| # |
| # Licensed to the Apache Software Foundation (ASF) under one |
| # or more contributor license agreements. See the NOTICE file |
| # distributed with this work for additional information |
| # regarding copyright ownership. The ASF licenses this file |
| # to you under the Apache License, Version 2.0 (the |
| # "License"); you may not use this file except in compliance |
| # with the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, |
| # software distributed under the License is distributed on an |
| # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| # KIND, either express or implied. See the License for the |
| # specific language governing permissions and limitations |
| # under the License. |
| # |
| |
| application.title=Apache Fineract |
| |
| fineract.node-id=${FINERACT_NODE_ID:1} |
| |
| fineract.security.basicauth.enabled=${FINERACT_SECURITY_BASICAUTH_ENABLED:true} |
| fineract.security.oauth.enabled=${FINERACT_SECURITY_OAUTH_ENABLED:false} |
| fineract.security.2fa.enabled=${FINERACT_SECURITY_2FA_ENABLED:false} |
| |
| fineract.tenant.host=${FINERACT_DEFAULT_TENANTDB_HOSTNAME:localhost} |
| fineract.tenant.port=${FINERACT_DEFAULT_TENANTDB_PORT:3306} |
| fineract.tenant.username=${FINERACT_DEFAULT_TENANTDB_UID:root} |
| fineract.tenant.password=${FINERACT_DEFAULT_TENANTDB_PWD:mysql} |
| fineract.tenant.parameters=${FINERACT_DEFAULT_TENANTDB_CONN_PARAMS:} |
| fineract.tenant.timezone=${FINERACT_DEFAULT_TENANTDB_TIMEZONE:Asia/Kolkata} |
| fineract.tenant.identifier=${FINERACT_DEFAULT_TENANTDB_IDENTIFIER:default} |
| fineract.tenant.name=${FINERACT_DEFAULT_TENANTDB_NAME:fineract_default} |
| fineract.tenant.description=${FINERACT_DEFAULT_TENANTDB_DESCRIPTION:Default Demo Tenant} |
| fineract.tenant.master-password=${FINERACT_DEFAULT_TENANTDB_MASTER_PASSWORD:fineract} |
| fineract.tenant.encrytion=${FINERACT_DEFAULT_TENANTDB_ENCRYPTION:"AES/CBC/PKCS5Padding"} |
| |
| fineract.tenant.read-only-host=${FINERACT_DEFAULT_TENANTDB_RO_HOSTNAME:} |
| fineract.tenant.read-only-port=${FINERACT_DEFAULT_TENANTDB_RO_PORT:} |
| fineract.tenant.read-only-username=${FINERACT_DEFAULT_TENANTDB_RO_UID:} |
| fineract.tenant.read-only-password=${FINERACT_DEFAULT_TENANTDB_RO_PWD:} |
| fineract.tenant.read-only-parameters=${FINERACT_DEFAULT_TENANTDB_RO_CONN_PARAMS:} |
| fineract.tenant.read-only-name=${FINERACT_DEFAULT_TENANTDB_RO_NAME:} |
| |
| fineract.tenant.config.min-pool-size=${FINERACT_CONFIG_MIN_POOL_SIZE:-1} |
| fineract.tenant.config.max-pool-size=${FINERACT_CONFIG_MAX_POOL_SIZE:-1} |
| |
| fineract.mode.read-enabled=${FINERACT_MODE_READ_ENABLED:true} |
| fineract.mode.write-enabled=${FINERACT_MODE_WRITE_ENABLED:true} |
| fineract.mode.batch-worker-enabled=${FINERACT_MODE_BATCH_WORKER_ENABLED:true} |
| fineract.mode.batch-manager-enabled=${FINERACT_MODE_BATCH_MANAGER_ENABLED:true} |
| |
| fineract.query.in-clause-parameter-size-limit=${FINERACT_QUERY_PARAMETER_SIZE:1000} |
| |
| fineract.api.body-item-size-limit.inline-loan-cob=${FINERACT_API_REQUEST_BODY_SIZE_LIMIT_INLINE_COB:1000} |
| |
| fineract.correlation.enabled=${FINERACT_LOGGING_HTTP_CORRELATION_ID_ENABLED:false} |
| fineract.correlation.header-name=${FINERACT_LOGGING_HTTP_CORRELATION_ID_HEADER_NAME:X-Correlation-ID} |
| |
| fineract.job.stuck-retry-threshold=${FINERACT_JOB_STUCK_RETRY_THRESHOLD:5} |
| fineract.job.loan-cob-enabled=${FINERACT_JOB_LOAN_COB_ENABLED:true} |
| |
| fineract.partitioned-job.partitioned-job-properties[0].job-name=LOAN_COB |
| fineract.partitioned-job.partitioned-job-properties[0].chunk-size=${LOAN_COB_CHUNK_SIZE:100} |
| fineract.partitioned-job.partitioned-job-properties[0].partition-size=${LOAN_COB_PARTITION_SIZE:100} |
| fineract.partitioned-job.partitioned-job-properties[0].thread-pool-core-pool-size=${LOAN_COB_THREAD_POOL_CORE_POOL_SIZE:5} |
| fineract.partitioned-job.partitioned-job-properties[0].thread-pool-max-pool-size=${LOAN_COB_THREAD_POOL_MAX_POOL_SIZE:5} |
| fineract.partitioned-job.partitioned-job-properties[0].thread-pool-queue-capacity=${LOAN_COB_THREAD_POOL_QUEUE_CAPACITY:20} |
| fineract.partitioned-job.partitioned-job-properties[0].retry-limit=${LOAN_COB_RETRY_LIMIT:5} |
| fineract.partitioned-job.partitioned-job-properties[0].poll-interval=${LOAN_COB_POLL_INTERVAL:10000} |
| |
| fineract.remote-job-message-handler.spring-events.enabled=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_SPRING_EVENTS_ENABLED:true} |
