############################ Alpine Configuration ###########################

# Required
# 设定the event subsystem使用的线程数量
# 由the event subsystem异步执行
# 当该值较大时，可以处理大多数使用场景并且不会产生大量延迟.
# 当该值较小时，不会对服务器造成额外的负载
# 值为0时，将指示Alpine为每个CPU核心分配1个线程
# 可以使用alpine.worker.thread.multiplier属性进行进一步调整.
# 默认为0
alpine.worker.threads=0

# Required
# 设置一个乘数，用于计算the event subsystem使用的线程数
# 此属性仅在alpine.worker.threads设置为0时使用
# 具有4个内核且乘数为4的计算机将使用（最多）16个工作线程
# 默认为4
alpine.worker.thread.multiplier=4

# Required
# 设定数据目录的路径。
# 此目录将保存日志、密钥和任何数据库或索引文件以及特定于应用程序的文件或目录
alpine.data.directory=~/.dependency-track

# Required
# 日志记录间隔时间(秒)
# 值为0时，不启用日志记录
alpine.watchdog.logging.interval=0

# Required
# 设定数据库操作模式。有效的选择是:
# 'server'， 'embedded'和'external'。
# server模式下，数据库将监听来自远程主机的连接。
# embedded模式下，系统会更安全，速度会较快。
# external模式下，使用外部数据库服务器
# (例如mysql, postgresql等)。
alpine.database.mode=embedded

# Optional
# 'server'模式下，指定TCP端口
alpine.database.port=9092

# Required
# 指定连接到数据库时要使用的JDBC URL
alpine.database.url=jdbc:h2:~/.dependency-track/db

# Required
# 指定要使用的JDBC driver class
alpine.database.driver=org.h2.Driver

# Optional
# 指定对数据库进行身份验证时要使用的用户名
alpine.database.username=sa

# Optional
# 指定对数据库进行身份验证时要使用的密码
# alpine.database.password=

# Optional
# 是否启用数据库连接池
alpine.database.pool.enabled=true

# Optional
# 设定数据库连接池最大连接数
# 包括空闲和正在使用的连接数
alpine.database.pool.max.size=20

# Optional
# 可在连接池中的最长空闲时间
alpine.database.pool.idle.timeout=600000

# Optional
# 连接池中连接的最长生命周期
# 正在使用的连接将不会被删除，只有关闭的连接才会被移除
alpine.database.pool.max.lifetime=600000

# Optional
# 设定强制验证，需要API密钥来实现自动化
# 用户界面将通过提示输入登录凭据来防止匿名访问
alpine.enforce.authentication=true

# Optional
# 设定强制授权，API密钥和用户帐户被限制为团队有权访问
# 若强制授权，alpine.enforce.authentication必须为true
alpine.enforce.authorization=true

# Required
# 设定对用户密码进行hash时要进行的bcrypt轮数
# 轮数越多，密码越安全，但会花费更多时间和资源
alpine.bcrypt.rounds=14

# Required
# 设定LDAP是否用于身份验证
# 如果为true，alpine.ldap.* 也应该进行相应设置
alpine.ldap.enabled=false

# Optional
# 设定LDAP服务URL
# Example (Microsoft Active Directory):
#    alpine.ldap.server.url=ldap://ldap.example.com:3268
#    alpine.ldap.server.url=ldaps://ldap.example.com:3269
# Example (ApacheDS, Fedora 389 Directory, NetIQ/Novell eDirectory, etc):
#    alpine.ldap.server.url=ldap://ldap.example.com:389
#    alpine.ldap.server.url=ldaps://ldap.example.com:636
alpine.ldap.server.url=ldap://ldap.example.com:389

# Optional
# 设定base DN，所有查询都从中搜索
alpine.ldap.basedn=dc=example,dc=com

# Optional
# 设定LDAP安全验证级别，"none", "simple", "strong" 
# 如果为空或未指定，则由服务提供者指定
alpine.ldap.security.auth=simple

# Optional
# 如果不允许匿名访问，请设置对目录具有有限访问权限的用户名，仅够执行搜索
# This should be the fully qualified DN of the user.
alpine.ldap.bind.username=

