1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
# Baseline config for a local or edge-terminated HTTP deployment.
# Keep this file minimal: values that only matter for other modes stay commented.
[]
= "0.0.0.0:4437" # host:port
[]
= 104857600 # total in-process payload bytes
= 10485760 # max bytes retained per stream
= 1024 # max UTF-8 bytes in a stream name
= 8 # max "/"-separated path segments
[]
= "*" # "*" or comma-separated origins
= "/v1/stream"
# Set to true to acknowledge wildcard CORS and suppress the warning/error.
# Required only if you intentionally want `cors_origins = "*"` in production.
# allow_wildcard_cors = false
[]
= "memory" # memory | file-fast | file-durable | acid
# data_dir = "./data/streams" # required for file-fast, file-durable, or acid
# acid_shard_count = 16 # acid only; power of two in 1..=256
# acid_backend = "file" # acid only; file | in-memory
[]
= "http" # http | tls | mtls
[]
= ["http1"] # http1 | http2 (http2 requires tls or mtls)
[]
= 30 # GET ?live=long-poll timeout
= 60 # 0 disables forced reconnects
# [transport.tls]
# min_version = "1.2" # tls/mtls only
# max_version = "1.3" # tls/mtls only
# alpn_protocols = ["http/1.1"] # auto-derived from transport.http.versions; h2 listed first when both enabled
# cert_path = "/etc/durable-streams/tls/server.crt" # tls/mtls only
# key_path = "/etc/durable-streams/tls/server.key" # tls/mtls only
# client_ca_path = "/etc/durable-streams/tls/client-ca.crt" # mtls only
[]
= false # set true only when the backend should trust a proxy
= "none" # none | x-forwarded | forwarded
= [] # IPs or CIDRs for trusted proxy peers
[]
= "none" # none | header; header requires transport.mode = "mtls"
# require_tls = true # only used with mode = "header"
# header_name = "x-client-identity" # only used with mode = "header"
[]
= "info"