| fineract.remote-job-message-handler.jms.enabled=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_JMS_ENABLED:false} |
| fineract.remote-job-message-handler.jms.request-queue-name=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_JMS_QUEUE_NAME:JMS-request-queue} |
| fineract.remote-job-message-handler.jms.broker-url=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_JMS_BROKER_URL:tcp://127.0.0.1:61616} |
| fineract.remote-job-message-handler.jms.broker-username=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_JMS_BROKER_USERNAME:} |
| fineract.remote-job-message-handler.jms.broker-password=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_JMS_BROKER_PASSWORD:} |
| |
| fineract.remote-job-message-handler.kafka.enabled=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_ENABLED:false} |
| fineract.remote-job-message-handler.kafka.topic.auto-create=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_TOPIC_AUTO_CREATE:true} |
| fineract.remote-job-message-handler.kafka.topic.name=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_TOPIC_NAME:job-topic} |
| fineract.remote-job-message-handler.kafka.topic.replicas=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_TOPIC_REPLICAS:1} |
| fineract.remote-job-message-handler.kafka.topic.partitions=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_TOPIC_PARTITIONS:10} |
| fineract.remote-job-message-handler.kafka.bootstrap-servers=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_BOOTSTRAP_SERVERS:localhost:9092} |
| fineract.remote-job-message-handler.kafka.consumer.group-id=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_CONSUMER_GROUPID:fineract-consumer-group-id} |
| #defines the key and value separator, e.g.: key=value |
| fineract.remote-job-message-handler.kafka.consumer.extra-properties-key-value-separator=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_CONSUMER_EXTRA_PROPERTIES_KEY_VALUE_SEPARATOR:=} |
| #defines the item separator, e.g.: key1=value1|key2=value2 |
| fineract.remote-job-message-handler.kafka.consumer.extra-properties-separator=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_CONSUMER_EXTRA_PROPERTIES_SEPARATOR:|} |
| #holds list of key value pairs using the above defined separators: key1=value1|key2=value2|...|keyn=valuen |
| fineract.remote-job-message-handler.kafka.consumer.extra-properties=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_CONSUMER_EXTRA_PROPERTIES:} |
| fineract.remote-job-message-handler.kafka.producer.extra-properties-separator=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_PRODUCER_EXTRA_PROPERTIES_SEPARATOR:|} |
| fineract.remote-job-message-handler.kafka.producer.extra-properties-key-value-separator=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_PRODUCER_EXTRA_PROPERTIES_KEY_VALUE_SEPARATOR:=} |
| fineract.remote-job-message-handler.kafka.producer.extra-properties=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_PRODUCER_EXTRA_PROPERTIES:} |
| fineract.remote-job-message-handler.kafka.admin.extra-properties-separator=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_ADMIN_EXTRA_PROPERTIES_SEPARATOR:|} |
| fineract.remote-job-message-handler.kafka.admin.extra-properties-key-value-separator=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_ADMIN_EXTRA_PROPERTIES_KEY_VALUE_SEPARATOR:=} |
| fineract.remote-job-message-handler.kafka.admin.extra-properties=${FINERACT_REMOTE_JOB_MESSAGE_HANDLER_KAFKA_ADMIN_EXTRA_PROPERTIES:} |
| |
| fineract.events.external.enabled=${FINERACT_EXTERNAL_EVENTS_ENABLED:false} |
| fineract.events.external.partition-size=${FINERACT_EXTERNAL_EVENTS_PARTITION_SIZE:5000} |
| fineract.events.external.producer.jms.enabled=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_ENABLED:false} |
| fineract.events.external.producer.jms.async-send-enabled=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_ASYNC_SEND_ENABLED:false} |
| fineract.events.external.producer.jms.event-queue-name=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_QUEUE_NAME:} |
| fineract.events.external.producer.jms.event-topic-name=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_TOPIC_NAME:} |
| fineract.events.external.producer.jms.broker-url=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_BROKER_URL:tcp://127.0.0.1:61616} |