# Optional
# 设置密码
alpine.ldap.bind.password=

# Optional
# Specifies if the username entered during login needs to be formatted prior
# to asserting credentials against the directory. 
# 对于Active Directory, userPrincipal通常以domain结尾，
# 而samAccountName和其他目录服务器则并非如此。
# %s变量将替换为登录时声明的用户名
# Example (Microsoft Active Directory):
#    alpine.ldap.auth.username.format=%s@example.com
# Example (ApacheDS, Fedora 389 Directory, NetIQ/Novell eDirectory, etc):
#    alpine.ldap.auth.username.format=%s
alpine.ldap.auth.username.format=%s@example.com

# Optional
# 设定标识用户ID的属性
# Example (Microsoft Active Directory):
#    alpine.ldap.attribute.name=userPrincipalName
# Example (ApacheDS, Fedora 389 Directory, NetIQ/Novell eDirectory, etc):
#    alpine.ldap.attribute.name=uid
alpine.ldap.attribute.name=userPrincipalName

# Optional
# 用于存储用户电子邮件地址的LDAP属性
alpine.ldap.attribute.mail=mail

# Optional
# 设定用于从目录检索所有组的LDAP搜索过滤器。
# Example (Microsoft Active Directory):
#    alpine.ldap.groups.filter=(&(objectClass=group)(objectCategory=Group))
# Example (ApacheDS, Fedora 389 Directory, NetIQ/Novell eDirectory, etc):
#    alpine.ldap.groups.filter=(&(objectClass=groupOfUniqueNames))
alpine.ldap.groups.filter=(&(objectClass=group)(objectCategory=Group))

# Optional
# 设定用于查询用户和检索用户所属组列表的LDAP搜索过滤器
# {USER_DN}变量将在运行时替换为users DN的实际值
# Example (Microsoft Active Directory):
#    alpine.ldap.user.groups.filter=(&(objectClass=group)(objectCategory=Group)(member={USER_DN}))
# Example (Microsoft Active Directory - with nested group support):
#    alpine.ldap.user.groups.filter=(member:1.2.840.113556.1.4.1941:={USER_DN})
# Example (ApacheDS, Fedora 389 Directory, NetIQ/Novell eDirectory, etc):
#    alpine.ldap.user.groups.filter=(&(objectClass=groupOfUniqueNames)(uniqueMember={USER_DN}))
alpine.ldap.user.groups.filter=(member:1.2.840.113556.1.4.1941:={USER_DN})

# Optional
# Specifies the LDAP search filter used to search for groups by their name.
# The {SEARCH_TERM} variable will be substituted at runtime.
# Example (Microsoft Active Directory):
#    alpine.ldap.groups.search.filter=(&(objectClass=group)(objectCategory=Group)(cn=*{SEARCH_TERM}*))
# Example (ApacheDS, Fedora 389 Directory, NetIQ/Novell eDirectory, etc):
#    alpine.ldap.groups.search.filter=(&(objectClass=groupOfUniqueNames)(cn=*{SEARCH_TERM}*))
alpine.ldap.groups.search.filter=(&(objectClass=group)(objectCategory=Group)(cn=*{SEARCH_TERM}*))

# Optional
# Specifies the LDAP search filter used to search for users by their name.
# The {SEARCH_TERM} variable will be substituted at runtime.
# Example (Microsoft Active Directory):
#    alpine.ldap.users.search.filter=(&(objectClass=group)(objectCategory=Group)(cn=*{SEARCH_TERM}*))
# Example (ApacheDS, Fedora 389 Directory, NetIQ/Novell eDirectory, etc):
#    alpine.ldap.users.search.filter=(&(objectClass=inetOrgPerson)(cn=*{SEARCH_TERM}*))
alpine.ldap.users.search.filter=(&(objectClass=user)(objectCategory=Person)(cn=*{SEARCH_TERM}*))

# Optional
# Specifies if mapped LDAP accounts are automatically created upon successful
# authentication. When a user logs in with valid credentials but an account has
# not been previously provisioned, an authentication failure will be returned.
# This allows admins to control specifically which ldap users can access the
# system and which users cannot. When this value is set to true, a local ldap
# user will be created and mapped to the ldap account automatically. This
# automatic provisioning only affects authentication, not authorization.
alpine.ldap.user.provisioning=false

