
OC_SYSTEM_USER_ID | 1.0.0 | string | ID of the OpenCloud storage-system system user. Admins need to set the ID for the STORAGE-SYSTEM system user in this config option which is then used to reference the user. Any reasonable long string is possible, preferably this would be an UUIDv4 format. | "" |
OC_SYSTEM_USER_API_KEY | 1.0.0 | string | API key for the STORAGE-SYSTEM system user. | "" |
STORAGE_SYSTEM_SKIP_USER_GROUPS_IN_TOKEN | 1.0.0 | bool | Disables the loading of user's group memberships from the reva access token. | "false" |
OC_CACHE_STORE
STORAGE_SYSTEM_CACHE_STORE | 1.0.0 | string | The type of the cache store. Supported values are: 'memory', 'redis-sentinel', 'nats-js-kv', 'noop'. See the text description for details. | "memory" |
OC_CACHE_STORE_NODES
STORAGE_SYSTEM_CACHE_STORE_NODES | 1.0.0 | []string | A list of nodes to access the configured store. This has no effect when 'memory' store is configured. Note that the behaviour how nodes are used is dependent on the library of the configured store. See the Environment Variable Types description for more details. | "[127.0.0.1:9233]" |
OC_CACHE_DATABASE | 1.0.0 | string | The database name the configured store should use. | "storage-system" |
OC_CACHE_TTL
STORAGE_SYSTEM_CACHE_TTL | 1.0.0 | Duration | Default time to live for user info in the user info cache. Only applied when access tokens has no expiration. See the Environment Variable Types description for more details. | "24h0m0s" |
OC_CACHE_DISABLE_PERSISTENCE
STORAGE_SYSTEM_CACHE_DISABLE_PERSISTENCE | 1.0.0 | bool | Disables persistence of the cache. Only applies when store type 'nats-js-kv' is configured. Defaults to false. | "false" |
OC_CACHE_AUTH_USERNAME
STORAGE_SYSTEM_CACHE_AUTH_USERNAME | 1.0.0 | string | Username for the configured store. Only applies when store type 'nats-js-kv' is configured. | "" |
OC_CACHE_AUTH_PASSWORD
STORAGE_SYSTEM_CACHE_AUTH_PASSWORD | 1.0.0 | string | Password for the configured store. Only applies when store type 'nats-js-kv' is configured. | "" |
OC_CACHE_ENABLE_TLS
STORAGE_SYSTEM_CACHE_ENABLE_TLS | next | bool | Enable TLS for the connection to file metadata cache. | "false" |
OC_INSECURE
OC_CACHE_TLS_INSECURE
STORAGE_SYSTEM_CACHE_TLS_INSECURE | next | bool | Whether to verify the server TLS certificates. | "false" |
OC_CACHE_TLS_ROOT_CA_CERTIFICATE
STORAGE_SYSTEM_CACHE_TLS_ROOT_CA_CERTIFICATE | next | string | The root CA certificate used to validate the server's TLS certificate. If provided STORAGE_SYSTEM_CACHE_TLS_INSECURE will be seen as false. | "" |
STORAGE_SYSTEM_DRIVER | 1.0.0 | string | The driver which should be used by the service. The only supported driver is 'decomposed'. For backwards compatibility reasons it's also possible to use the 'ocis' driver and configure it using the 'decomposed' options. | "decomposed" |
STORAGE_SYSTEM_OC_ROOT | 1.0.0 | string | Path for the directory where the STORAGE-SYSTEM service stores it's persistent data. If not defined, the root directory derives from $OC_BASE_DATA_PATH/storage. | "/var/lib/opencloud/storage/metadata" |
STORAGE_SYSTEM_OC_MAX_ACQUIRE_LOCK_CYCLES | 1.0.0 | int | When trying to lock files, OpenCloud will try this amount of times to acquire the lock before failing. After each try it will wait for an increasing amount of time. Values of 0 or below will be ignored and the default value of 20 will be used. | "20" |
STORAGE_SYSTEM_OC_LOCK_CYCLE_DURATION_FACTOR | 1.0.0 | int | When trying to lock files, OpenCloud will multiply the cycle with this factor and use it as a millisecond timeout. Values of 0 or below will be ignored and the default value of 30 will be used. | "30" |
STORAGE_SYSTEM_DATA_SERVER_URL | 1.0.0 | string | URL of the data server, needs to be reachable by other services using this service. | "http://localhost:9216/data" |