| fineract.events.external.producer.jms.broker-username=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_BROKER_USERNAME:} |
| fineract.events.external.producer.jms.broker-password=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_BROKER_PASSWORD:} |
| fineract.events.external.producer.jms.producer-count=${FINERACT_EXTERNAL_EVENTS_PRODUCER_JMS_PRODUCER_COUNT:1} |
| fineract.events.external.producer.jms.thread-pool-task-executor-core-pool-size=${FINERACT_EVENT_TASK_EXECUTOR_CORE_POOL_SIZE:10} |
| fineract.events.external.producer.jms.thread-pool-task-executor-max-pool-size=${FINERACT_EVENT_TASK_EXECUTOR_MAX_POOL_SIZE:100} |
| |
| fineract.events.external.producer.kafka.enabled=${FINERACT_EXTERNAL_EVENTS_KAFKA_ENABLED:false} |
| fineract.events.external.producer.kafka.timeout-in-seconds=${FINERACT_EXTERNAL_EVENTS_KAFKA_TIMEOUT_IN_SECONDS:10} |
| fineract.events.external.producer.kafka.topic.auto-create=${FINERACT_EXTERNAL_EVENTS_KAFKA_TOPIC_AUTO_CREATE:true} |
| fineract.events.external.producer.kafka.topic.name=${FINERACT_EXTERNAL_EVENTS_KAFKA_TOPIC_NAME:external-events} |
| fineract.events.external.producer.kafka.topic.replicas=${FINERACT_EXTERNAL_EVENTS_KAFKA_TOPIC_REPLICAS:1} |
| fineract.events.external.producer.kafka.topic.partitions=${FINERACT_EXTERNAL_EVENTS_KAFKA_TOPIC_PARTITIONS:10} |
| fineract.events.external.producer.kafka.bootstrap-servers=${FINERACT_EXTERNAL_EVENTS_KAFKA_BOOTSTRAP_SERVERS:localhost:9092} |
| fineract.events.external.producer.kafka.producer.extra-properties-separator=${FINERACT_EXTERNAL_EVENTS_KAFKA_PRODUCER_EXTRA_PROPERTIES_SEPARATOR:|} |
| fineract.events.external.producer.kafka.producer.extra-properties-key-value-separator=${FINERACT_EXTERNAL_EVENTS_KAFKA_PRODUCER_EXTRA_PROPERTIES_KEY_VALUE_SEPARATOR:=} |
| fineract.events.external.producer.kafka.producer.extra-properties=${FINERACT_EXTERNAL_EVENTS_KAFKA_PRODUCER_EXTRA_PROPERTIES:linger.ms=10|batch.size=16384} |
| fineract.events.external.producer.kafka.admin.extra-properties-separator=${FINERACT_EXTERNAL_EVENTS_KAFKA_ADMIN_EXTRA_PROPERTIES_SEPARATOR:|} |
| fineract.events.external.producer.kafka.admin.extra-properties-key-value-separator=${FINERACT_EXTERNAL_EVENTS_KAFKA_ADMIN_EXTRA_PROPERTIES_KEY_VALUE_SEPARATOR:=} |
| fineract.events.external.producer.kafka.admin.extra-properties=${FINERACT_EXTERNAL_EVENTS_KAFKA_ADMIN_EXTRA_PROPERTIES:} |
| |
| |
| fineract.task-executor.default-task-executor-core-pool-size=${FINERACT_DEFAULT_TASK_EXECUTOR_CORE_POOL_SIZE:10} |
| fineract.task-executor.default-task-executor-max-pool-size=${FINERACT_DEFAULT_TASK_EXECUTOR_MAX_POOL_SIZE:100} |
| |
| fineract.idempotency-key-header-name=${FINERACT_IDEMPOTENCY_KEY_HEADER_NAME:Idempotency-Key} |
| |
| fineract.loan.transactionprocessor.creocore.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_CREOCORE_ENABLED:true} |
| fineract.loan.transactionprocessor.early-repayment.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_EARLY_REPAYMENT_ENABLED:true} |
| fineract.loan.transactionprocessor.mifos-standard.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_MIFOS_STANDARD_ENABLED:true} |
| fineract.loan.transactionprocessor.heavensfamily.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_HEAVENSFAMILY_ENABLED:true} |
| fineract.loan.transactionprocessor.interest-principal-penalties-fees.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_INTEREST_PRINCIPAL_PENALTIES_FEES_ENABLED:true} |
| fineract.loan.transactionprocessor.principal-interest-penalties-fees.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_PRINCIPAL_INTEREST_PENALTIES_FEES_ENABLED:true} |
| fineract.loan.transactionprocessor.rbi-india.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_RBI_INDIA_ENABLED:true} |
| fineract.loan.transactionprocessor.due-penalty-fee-interest-principal-in-advance-principal-penalty-fee-interest.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_DUE_PENALTY_FEE_INTEREST_PRINCIPAL_IN_ADVANCE_PRINCIPAL_PENALTY_FEE_INTEREST_ENABLED:true} |
| fineract.loan.transactionprocessor.due-penalty-interest-principal-fee-in-advance-penalty-interest-principal-fee.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_DUE_PENALTY_INTEREST_PRINCIPAL_FEE_IN_ADVANCE_PENALTY_INTEREST_PRINCIPAL_FEE_ENABLED:true} |
| fineract.loan.transactionprocessor.advanced-payment-strategy.enabled=${FINERACT_LOAN_TRANSACTIONPROCESSOR_ADVANCED_PAYMENT_STRATEGY_ENABLED:true} |
