# pcsd configuration file

# Set PCSD_DEBUG to true for advanced pcsd debugging information
PCSD_DEBUG=false
# Set DISABLE_GUI to true to disable GUI frontend in pcsd
PCSD_DISABLE_GUI=false
# Set web UI sesions lifetime in seconds
PCSD_SESSION_LIFETIME=3600
# List of IP addresses pcsd should bind to delimited by ',' character
#PCSD_BIND_ADDR='::'
# Set port on which pcsd should be available
#PCSD_PORT=2224

# If set to true:
# - When creating new cluster, pcs generates new SSL certificate for pcsd using
#   the name of the first cluster node as CN and sends the certificate to all
#   nodes in the new cluster. Thus all pcsds in the cluster have the same SSL
#   certificate.
# - When adding new node to an existing cluster, pcs sends pcsd's SSL
#   certificate from the local node to the new node. Thus pcsd on the new node
#   has the same SSL certificate as the local node.
# If set to false, the behavior described above is disabled.
#PCSD_SSL_CERT_SYNC_ENABLED=false

# SSL settings
# set SSL options delimited by ',' character
# list of valid options can be obtained by running
# python -c 'import ssl; print("\n".join([o for o in dir(ssl) if o.startswith("OP_")]))'
# it is also possible to use OP_NO_RENEGOTIATION even if the previous script don't list it
# it depends on openssl version whether OP_NO_RENEGOTIATION has an effect or not
#PCSD_SSL_OPTIONS='OP_NO_COMPRESSION,OP_CIPHER_SERVER_PREFERENCE,OP_SINGLE_DH_USE,OP_SINGLE_ECDH_USE,OP_NO_SSLv2,OP_NO_SSLv3,OP_NO_TLSv1,OP_NO_TLSv1_1,OP_NO_RENEGOTIATION'
# set SSL ciphers
#PCSD_SSL_CIPHERS='DEFAULT:!RC4:!3DES:@STRENGTH'

# Proxy settings for pcsd node to node communication
# See ENVIRONMENT section in curl(1) man page for more details.
# Proxy address
#HTTPS_PROXY=
# Do not use proxy for specified hostnames
#NO_PROXY=

# These environment variables set the maximum query string bytesize and the
# maximum number of query parameters that pcsd will attempt to parse.
# See CVE-2025-46727 for details.
#RACK_QUERY_PARSER_BYTESIZE_LIMIT=4194304
#RACK_QUERY_PARSER_PARAMS_LIMIT=4096

# Do not change
RACK_ENV=production
PCSD_BIND_ADDR='172.17.0.100'
