github.com/letsencrypt/boulder@v0.20251208.0/test/proxysql/proxysql.cnf (about)

     1  datadir = "/var/lib/proxysql";
     2  errorlog = "/test/proxysql/proxysql.log";
     3  admin_variables =
     4  {
     5  	# https://proxysql.com/documentation/global-variables/admin-variables Note
     6  	# that while admin variables are documented with an 'admin-' prefix, they
     7  	# are specified in the configuration with the prefix stripped.
     8  	mysql_ifaces = "0.0.0.0:6032";
     9  	# admin:admin is only used for local connections. For remote connections,
    10  	# use radmin:radmin
    11  	admin_credentials = "admin:admin;radmin:radmin";
    12  	web_enabled = "true";
    13  	# Web UI is disabled by default.
    14  	web_port = 6080;
    15  	# These are the credentials used for the web interface.
    16  	stats_credentials = "stats:stats";
    17  	debug = True;
    18  };
    19  mysql_variables =
    20  {
    21  	threads = 4;
    22  	max_connections = 10240;
    23  	have_compress = True;
    24  	poll_timeout = 2000;
    25  	interfaces = "0.0.0.0:6033";
    26  	stacksize = 1048576;
    27  	max_allowed_packet = 16777216;
    28  	# Allow up to 20 seconds to find a server, to limit how many failures
    29  	# Boulder sees when we do a primary swap
    30  	connect_timeout_server = 20000;
    31  	connect_timeout_server_max = 20000;
    32  	monitor_username = "proxysql";
    33  	monitor_password = "";
    34  	monitor_history = 600000;
    35  	monitor_connect_interval = 60000;
    36  	monitor_ping_interval = 10000;
    37  	monitor_read_only_interval = 1000;
    38  	monitor_read_only_timeout = 500;
    39  	monitor_writer_is_also_reader = False;
    40  	commands_stats = True;
    41  	sessions_sort = True;
    42  	connect_retries_on_failure = 10;
    43  	# Keep 90% of configured connections open.
    44  	free_connections_pct = 90;
    45  	connection_warming = True;
    46  	# If mysql_query_rules are marked log=1, they will be logged here. If unset,
    47  	# no queries are logged.
    48  	# eventslog_filename="/test/proxysql/events.log"
    49  	eventslog_filesize = 104857600;
    50  	eventslog_default_log = 1;
    51  	# The audit logs, if unset, are not logged. If set, every connection gets
    52  	# logged. Given Boulder's connection strategy, this can be noisy.
    53  	# auditlog_filename="/test/proxysql/audit.log"
    54  	auditlog_filesize = 104857600;
    55  };
    56  mysql_servers =
    57  (
    58  	{
    59  		address = "boulder-mariadb";
    60  		port = 3306;
    61  		hostgroup = 0;
    62  		max_connections = 100;
    63  		max_latency_ms = 200;
    64  	}
    65  );
    66  mysql_users =
    67  (
    68  	{
    69  		username = "root";
    70  	},
    71  	{
    72  		username = "policy";
    73  	},
    74  	{
    75  		username = "sa";
    76  	},
    77  	{
    78  		username = "sa_ro";
    79  	},
    80  	{
    81  		username = "ocsp_resp";
    82  	},
    83  	{
    84  		username = "revoker";
    85  	},
    86  	{
    87  		username = "importer";
    88  	},
    89  	{
    90  		username = "mailer";
    91  	},
    92  	{
    93  		username = "cert_checker";
    94  	},
    95  	{
    96  		username = "test_setup";
    97  	},
    98  	{
    99  		username = "badkeyrevoker";
   100  	},
   101  	{
   102  		username = "incidents_sa";
   103  	}
   104  );
   105  mysql_query_rules =
   106  (
   107  	{
   108  		rule_id = 1;
   109  		active = 1;
   110  		match_digest = ".";
   111  		log = 0;
   112  		apply = 0;
   113  	},
   114  	{
   115  		rule_id = 10;
   116  		username = "sa";
   117  		timeout = 4900;
   118  	},
   119  	{
   120  		rule_id = 11;
   121  		username = "sa_ro";
   122  		timeout = 4900;
   123  	},
   124  	{
   125  		rule_id = 16;
   126  		username = "badkeyrevoker";
   127  		timeout = 3600000;
   128  	},
   129  	{
   130  		rule_id = 17;
   131  		username = "mailer";
   132  		timeout = 1800000;
   133  	},
   134  	{
   135  		rule_id = 18;
   136  		username = "ocsp_resp";
   137  		timeout = 4900;
   138  	}
   139  );
   140  scheduler =
   141  (
   142  
   143  );