| fineract.loan.transactionprocessor.error-not-found-fail=${FINERACT_LOAN_TRANSACTIONPROCESSOR_ERROR_NOT_FOUND_FAIL:true} |
| |
| # Comma separated list of loan statuses which will be recorded on change. There are two extra values: "NONE" and "ALL". |
| # "NONE" disables the feature and no entries will be created, "ALL" enables the feature for all loan statuses. |
| fineract.loan.status-change-history-statuses=${FINERACT_LOAN_STATUS_CHANGE_HISTORY_STATUSES:NONE} |
| |
| fineract.content.regex-whitelist-enabled=${FINERACT_CONTENT_REGEX_WHITELIST_ENABLED:true} |
| fineract.content.regex-whitelist=${FINERACT_CONTENT_REGEX_WHITELIST:.*\\.pdf$,.*\\.doc,.*\\.docx,.*\\.xls,.*\\.xlsx,.*\\.jpg,.*\\.jpeg,.*\\.png} |
| fineract.content.mime-whitelist-enabled=${FINERACT_CONTENT_MIME_WHITELIST_ENABLED:true} |
| fineract.content.mime-whitelist=${FINERACT_CONTENT_MIME_WHITELIST:application/pdf,application/msword,application/vnd.openxmlformats-officedocument.wordprocessingml.document,application/vnd.ms-excel,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet,image/jpeg,image/png} |
| fineract.content.filesystem.enabled=${FINERACT_CONTENT_FILESYSTEM_ENABLED:true} |
| fineract.content.filesystem.rootFolder=${FINERACT_CONTENT_FILESYSTEM_ROOT_FOLDER:${user.home}/.fineract} |
| fineract.content.s3.enabled=${FINERACT_CONTENT_S3_ENABLED:false} |
| fineract.content.s3.bucketName=${FINERACT_CONTENT_S3_BUCKET_NAME:} |
| fineract.content.s3.accessKey=${FINERACT_CONTENT_S3_ACCESS_KEY:} |
| fineract.content.s3.secretKey=${FINERACT_CONTENT_S3_SECRET_KEY:} |
| |
| fineract.template.regex-whitelist-enabled=${FINERACT_TEMPLATE_REGEX_WHITELIST_ENABLED:true} |
| fineract.template.regex-whitelist=${FINERACT_TEMPLATE_REGEX_WHITELIST:} |
| |
| fineract.report.export.s3.bucket=${FINERACT_REPORT_EXPORT_S3_BUCKET_NAME:} |
| fineract.report.export.s3.enabled=${FINERACT_REPORT_EXPORT_S3_ENABLED:false} |
| |
| fineract.jpa.statementLoggingEnabled=${FINERACT_STATEMENT_LOGGING_ENABLED:false} |
| fineract.database.defaultMasterPassword=${FINERACT_DEFAULT_MASTER_PASSWORD:fineract} |
| |
| fineract.notification.user-notification-system.enabled=${FINERACT_USER_NOTIFICATION_SYSTEM_ENABLED:true} |
| fineract.logging.json.enabled=${FINERACT_LOGGING_JSON_ENABLED:false} |
| |
| fineract.sampling.enabled=${FINERACT_SAMPLING_ENABLED:false} |
| fineract.sampling.samplingRate=${FINERACT_SAMPLING_RATE:1000} |
| fineract.sampling.sampledClasses=${FINERACT_SAMPLED_CLASSES:} |
| fineract.sampling.resetPeriodSec=${FINERACT_SAMPLING_RESET_PERIOD_IN_SEC:60} |
| |
| fineract.module.investor.enabled=${FINERACT_MODULE_INVESTOR_ENABLED:true} |
| |
| fineract.insecure-http-client=${FINERACT_INSECURE_HTTP_CLIENT:true} |
| |
| # sql validation |
| |
| # inject-blind |
| fineract.sql-validation.patterns[0].name=inject-blind |
| fineract.sql-validation.patterns[0].pattern=(?i).*[\\"'`]?\\s*[and|or]+\\s*[\\"'`]?([\\d\\w])+[\\"'`]?\\s*=\\s*[\\"'`]?(\\1)[\\"'`]?\\s*.* |
| |
| # detect-entry-point |
| fineract.sql-validation.patterns[1].name=detect-entry-point |
| fineract.sql-validation.patterns[1].pattern=(?i)^[\\"'`]?[\\)\\s]+ |
| |
| # inject-timing |
| fineract.sql-validation.patterns[2].name=inject-timing |
| fineract.sql-validation.patterns[2].pattern=(?i).*[\\"'`]?\\s*[and|\\+|&|\\|]+.*\\s*[sleep|pg_sleep|benchmark]+\\s*(\\(\\s*\\d+\\s*[,]?\\s*.*\\s*\\))+.* |
| |
| # detect-backend |
| fineract.sql-validation.patterns[3].name=detect-backend |
| fineract.sql-validation.patterns[3].pattern=(?i).*\\[\\s*\\"(\\w+\\(.*\\))=(\\1)\\"\\s*,\\s*\\"\\w+\\"\\s*\\].* |
| |
| # detect-column |
| fineract.sql-validation.patterns[4].name=detect-column |
| fineract.sql-validation.patterns[4].pattern=(?i).*[\\"'`]?\\s*(order\\s*by|group\\s*by|union\\s*select)+\\s+([\\d+|null]?\\s*,*\\s*)+\\s*.* |
| |
| # detect-out-of-bands |
| fineract.sql-validation.patterns[5].name=detect-out-of-bands |
| fineract.sql-validation.patterns[5].pattern=(?i).*(select)+\\s+(load_file)+.* |
| |
| # inject-stacked-query |
| fineract.sql-validation.patterns[6].name=inject-stacked-query |
| fineract.sql-validation.patterns[6].pattern=(?i).*[;]+\\s*(create|drop|alter|truncate|comment|select|insert|update|delete|merge|upsert|call|exec)+.*(from|into|set|table|column|database)*.* |
| |
| # inject-comment |
| fineract.sql-validation.patterns[7].name=inject-comment |
