1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
|
options:
servername:
type: string
default: ''
description: ServerName for vhost, defaults to the units public-address
vhost_http_template:
type: string
default: ''
description: Apache vhost template (base64 encoded).
vhost_https_template:
type: string
default: ''
description: Apache vhost template (base64 encoded).
vhost_template_vars:
type: string
default: ''
description: Additional custom variables for the vhost templating, in python dict format
enable_modules:
type: string
default: ''
description: List of modules to enable
disable_modules:
type: string
default: 'status autoindex'
description: List of modules to disable
config_change_command:
type: string
default: "reload"
description: |
The command to run whenever config has changed. Accepted values are
"reload" or "restart" - any other value will mean neither is executed
after a config change (which may be desired, if you're running a
production server and would rather handle these out of band). Note:
some variables like the mpm settings require a restart to go into effect.
mpm_type:
type: string
default: 'worker'
description: worker or prefork
ssl_keylocation:
type: string
default: ''
description: |
Name and location of ssl keyfile in charm/data directory.
If not found, will ignore. Basename of this file will be used
as the basename of the key rooted at /etc/ssl/private. Can
be used in conjuntion with the ssl_key parameter to specify
the key as a configuration setting.
ssl_certlocation:
type: string
default: ''
description: |
Name and location of ssl certificate in charm/data directory.
If not found, will ignore. Basename of this file will be used
as the basename of the cert rooted at /etc/ssl/certs. Can
be used in conjunction with the ssl_cert parameter to specify
the cert as a configuration setting.
ssl_chainlocation:
type: string
default: ''
description: |
Name and location of the ssl chain file. Basename of this file
will be used as the basename of the chain file rooted at
/etc/ssl/certs.
lb_balancer_timeout:
type: int
default: 60
description: >
How long the backends in mod_proxy_balancer will timeout, in seconds
mpm_startservers:
type: int
default: 2
description: Add desc
mpm_minsparethreads:
type: int
default: 25
description: Add desc
mpm_maxsparethreads:
type: int
default: 75
description: Add desc
mpm_threadlimit:
type: int
default: 64
description: Add desc
mpm_threadsperchild:
type: int
default: 64
description: Add desc
mpm_serverlimit:
type: int
default: 128
description: Add desc
mpm_maxclients:
type: int
default: 2048
description: Add desc
mpm_maxrequestsperchild:
type: int
default: 0
description: Add desc
nagios_context:
default: "juju"
type: string
description: >
Used by the nrpe-external-master subordinate charm.
A string that will be prepended to instance name to set the host name
in nagios. So for instance the hostname would be something like:
juju-postgresql-0
If you're running multiple environments with the same services in them
this allows you to differentiate between them.
nagios_servicegroups:
default: ""
type: string
description: >
A comma-separated list of nagios servicegroups.
If left empty, the nagios_context will be used as the servicegroup
nagios_check_http_params:
default: ""
type: string
description: The parameters to pass to the nrpe plugin check_http.
logrotate_rotate:
type: string
description: daily, weekly, monthly, or yearly?
default: "daily"
logrotate_count:
type: int
description: The number of days we want to retain logs for
default: 365
logrotate_dateext:
type: boolean
description: >
Use daily extension like YYYMMDD instead of simply adding a number
default: True
package_status:
default: "install"
type: "string"
description: >
The status of service-affecting packages will be set to this value in the dpkg database.
Useful valid values are "install" and "hold".
use_rsyslog:
type: boolean
description: >-
Change logging behaviour to log both access and error logs via rsyslog
default: False
ssl_cert:
type: string
description: |
base64 encoded server certificate. If the keyword 'SELFSIGNED'
is used, the certificate and key will be autogenerated as
self-signed.
default: ''
ssl_key:
type: string
description: |
base64 encoded server certificate key. If ssl_cert is
specified as SELFSIGNED, this will be ignored.
default: ''
ssl_chain:
type: string
description: |
base64 encoded chain certificates file. If ssl_cert is
specified as SELFSIGNED, this will be ignored.
default: ''
ssl_protocol:
type: string
description: SSL Protocols to enable.
default: "ALL -SSLv2 -SSLv3"
ssl_honor_cipher_order:
type: string
description: Enable server cipher suite preference.
default: "On"
ssl_cipher_suite:
type: string
description: List of server cipher suites.
default: "EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP"
server_tokens:
type: string
description: Security setting. Set to one of Full OS Minimal Minor Major Prod
default: "OS"
server_signature:
type: string
description: Security setting. Set to one of On Off EMail
default: "On"
trace_enabled:
type: string
description: Security setting. Set to one of On Off extended
default: "On"
extra_packages:
type: string
description: List of extra packages to be installed (e.g. commercial GeoIP package)
default: ""
openid_provider:
type: string
description: Comma seperated list of OpenID providers for authentication.
default: ""
apt-key-id:
type: string
default: ""
description: A PGP key id. This is used with PPA and the source
option to import a PGP public key for verifying repository signatures.
This value must match the PPA for apt-source.
apt-source:
type: string
default: ""
description: From where to install packages. This is the PPA source line.
Note that due to a bug in software-properties add-apt-repository cannot
add the ondrej/apache2 ppa, so the default value here is a full
sources line.
|