1
# JumpServer configuration file example.
2
#
3
# If you don't understand the purpose, you can skip modifying this configuration file, the system will automatically fill in
4
# Complete parameter documentation https://docs.jumpserver.org/zh/v3/guide/env/
5

6
################################# Image Configuration #################################
7
#
8
# The connection to docker.io in China will timeout or the download speed will be slow, enable this option to use Huawei Cloud image acceleration
9
# Replace the old version DOCKER_IMAGE_PREFIX
10
#
11
# DOCKER_IMAGE_MIRROR=1
12

13
# Image pull policy Always, IfNotPresent
14
# Always means that the latest image will be pulled every time, IfNotPresent means that the image will be pulled only if it does not exist locally
15
#
16
# IMAGE_PULL_POLICY=Always
17

18
############################## Installation Configuration #############################
19
#
20
# JumpServer database persistence directory, by default, recordings, task logs are in this directory
21
# Please modify according to the actual situation, the database file (.sql) and configuration file backed up during the upgrade will also be saved to this directory
22
#
23
VOLUME_DIR=/data/jumpserver
24

25
# Encryption key, please ensure that SECRET_KEY is consistent with the old environment when migrating, do not use special strings
26
# (*) Warning: Keep this value secret.
27
# (*) Do not disclose SECRET_KEY to anyone
28
#
29
SECRET_KEY=
30

31
# The token used by the component to register with core, please keep BOOTSTRAP_TOKEN consistent with the old environment when migrating,
32
# Do not use special strings
33
# (*) Warning: Keep this value secret.
34
# (*) Do not disclose BOOTSTRAP_TOKEN to anyone
35
#
36
BOOTSTRAP_TOKEN=
37

38
# Log level INFO, WARN, ERROR
39
#
40
LOG_LEVEL=ERROR
41

42
# The network segment used by the JumpServer container, please do not conflict with the existing network, modify according to the actual situation
43
#
44
DOCKER_SUBNET=192.168.250.0/24
45

46
# ipv6 nat, no need to enable under normal circumstances
47
# If the host does not support ipv6, enabling this option will prevent the real client ip address from being obtained
48
#
49
USE_IPV6=0
50
DOCKER_SUBNET_IPV6=fc00:1010:1111:200::/64
51

52
################################# DB Configuration ####################################
53
# For external databases, you need to enter the correct database information, the system will automatically handle the built-in database
54
# (*) The password part must not contain single quotes and double quotes
55
#
56
DB_ENGINE=postgresql
57
DB_HOST=postgresql
58
DB_PORT=5432
59
DB_USER=postgres
60
DB_PASSWORD=
61
DB_NAME=jumpserver
62

63
# If external MySQL needs to enable TLS/SSL connection, refer to https://docs.jumpserver.org/zh/v3/installation/security_setup/mysql_ssl/
64
#
65
# DB_USE_SSL=true
66

67
################################# Redis Configuration #################################
68
# For external Redis, please enter the correct Redis information, the system will automatically handle the built-in Redis
69
# (*) The password part must not contain single quotes and double quotes
70
#
71
REDIS_HOST=redis
72
REDIS_PORT=6379
73
REDIS_PASSWORD=
74

75
# If you are using external Redis Sentinel, please manually fill in the following content
76
#
77
# REDIS_SENTINEL_HOSTS=mymaster/192.168.100.1:26379,192.168.100.1:26380,192.168.100.1:26381
78
# REDIS_SENTINEL_PASSWORD=your_sentinel_password
79
# REDIS_PASSWORD=your_redis_password
80
# REDIS_SENTINEL_SOCKET_TIMEOUT=5
81

82
# If external Redis needs to enable TLS/SSL connection, refer to https://docs.jumpserver.org/zh/v3/installation/security_setup/redis_ssl/
83
#
84
# REDIS_USE_SSL=true
85

86
################################# Access Configuration ################################
87
# The service port provided to the outside, if it conflicts with the existing service, please modify it yourself
88
#
89
HTTP_PORT=80
90

91
################################# HTTPS Configuration #################################
92
# Refer to https://docs.jumpserver.org/zh/v3/installation/proxy/ for configuration
93
#
94
# HTTPS_PORT=443
95
# SERVER_NAME=your_domain_name
96
# SSL_CERTIFICATE=your_cert
97
# SSL_CERTIFICATE_KEY=your_cert_key
98
#
99

100
# Nginx file upload and download size limit
101
#
102
CLIENT_MAX_BODY_SIZE=4096m
103

104
################################# Component Configuration #############################
105
# Component registration use, by default, register to the core container, the cluster environment needs to be modified to the cluster vip address
106
#
107
CORE_HOST=http://core:8080
108
PERIOD_TASK_ENABLED=true
109

110
# Core Session definition,
111
# SESSION_COOKIE_AGE indicates how many seconds the session expires after idling,
112
# SESSION_EXPIRE_AT_BROWSER_CLOSE=true means that the session expires as soon as the browser is closed
113
#
114
# SESSION_COOKIE_AGE=86400
115
SESSION_EXPIRE_AT_BROWSER_CLOSE=false
116

117
# Trusted DOMAINS definition,
118
# Define the trusted access IP, please modify according to the actual situation, if it is a public IP, please change to the corresponding public IP,
119
# DOMAINS="demo.jumpserver.org:443"
120
# DOMAINS="172.17.200.191:80"
121
# DOMAINS="demo.jumpserver.org:443,172.17.200.191:80"
122
DOMAINS=
123

124
# Configure the components that do not need to be started, by default all components will be started, if you do not need a certain component, you can set {component name}_ENABLED to 0 to turn it off
125
# CORE_ENABLED=0
126
# CELERY_ENABLED=0
127
# KOKO_ENABLED=0
128
# LION_ENABLED=0
129
# CHEN_ENABLED=0
130
# WEB_ENABLED=0
131

132
# Lion enables font smoothing to optimize the experience
133
#
134
JUMPSERVER_ENABLE_FONT_SMOOTHING=true
135

136
################################# XPack Configuration #################################
137
# XPack package, invalid setting in open source version
138
#
139
SSH_PORT=2222
140
RDP_PORT=3389
141
XRDP_PORT=3390
142
MAGNUS_MYSQL_PORT=33061
143
MAGNUS_MARIADB_PORT=33062
144
MAGNUS_REDIS_PORT=63790
145
MAGNUS_POSTGRESQL_PORT=54320
146
MAGNUS_SQLSERVER_PORT=14330
147
MAGNUS_ORACLE_PORTS=30000-30030
148

149
################################## Other Configuration ################################
150
# The terminal uses the host HOSTNAME as the identifier, automatically generated during the first installation
151
#
152
SERVER_HOSTNAME=${HOSTNAME}
153

154
# Use built-in SLB, if the client IP address obtained by the Web page is not correct, please set USE_LB to 0
155
# When USE_LB is set to 1, use the configuration proxy_set_header X-Forwarded-For $remote_addr
156
# When USE_LB is set to 0, use the configuration proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for
157
USE_LB=1
158

159
# The current running version number of JumpServer, automatically generated after installation and upgrade
160
#
161
TZ=Asia/Shanghai
162
CURRENT_VERSION=