| fineract.sql-validation.patterns[7].pattern=(?i).*\\s+(-|/\\*|#|\\(\\{)++.* |
| |
| # main |
| fineract.sql-validation.profiles[0].name=main |
| fineract.sql-validation.profiles[0].description=Main Query Validation Profile |
| fineract.sql-validation.profiles[0].patternRefs[0].name=inject-blind |
| fineract.sql-validation.profiles[0].patternRefs[0].order=0 |
| fineract.sql-validation.profiles[0].patternRefs[1].name=detect-entry-point |
| fineract.sql-validation.profiles[0].patternRefs[1].order=1 |
| fineract.sql-validation.profiles[0].patternRefs[2].name=inject-timing |
| fineract.sql-validation.profiles[0].patternRefs[2].order=2 |
| fineract.sql-validation.profiles[0].patternRefs[3].name=detect-backend |
| fineract.sql-validation.profiles[0].patternRefs[3].order=3 |
| fineract.sql-validation.profiles[0].patternRefs[4].name=detect-column |
| fineract.sql-validation.profiles[0].patternRefs[4].order=4 |
| fineract.sql-validation.profiles[0].patternRefs[5].name=detect-out-of-bands |
| fineract.sql-validation.profiles[0].patternRefs[5].order=5 |
| fineract.sql-validation.profiles[0].patternRefs[6].name=inject-stacked-query |
| fineract.sql-validation.profiles[0].patternRefs[6].order=6 |
| fineract.sql-validation.profiles[0].patternRefs[7].name=inject-comment |
| fineract.sql-validation.profiles[0].patternRefs[7].order=7 |
| fineract.sql-validation.profiles[0].enabled=true |
| |
| # adhoc |
| fineract.sql-validation.profiles[1].name=adhoc |
| fineract.sql-validation.profiles[1].description=Adhoc Query Validation Profile |
| fineract.sql-validation.profiles[1].patternRefs[0].name=inject-blind |
| fineract.sql-validation.profiles[1].patternRefs[0].order=0 |
| fineract.sql-validation.profiles[1].patternRefs[1].name=detect-entry-point |
| fineract.sql-validation.profiles[1].patternRefs[1].order=1 |
| fineract.sql-validation.profiles[1].patternRefs[2].name=inject-timing |
| fineract.sql-validation.profiles[1].patternRefs[2].order=2 |
| fineract.sql-validation.profiles[1].patternRefs[3].name=detect-backend |
| fineract.sql-validation.profiles[1].patternRefs[3].order=3 |
| fineract.sql-validation.profiles[1].patternRefs[4].name=detect-column |
| fineract.sql-validation.profiles[1].patternRefs[4].order=4 |
| fineract.sql-validation.profiles[1].patternRefs[5].name=detect-out-of-bands |
| fineract.sql-validation.profiles[1].patternRefs[5].order=5 |
| fineract.sql-validation.profiles[1].patternRefs[6].name=inject-stacked-query |
| fineract.sql-validation.profiles[1].patternRefs[6].order=6 |
| fineract.sql-validation.profiles[1].patternRefs[7].name=inject-comment |
| fineract.sql-validation.profiles[1].patternRefs[7].order=7 |
| fineract.sql-validation.profiles[1].enabled=true |
| |
| # dynamic |
| fineract.sql-validation.profiles[2].name=column |
| fineract.sql-validation.profiles[2].description=Column Validation Profile |
| fineract.sql-validation.profiles[2].patternRefs[0].name=inject-blind |
| fineract.sql-validation.profiles[2].patternRefs[0].order=0 |
| fineract.sql-validation.profiles[2].patternRefs[1].name=detect-entry-point |
| fineract.sql-validation.profiles[2].patternRefs[1].order=1 |
| fineract.sql-validation.profiles[2].patternRefs[2].name=inject-timing |
| fineract.sql-validation.profiles[2].patternRefs[2].order=2 |
| fineract.sql-validation.profiles[2].patternRefs[3].name=detect-backend |
| fineract.sql-validation.profiles[2].patternRefs[3].order=3 |
| fineract.sql-validation.profiles[2].patternRefs[4].name=detect-out-of-bands |
| fineract.sql-validation.profiles[2].patternRefs[4].order=4 |
| fineract.sql-validation.profiles[2].patternRefs[5].name=inject-stacked-query |
| fineract.sql-validation.profiles[2].patternRefs[5].order=5 |
| fineract.sql-validation.profiles[2].patternRefs[6].name=inject-comment |
| fineract.sql-validation.profiles[2].patternRefs[6].order=6 |
| fineract.sql-validation.profiles[2].enabled=true |
| |
| # Logging pattern for the console |
| logging.pattern.console=${CONSOLE_LOG_PATTERN:%clr(%d{yyyy-MM-dd HH:mm:ss.SSS}){faint} %clr(${LOG_LEVEL_PATTERN:-%5p}) %clr(${PID:- }){magenta} %clr(%replace([%X{correlationId}]){'\\[\\]', ''}) %clr(---){faint} %clr([%15.15t]){faint} %clr(%-40.40logger{39}){cyan} %clr(:){faint} %m%n${LOG_EXCEPTION_CONVERSION_WORD:%wEx}} |
| logging.pattern.level=%5p [${spring.application.name:},%X{traceId:-},%X{spanId:-}] |