# Optional
# This option will ensure that team memberships for LDAP users are dynamic and
# synchronized with membership of LDAP groups. When a team is mapped to an LDAP
# group, all local LDAP users will automatically be assigned to the team if
# they are a member of the group the team is mapped to. If the user is later
# removed from the LDAP group, they will also be removed from the team. This
# option provides the ability to dynamically control user permissions via an
# external directory.
alpine.ldap.team.synchronization=false

# Optional
# HTTP proxy
# 如果设置了address，那么port也必须设置。
# alpine.http.proxy.address=proxy.example.com
# alpine.http.proxy.port=8888
# alpine.http.proxy.username=
# alpine.http.proxy.password=
# alpine.no.proxy=localhost,127.0.0.1

# Optional
# 包含在REST响应中的跨源资源共享(CORS)头。
# 如果'alpine.cors.enabled' 为true, 将发送CORS头，false则不发送
# 请参阅: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
# 以下为默认值
#alpine.cors.enabled=true
#alpine.cors.allow.origin=*
#alpine.cors.allow.methods=GET, POST, PUT, DELETE, OPTIONS
#alpine.cors.allow.headers=Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count, *
#alpine.cors.expose.headers=Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count
#alpine.cors.allow.credentials=true
#alpine.cors.max.age=3600

# Required
# 是否将OpenID Connect用于用户身份验证
# 如果启用，则应相应地设置alpine.oidc.*
alpine.oidc.enabled=false

# Optional
# Defines the issuer URL to be used for OpenID Connect.
# This issuer MUST support provider configuration via the /.well-known/openid-configuration endpoint.
# See also:
# - https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
# - https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfig
alpine.oidc.issuer=

# Optional
# Defines the name of the claim that contains the username in the provider's userinfo endpoint.
# Common claims are "name", "username", "preferred_username" or "nickname".
# See also: https://openid.net/specs/openid-connect-core-1_0.html#UserInfoResponse
alpine.oidc.username.claim=name

# Optional
# Specifies if mapped OpenID Connect accounts are automatically created upon successful
# authentication. When a user logs in with a valid access token but an account has
# not been previously provisioned, an authentication failure will be returned.
# This allows admins to control specifically which OpenID Connect users can access the
# system and which users cannot. When this value is set to true, a local OpenID Connect
# user will be created and mapped to the OpenID Connect account automatically. This
# automatic provisioning only affects authentication, not authorization.
alpine.oidc.user.provisioning=false

# Optional
# This option will ensure that team memberships for OpenID Connect users are dynamic and
# synchronized with membership of OpenID Connect groups or assigned roles. When a team is
# mapped to an OpenID Connect group, all local OpenID Connect users will automatically be
# assigned to the team if they are a member of the group the team is mapped to. If the user
# is later removed from the OpenID Connect group, they will also be removed from the team. This
# option provides the ability to dynamically control user permissions via the identity provider.
# Note that team synchronization is only performed during user provisioning and after successful
# authentication.
alpine.oidc.team.synchronization=false

# Optional
# Defines the name of the claim that contains group memberships or role assignments in the provider's userinfo endpoint.
# The claim must be an array of strings. Most public identity providers do not support group or role management.
# When using a customizable / on-demand hosted identity provider, name, content, and inclusion in the userinfo endpoint
# will most likely need to be configured.
alpine.oidc.teams.claim=groups

alpine.database.mode=external
alpine.database.url=jdbc:sqlserver://localhost:1433;databaseName=dtrack
alpine.database.driver=com.microsoft.sqlserver.jdbc.SQLServerDriver
alpine.database.username=dtrack
alpine.database.password=password

alpine.database.mode=external
alpine.database.url=jdbc:mysql://localhost:3306/dtrack?autoReconnect=true&useSSL=false
alpine.database.driver=com.mysql.jdbc.Driver
alpine.database.username=dtrack
alpine.database.password=password

[mysqld] 
sql_mode="ANSI_QUOTES,STRICT_TRANS_TABLES,ONLY_FULL_GROUP_BY,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

alpine.database.mode=external
alpine.database.url=jdbc:postgresql://localhost:5432/dtrack
alpine.database.driver=org.postgresql.Driver
alpine.database.username=dtrack
alpine.database.password=password