| |
| management.health.jms.enabled=${FINERACT_MANAGEMENT_HEALTH_JMS_ENABLED:false} |
| |
| # FINERACT 1296 |
| management.endpoint.health.probes.enabled=true |
| management.health.livenessState.enabled=true |
| management.health.readinessState.enabled=true |
| |
| management.health.ratelimiters.enabled=${FINERACT_MANAGEMENT_HEALTH_RATELIMITERS_ENABLED:false} |
| |
| management.endpoints.web.cors.allowed-origins=* |
| management.endpoints.web.cors.allowed-methods=GET, POST, PUT, DELETE, OPTIONS |
| management.endpoints.web.cors.allowed-headers=* |
| |
| # FINERACT-883 |
| management.info.git.mode=FULL |
| management.endpoints.web.exposure.include=${FINERACT_MANAGEMENT_ENDPOINT_WEB_EXPOSURE_INCLUDE:health,info,prometheus} |
| |
| management.tracing.enabled=${FINERACT_MANAGEMENT_TRACIING_ENABLED:false} |
| |
| management.metrics.tags.application=${FINERACT_MANAGEMENT_METRICS_TAGS_APPLICATION:fineract} |
| management.metrics.distribution.percentiles-histogram.http.server.requests=${FINERACT_MANAGEMENT_METRICS_DISTRIBUTION_HTTP_SERVER_REQUESTS:false} |
| |
| management.otlp.metrics.export.enabled=${FINERACT_MANAGEMENT_OLTP_ENABLED:false} |
| management.otlp.metrics.export.url=${FINERACT_MANAGEMENT_OLTP_METRICS_EXPORT_URL:http://tempo:4318/v1/traces} |
| management.otlp.metrics.export.aggregationTemporality=${FINERACT_MANAGEMENT_OLTP_METRICS_EXPORT_AGGREGATION_TEMPORALITY:cumulative} |
| |
| management.prometheus.metrics.export.enabled=${FINERACT_MANAGEMENT_PROMETHEUS_ENABLED:false} |
| # TODO: show pushgateway example |
| # management.prometheus.metrics.export.pushgateway.enabled=false |
| |
| spring.cloud.aws.cloudwatch.enabled=${FINERACT_MANAGEMENT_CLOUDWATCH_ENABLED:false} |
| #spring.cloud.aws.cloudwatch.region=${FINERACT_MANAGEMENT_CLOUDWATCH_REGION:us-east-1} |
| |
| management.metrics.export.cloudwatch.enabled=${FINERACT_MANAGEMENT_CLOUDWATCH_ENABLED:false} |
| management.metrics.export.cloudwatch.namespace=${FINERACT_MANAGEMENT_CLOUDWATCH_NAMESPACE:fineract} |
| management.metrics.export.cloudwatch.step=${FINERACT_MANAGEMENT_CLOUDWATCH_STEP:1m} |
| |
| spring.autoconfigure.exclude=${FINERACT_AUTOCONFIGURE_EXCLUDE:io.awspring.cloud.autoconfigure.core.AwsAutoConfiguration,\ |
| io.awspring.cloud.autoconfigure.core.CredentialsProviderAutoConfiguration} |
| |
| spring.cloud.aws.endpoint=${FINERACT_AWS_ENDPOINT:} |
| spring.cloud.aws.region.static=${FINERACT_AWS_REGION_STATIC:us-east-1} |
| spring.cloud.aws.credentials.access-key=${FINERACT_AWS_CREDENTIALS_ACCESS_KEY:} |
| spring.cloud.aws.credentials.secret-key=${FINERACT_AWS_CREDENTIALS_SECRET_KEY:} |
| spring.cloud.aws.credentials.instance-profile=${FINERACT_AWS_CREDENTIALS_INSTANCE_PROFILE:false} |
| spring.cloud.aws.credentials.profile.name=${FINERACT_AWS_CREDENTIALS_PROFILE_NAME:} |
| spring.cloud.aws.credentials.profile.path=${FINERACT_AWS_CREDENTIALS_PROFILE_PATH:} |
| |
| # FINERACT-914 |
| server.forward-headers-strategy=framework |
| server.port=${FINERACT_SERVER_PORT:8443} |
| server.servlet.context-path=${FINERACT_SERVER_SERVLET_CONTEXT_PATH:/fineract-provider} |
| server.compression.enabled=${FINERACT_SERVER_COMPRESSION_ENABLED:true} |
| |
| server.ssl.enabled=${FINERACT_SERVER_SSL_ENABLED:true} |
| server.ssl.protocol=TLS |
| #server.ssl.ciphers=${FINERACT_SERVER_SSL_CIPHERS:TLS_RSA_WITH_AES_128_CBC_SHA256} |
| #server.ssl.enabled-protocols=${FINERACT_SERVER_SSL_PROTOCOLS:TLSv1.2} |
| server.ssl.key-store=${FINERACT_SERVER_SSL_KEY_STORE:classpath:keystore.jks} |
| server.ssl.key-store-password=${FINERACT_SERVER_SSL_KEY_STORE_PASSWORD:openmf} |
| |
| # Graceful shutdown configuration |
| server.shutdown=graceful |
| spring.lifecycle.timeout-per-shutdown-phase=${FINERACT_TIMEOUT_PER_SHUTDOWN:30s} |
| |
| server.tomcat.accept-count=${FINERACT_SERVER_TOMCAT_ACCEPT_COUNT:100} |
| server.tomcat.accesslog.enabled=${FINERACT_SERVER_TOMCAT_ACCESSLOG_ENABLED:false} |
| server.tomcat.max-connections=${FINERACT_SERVER_TOMCAT_MAX_CONNECTIONS:8192} |
| server.tomcat.max-http-form-post-size=${FINERACT_SERVER_TOMCAT_MAX_HTTP_FORM_POST_SIZE:2MB} |
| server.tomcat.max-keep-alive-requests=${FINERACT_SERVER_TOMCAT_MAX_KEEP_ALIVE_REQUESTS:100} |
| server.tomcat.threads.max=${FINERACT_SERVER_TOMCAT_THREADS_MAX:200} |
| server.tomcat.threads.min-spare=${FINERACT_SERVER_TOMCAT_THREADS_MIN_SPARE:10} |
| |
| # OAuth authorisation server endpoint |
| spring.security.oauth2.resourceserver.jwt.issuer-uri=${FINERACT_SERVER_OAUTH_RESOURCE_URL:http://localhost:9000/auth/realms/fineract} |
| |
| spring.datasource.hikari.driverClassName=${FINERACT_HIKARI_DRIVER_SOURCE_CLASS_NAME:org.mariadb.jdbc.Driver} |
| spring.datasource.hikari.jdbcUrl=${FINERACT_HIKARI_JDBC_URL:jdbc:mariadb://localhost:3306/fineract_tenants} |
| spring.datasource.hikari.username=${FINERACT_HIKARI_USERNAME:root} |
| spring.datasource.hikari.password=${FINERACT_HIKARI_PASSWORD:mysql} |
| spring.datasource.hikari.minimumIdle=${FINERACT_HIKARI_MINIMUM_IDLE:3} |
| spring.datasource.hikari.maximumPoolSize=${FINERACT_HIKARI_MAXIMUM_POOL_SIZE:10} |
| spring.datasource.hikari.idleTimeout=${FINERACT_HIKARI_IDLE_TIMEOUT:60000} |
| spring.datasource.hikari.connectionTimeout=${FINERACT_HIKARI_CONNECTION_TIMEOUT:20000} |
| spring.datasource.hikari.connectionTestquery=${FINERACT_HIKARI_TEST_QUERY:SELECT 1} |
| spring.datasource.hikari.autoCommit=${FINERACT_HIKARI_AUTO_COMMIT:true} |
| spring.datasource.hikari.transactionIsolation=${FINERACT_HIKARI_TRANSACTION_ISOLATION:TRANSACTION_REPEATABLE_READ} |
| spring.datasource.hikari.dataSourceProperties['cachePrepStmts']=${FINERACT_HIKARI_DS_PROPERTIES_CACHE_PREP_STMTS:true} |
| spring.datasource.hikari.dataSourceProperties['prepStmtCacheSize']=${FINERACT_HIKARI_DS_PROPERTIES_PREP_STMT_CACHE_SIZE:250} |
| spring.datasource.hikari.dataSourceProperties['prepStmtCacheSqlLimit']=${FINERACT_HIKARI_DS_PROPERTIES_PREP_STMT_CACHE_SQL_LIMIT:2048} |
| spring.datasource.hikari.dataSourceProperties['useServerPrepStmts']=${FINERACT_HIKARI_DS_PROPERTIES_USE_SERVER_PREP_STMTS:true} |
| spring.datasource.hikari.dataSourceProperties['useLocalSessionState']=${FINERACT_HIKARI_DS_PROPERTIES_USE_LOCAL_SESSION_STATE:true} |
| spring.datasource.hikari.dataSourceProperties['rewriteBatchedStatements']=${FINERACT_HIKARI_DS_PROPERTIES_REWRITE_BATCHED_STATEMENTS:true} |
| spring.datasource.hikari.dataSourceProperties['cacheResultSetMetadata']=${FINERACT_HIKARI_DS_PROPERTIES_CACHE_RESULT_SET_METADATA:true} |
| spring.datasource.hikari.dataSourceProperties['cacheServerConfiguration']=${FINERACT_HIKARI_DS_PROPERTIES_CACHE_SERVER_CONFIGURATION:true} |
| spring.datasource.hikari.dataSourceProperties['elideSetAutoCommits']=${FINERACT_HIKARI_DS_PROPERTIES_ELIDE_SET_AUTO_COMMITS:true} |
| spring.datasource.hikari.dataSourceProperties['maintainTimeStats']=${FINERACT_HIKARI_DS_PROPERTIES_MAINTAIN_TIME_STATS:false} |
| # https://github.com/brettwooldridge/HikariCP/wiki/JDBC-Logging#mysql-connectorj |
| # TODO FINERACT-890: <prop key="logger">com.mysql.cj.log.Slf4JLogger</prop> |
| spring.datasource.hikari.dataSourceProperties['logSlowQueries']=${FINERACT_HIKARI_DS_PROPERTIES_LOG_SLOW_QUERIES:true} |
| spring.datasource.hikari.dataSourceProperties['dumpQueriesOnException']=${FINERACT_HIKARI_DS_PROPERTIES_DUMP_QUERIES_IN_EXCEPTION:true} |
| spring.jpa.open-in-view=false |
| |
| # Liquibase configuration |
| spring.liquibase.enabled=${FINERACT_LIQUIBASE_ENABLED:true} |
| spring.liquibase.changeLog=classpath:/db/changelog/db.changelog-master.xml |
| |
| spring.liquibase.parameters.fineract.tenant.identifier=${fineract.tenant.identifier} |
| spring.liquibase.parameters.fineract.tenant.description=${fineract.tenant.description} |
| spring.liquibase.parameters.fineract.tenant.timezone=${fineract.tenant.timezone} |
| spring.liquibase.parameters.fineract.tenant.schema-name=${fineract.tenant.name} |
| spring.liquibase.parameters.fineract.tenant.host=${fineract.tenant.host} |
| spring.liquibase.parameters.fineract.tenant.port=${fineract.tenant.port} |
| spring.liquibase.parameters.fineract.tenant.username=${fineract.tenant.username} |
| spring.liquibase.parameters.fineract.tenant.password=${fineract.tenant.password} |
| spring.liquibase.parameters.fineract.tenant.parameters=${fineract.tenant.parameters} |
| spring.liquibase.parameters.fineract.tenant.read-only-host=${fineract.tenant.read-only-host} |
| spring.liquibase.parameters.fineract.tenant.read-only-port=${fineract.tenant.read-only-port} |
| spring.liquibase.parameters.fineract.tenant.read-only-username=${fineract.tenant.read-only-username} |
| spring.liquibase.parameters.fineract.tenant.read-only-password=${fineract.tenant.read-only-password} |
| spring.liquibase.parameters.fineract.tenant.read-only-parameters=${fineract.tenant.read-only-parameters} |
| spring.liquibase.parameters.fineract.tenant.read-only-name=${fineract.tenant.read-only-name} |
| |
| springdoc.api-docs.path=${SPRINGDOC_API_DOCS_PATH:/api-docs} |
| springdoc.api-docs.enabled=${SPRINGDOC_API_DOCS_ENABLED:true} |
| springdoc.swagger-ui.enabled=${SPRINGDOC_SWAGGER_UI_ENABLED:true} |
| springdoc.swagger-ui.display-query-params=true |
| springdoc.swagger-ui.url=/fineract.json |
| springdoc.packagesToScan=org.apache.fineract |
| springdoc.pathsToMatch=/api/** |
| springdoc.use-management-port=${SPRINGDOC_USE_MANAGEMENT_PORT:false} |
| springdoc.show-actuator=${SPRINGDOC_SHOW_ACTUATOR:false} |
| |
| spring.web.resources.static-locations=classpath:/static/ |
| |
| spring.main.allow-bean-definition-overriding=true |
| spring.task.scheduling.pool.size=4 |
| spring.batch.initialize-schema=NEVER |
| # Disabling Spring Batch jobs on startup |
| spring.batch.job.enabled=false |
| |
| resilience4j.retry.instances.executeCommand.max-attempts=${FINERACT_COMMAND_PROCESSING_RETRY_MAX_ATTEMPTS:3} |
| resilience4j.retry.instances.executeCommand.wait-duration=${FINERACT_COMMAND_PROCESSING_RETRY_WAIT_DURATION:1s} |
| resilience4j.retry.instances.executeCommand.enable-exponential-backoff=${FINERACT_COMMAND_PROCESSING_RETRY_ENABLE_EXPONENTIAL_BACKOFF:true} |
| resilience4j.retry.instances.executeCommand.exponential-backoff-multiplier=${FINERACT_COMMAND_PROCESSING_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER:2} |
| resilience4j.retry.instances.executeCommand.retryExceptions=${FINERACT_COMMAND_PROCESSING_RETRY_EXCEPTIONS:org.springframework.dao.ConcurrencyFailureException,org.eclipse.persistence.exceptions.OptimisticLockException,jakarta.persistence.OptimisticLockException,org.springframework.orm.jpa.JpaOptimisticLockingFailureException,org.apache.fineract.infrastructure.core.exception.IdempotentCommandProcessUnderProcessingException} |
| |
| resilience4j.retry.instances.processJobDetailForExecution.max-attempts=${FINERACT_PROCESS_JOB_DETAIL_RETRY_MAX_ATTEMPTS:3} |
| resilience4j.retry.instances.processJobDetailForExecution.wait-duration=${FINERACT_PROCESS_JOB_DETAIL_RETRY_WAIT_DURATION:1s} |
| resilience4j.retry.instances.processJobDetailForExecution.enable-exponential-backoff=${FINERACT_PROCESS_JOB_DETAIL_RETRY_ENABLE_EXPONENTIAL_BACKOFF:true} |
| resilience4j.retry.instances.processJobDetailForExecution.exponential-backoff-multiplier=${FINERACT_PROCESS_JOB_DETAIL_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER:2} |
| |
| resilience4j.retry.instances.recalculateInterest.max-attempts=${FINERACT_PROCESS_RECALCULATE_INTEREST_RETRY_MAX_ATTEMPTS:3} |
| resilience4j.retry.instances.recalculateInterest.wait-duration=${FINERACT_PROCESS_RECALCULATE_INTEREST_RETRY_WAIT_DURATION:1s} |
| resilience4j.retry.instances.recalculateInterest.enable-exponential-backoff=${FINERACT_PROCESS_RECALCULATE_INTEREST_RETRY_ENABLE_EXPONENTIAL_BACKOFF:true} |
| resilience4j.retry.instances.recalculateInterest.exponential-backoff-multiplier=${FINERACT_PROCESS_RECALCULATE_INTEREST_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER:2} |
| resilience4j.retry.instances.recalculateInterest.retryExceptions=${FINERACT_PROCESS_RECALCULATE_INTEREST_RETRY_EXCEPTIONS:org.springframework.dao.ConcurrencyFailureException,org.eclipse.persistence.exceptions.OptimisticLockException,jakarta.persistence.OptimisticLockException,org.springframework.orm.jpa.JpaOptimisticLockingFailureException} |
| |
| resilience4j.retry.instances.postInterest.max-attempts=${FINERACT_PROCESS_POST_INTEREST_RETRY_MAX_ATTEMPTS:3} |
| resilience4j.retry.instances.postInterest.wait-duration=${FINERACT_PROCESS_POST_INTEREST_RETRY_WAIT_DURATION:1s} |
| resilience4j.retry.instances.postInterest.enable-exponential-backoff=${FINERACT_PROCESS_POST_INTEREST_RETRY_ENABLE_EXPONENTIAL_BACKOFF:true} |
| resilience4j.retry.instances.postInterest.exponential-backoff-multiplier=${FINERACT_PROCESS_POST_INTEREST_RETRY_EXPONENTIAL_BACKOFF_MULTIPLIER:2} |
| resilience4j.retry.instances.postInterest.retryExceptions=${FINERACT_PROCESS_POST_INTEREST_RETRY_EXCEPTIONS:org.springframework.dao.ConcurrencyFailureException,org.eclipse.persistence.exceptions.OptimisticLockException,jakarta.persistence.OptimisticLockException,org.springframework.orm.jpa.JpaOptimisticLockingFailureException} |
