Meta tags:
description= The /etc/opscode/chef-server.rb file contains all of the non-default
configuration settings used by the Chef Infra Server. The default
settings are built into the Chef Infra Server configuration and should
only be added to the chef-server.rb file to apply non-default values.
These configuration settings are processed when the
chef-server-ctl reconfigure command is run. The chef-server.rb file
is a Ruby file, which means that conditional statements can be used
within it.
Settings
The following sections describe the various settings that are available
in the chef-server.rb file.;
Headings (most frequently used words):
opscode, chef, settings, oc, opensearch, server, rb, optional, general, bookshelf, bootstrap, compliance, forwarding, dark_launch, data_collector, estatsd, jetty, lb, lb_internal, ldap, nginx, oc_bifrost, oc_chef_authz, pedant, id, mover, erchef, expander, solr4, external, elasticsearch, postgresql, rabbitmq, redis_lb, upgrades, user, required_recipe,
Text of the page (most frequently used words):
the (877), value (570), default (497), chef (367), #server (216), infra (173), for (159), this (109), opscode (99), log (97), and (93), which (92), postgresql (88), service (88), that (84), data (82), nginx (80), are (74), setting (73), rabbitmq (72), true (66), set (64), settings (62), directory (60), enable (59), opscode_erchef (57), used (54), number (54), ldap (53), configuration (53), with (52), opensearch (51), file (51), recommended (51), when (50), user (48), eol (48), var (47), management (46), overview (46), bookshelf (43), version (43), false (42), use (41), maximum (41), files (40), elasticsearch (39), will (37), install (37), nodes (35), 127 (35), amount (35), external (34), opt (33), automate (33), oc_bifrost (32), node (32), following (32), rotation (32), redis_lb (31), port (31), connection (31), has (30), memory (30), num_to_keep (30), builder (30), stored (29), api (29), client (29), file_maxbytes (29), configure (29), ctl (28), database (28), aws (28), oc_id (28), deployment (28), not (26), address (26), http (25), only (23), search (23), nil (23), name (23), seconds (23), about (23), policy (22), supermarket (22), must (22), time (22), note (22), opscode_solr4 (22), users (22), values (21), password (21), system (21), new (21), data_collector (20), from (20), habitat (20), compliance (19), run (19), manage (19), before (19), upgrade (19), listen (18), using (18), opscode_chef_mover (18), collector (18), request (17), log_directory (17), than (17), ssl (17), azure (17), example (17), config (17), packages (17), all (16), you (16), can (16), cookbook (16), may (16), username (16), working (16), dir (16), they (16), log_rotation (16), prem (16), secrets (15), virtual (15), possible (15), exceed (15), specified (15), solr (15), allowed (15), cookbooks (14), queue (14), 104857600 (14), rotated (14), requests (14), pool (14), apache (14), available (14), stub_status (14), backend (14), license (14), reference (14), between (13), community (13), should (13), command (13), keys (13), secret (13), generated (13), vip (13), defined (13), actions (13), also (13), index (13), workstation (13), any (12), estatsd (12), applications (12), create (12), size (12), versions (12), plugin (12), com (12), url (12), console (12), sql_user (12), add (12), 360 (12), managed (12), see (11), solr4 (11), erchef (11), oc_chef_authz (11), dark_launch (11), amazon (11), application (11), platform (11), frequency (11), defaults (11), information (11), milliseconds (11), made (11), organization (11), organizations (11), upgrades (10), expander (10), storage (10), authentication (10), location (10), specify (10), services (10), remove (10), more (10), tlsv1 (10), host (10), connections (10), configured (10), package (10), updates (10), update (10), resources (10), backup (10), restore (10), effortless (10), recovery (10), saas (10), started (10), bootstrap (9), your (9), every (9), token (9), whether (9), override (9), timeout (9), key (9), disk (9), bind (9), active (9), endpoint (9), required (9), heap_size (9), java_opts (9), out (9), running (9), access (9), origin (9), security (9), other (8), page (8), lb_internal (8), where (8), feature (8), enabled (8), such (8), legacy (8), 10000 (8), logging (8), data_dir (8), worker (8), length (8), monitor (8), get (8), new_size (8), machine (8), private (8), logs (8), style (8), load (8), email (8), fqdn (8), https (8), company (8), supported (8), certificate (8), cloud (8), prerequisites (8), disaster (8), requirements (8), desktop (8), guide (8), certificates (8), iam (8), does (7), required_recipe (7), mover (7), jetty (7), forwarding (7), general (7), non (7), store (7), objects (7), wait (7), high (7), options (7), 100 (7), messages (7), disable (7), greater (7), cache (7), equal (7), depends (7), opscode_expander (7), response (7), bind_password (7), xdl_defaults (7), cluster (7), terms (6), pedant (6), optional (6), feedback (6), each (6), based (6), tokens (6), results (6), via (6), group (6), path (6), clients (6), list (6), under (6), least (6), availability (6), append (6), always (6), instead (6), base (6), exceeds (6), work (6), sent (6), encryption (6), have (6), format (6), would (6), hostname (6), then (6), queries (6), documents (6), etc (6), send (6), sec (6), fqdns (6), protocol (6), local (6), ports (6), deprecated (6), login (6), commands (6), audit (6), migrate (6), inspec (6), cookstyle (6), troubleshooting (6), integrations (6), dashboard (6), enterprise (6), names (5), their (5), licensing (5), support (5), connect (5), minutes (5), 1000 (5), starting (5), return (5), warning (5), 30000 (5), count (5), duration (5), start (5), unique (5), front (5), db_superuser (5), text (5), require (5), total (5), 1024 (5), normally (5), assumes (5), my_postgresql (5), postgres (5), checkpoint (5), favor (5), script (5), single (5), located (5), performance (5), read (5), times (5), content (5), header (5), roles (5), oc_chef_pedant (5), authorization (5), compression (5), fips (5), manager (5), attribute (5), distinguished (5), bind_dn (5), resource (5), profiles (5), download (5), setup (5), progress (4), trademarks (4), owners (4), field (4), document (4), into (4), added (4), these (4), ruby (4), within (4), view (4), enables (4), oauth (4), credentials (4), properly (4), like (4), bags (4), object (4), administrator (4), bin (4), home (4), redis (4), expired (4), random (4), those (4), error (4), keepalive (4), topology (4), minimum (4), connect_timeout (4), 5000 (4), fail (4), capacity (4), localhost (4), being (4), permission (4), mode (4), integer (4), zero (4), directly (4), ignored (4), calculated (4), here (4), heap (4), less (4), many (4), often (4), jvm_opts (4), item (4), temporary (4), scripts (4), plugins (4), committed (4), incoming (4), rate (4), processes (4), increase (4), usage (4), during (4), runs (4), ensure (4), reconfigure (4), sql_connection_user (4), timing (4), point (4), ec2 (4), configuring (4), without (4), reindex_sleep_min_ms (4), reindex_sleep_max_ms (4), verify (4), open (4), maintained (4), db_pool_size (4), host_header (4), sql_password (4), lowercase (4), module (4), enable_non_ssl (4), type (4), gzip (4), ssl_enabled (4), corporate (4), anonymous (4), upstream (4), formatting (4), balancer (4), root_url (4), signed (4), standalone (4), downloads (4), uninstall (4), groups (4), saml (4), packs (4), apis (4), quick (4), deprecations (4), cops (4), firewalls (4), core (4), origins (4), profile (4), minio (4), enrollment (4), infrastructure (4), getting (4), migration (4), courier (4), jobs (4), app (4), integration (4), a2ha (4), premises (4), platforms (4), edition (4), product (3), software (3), one (3), 2025 (3), table (3), contents (3), how (3), github (3), including (3), uses (3), provider (3), privileged (3), root (3), level (3), changes (3), systems (3), self (3), docs (3), shell (3), pattern (3), volatile (3), frequently (3), write (3), fsync (3), current (3), larger (3), same (3), vhost (3), tls (3), reindexer (3), array (3), ibrowse (3), _status (3), identity (3), provide (3), megabytes (3), currently (3), account (3), shared (3), query (3), statement (3), private_chef (3), superuser (3), segments (3), faster (3), determine (3), attempts (3), whichever (3), mbs (3), there (3), enough (3), characteristics (3), increases (3), fewer (3), several (3), hundred (3), 3gb (3), 9200 (3), external_url (3), able (3), tuned (3), too (3), occur (3), hash (3), variables (3), retry (3), failure (3), 2000 (3), failed (3), attempt (3), both (3), large (3), part (3), enable_request_logging (3), updated (3), keep (3), place (3), environments (3), min (3), domain (3), output (3), bifrost (3), listens (3), previous (3), secure (3), macos (3), windows (3), end (3), rc4 (3), communication (3), forwarded (3), json (3), xml (3), balancers (3), group_dn (3), members (3), memberof (3), employees (3), statsd (3), report (3), accept (3), orgname (3), collection (3), sql (3), storage_type (3), filesystem (3), frontend (3), notifications (3), addons (3), herein (2), corporation (2), its (2), subsidiaries (2), affiliates (2), appropriate (2), rights (2), contained (2), reserved (2), respective (2), modified (2), cookie (2), improve (2), yes (2), contains (2), apply (2), statements (2), simple (2), compatible (2), ensures (2), process (2), message (2), indexed (2), recipe (2), who (2), target (2), embedded (2), 300 (2), idle (2), change (2), 900 (2), noeviction (2), randomly (2), lru (2), don (2), expire (2), allkeys (2), applied (2), reached (2), notice (2), debug (2), databases (2), dump (2), per (2), after (2), operating (2), rewritten (2), keydb (2), because (2), conjunction (2), route (2), comma (2), separated (2), pairs (2), age (2), initial (2), cull (2), interval (2), observed (2), analytics (2), stop (2), monitored (2), full (2), identifier (2), management_password (2), consumer (2), published (2), consumer_id (2), automatically (2), publishes (2), publish (2), actions_user (2), pgsql (2), 128 (2), passwords (2), md5_auth_cidr_addresses (2), trust_auth_cidr_addresses (2), to_i (2), dedicated (2), caching (2), md5 (2), max_connections (2), respond (2), probes (2), ram (2), checkpoints (2), completion (2), percentage (2), finish (2), next (2), done (2), sizes (2), learn (2), 16th (2), bounded (2), equivalent (2), optionn (2), xoption2 (2), xoption1 (2), placed (2), entries (2), jvm (2), initial_cluster_join_timeout (2), enable_gc_log (2), tmp (2), startup (2), creates (2), immediately (2), below (2), temp_directory (2), scripts_directory (2), plugins_directory (2), paths (2), indexing (2), specifies (2), 8983 (2), flushed (2), environment (2), newsize (2), increased (2), carefully (2), blocked (2), short (2), asked (2), actually (2), but (2), 60000 (2), matching (2), track_total_hits (2), affects (2), actor (2), result (2), returned (2), strict_search_result_acls (2), acl (2), searches (2), skip (2), opscode_chef (2), urls (2), s3_url_ttl (2), off (2), sending (2), sleep (2), retrying (2), retries (2), delayed (2), miliseconds (2), delay (2), body (2), max_cache_size (2), 256 (2), ibrowse_max_sessions (2), ibrowse_max_pipeline_size (2), dependency (2), problems (2), errors (2), given (2), stale (2), entry (2), cbv_cache_enabled (2), enabling (2), receive (2), old (2), 3600 (2), cache_ttl (2), bulk_fetch_batch_size (2), links (2), derived (2), handle (2), sql_database (2), api_fqdn (2), outbound (2), onetrust (2), enable_onetrust (2), from_email (2), similar (2), named (2), ibrowse_options (2), http_max_count (2), http_max_connection_duration (2), http_max_age (2), http_init_count (2), http_cull_interval (2), sql_ro_user (2), sql_ro_password (2), worker_connections (2), worker_processes (2), determines (2), addresses (2), strict_host_header (2), time_iso8601 (2), listen_port (2), listen_host (2), allow_list (2), ssl_protocols (2), releases (2), later (2), older (2), 443 (2), ssl_port (2), ssl_ciphers (2), sendfile (2), redirects (2), webui (2), non_ssl_port (2), 31536000 (2), javascript (2), most (2), earlier (2), reindex (2), export (2), csc_lb_url (2), allow (2), first (2), 636 (2), tls_enabled (2), abcxyz (2), enter (2), terminal (2), leave (2), domainuser (2), escape (2), typically (2), base_dn (2), 600 (2), health (2), proxy (2), proxies (2), fully (2), qualified (2), authenticated (2), arriving (2), org (2), reporting (2), owner (2), secret_access_key (2), access_key_id (2), licensed (2), insecure_addon_compat (2), remediation (2), release (2), notes (2), share (2), what (2), scaffolding (2), attributehelper (2), attributedefault (2), useplatformhelpers (2), unnecessaryplatformcasestatement (2), unnecessaryoscheck (2), trueclassfalseclassresourceproperties (2), simplifyplatformmajorversioncheck (2), overlycomplexsupportsdependsmetadata (2), negatingonlyif (2), includerecipewithparentheses (2), immediatenotificationtiming (2), filemode (2), defaultcopyrightcomments (2), copyrightcommentformat (2), commentsentencespacing (2), commentformat (2), chefwhaaat (2), attributekeys (2), invalidlicensestring (2), insecurecookbookurl (2), includeresourceexamples (2), includeresourcedescriptions (2), includepropertydescriptions (2), emptymetadatafield (2), defaultmetadatamaintainer (2), sharing (2), sshprivatekey (2), unlessdefinedrequire (2), requirenethttps (2), legacypowershelloutmethods (2), gemspecrequirerubygems (2), gemspeclicense (2), usecreateifmissing (2), unnecessarynameproperty (2), unnecessarydesiredstate (2), suggestsmetadata (2), stringpropertywithnildefault (2), sensitivepropertyinresource (2), resourcewithnothingaction (2), replacesmetadata (2), recipemetadata (2), providesmetadata (2), propertywithrequiredanddefault (2), propertysplatregex (2), ohaiattributetostring (2), namepropertyisrequired (2), multipleplatformchecks (2), longdescriptionmetadata (2), groupingmetadata (2), doublecompiletime (2), customresourcewithallowedactions (2), conflictsmetadata (2), attributemetadata (2), aptrepositorynotifiesaptupdate (2), aptrepositorydistributiondefault (2), redundantcode (2), zipfileresource (2), windowszipfileusage (2), windowsscresource (2), windowsregistryuac (2), whyrunsupportedtrue (2), useszypperrepo (2), userequirerelative (2), usemultipackageinstalls (2), usecheflanguagesystemdhelper (2), usecheflanguageenvhelpers (2), usecheflanguagecloudhelpers (2), usebuildessentialresource (2), unnecessarymixlibshelloutrequire (2), unnecessarydependschef15 (2), unnecessarydependschef14 (2), sysctlparamresource (2), simplifyaptppasetup (2), shellouttochocolatey (2), shellouthelper (2), sevenziparchiveresource (2), setorreturninresources (2), respondtoresourcename (2), respondtoprovides (2), respondtoinmetadata (2), respondtocompiletime (2), resourcenamefrominitialize (2), resourceforcingcompiletime (2), providesfrominitialize (2), propertywithnameattribute (2), powershellscriptexpandarchive (2), powershellinstallwindowsfeature (2), powershellinstallpackage (2), powershellguardinterpreter (2), osxconfigprofileresource (2), opensslx509resource (2), opensslrsakeyresource (2), noderolesinclude (2), nodeinitpackage (2), minitesthandlerusage (2), macosxuserdefaults (2), libarchivefileresource (2), legacyberksfilesource (2), includingwindowsdefaultrecipe (2), includingohaidefaultrecipe (2), includingmixinshelloutinresources (2), includingaptdefaultrecipe (2), ifprovidesdefaultaction (2), foodcriticcomments (2), executetzutil (2), executesysctl (2), executesleep (2), executescexe (2), executeaptupdate (2), emptyresourceinitializemethod (2), dslincludeinresource (2), dependsonzyppercookbook (2), dependsonwindowsfirewallcookbook (2), dependsontimezonelwrpcookbook (2), dependsonopensslcookbook (2), dependsonlocalecookbook (2), dependsonkernelmodulecookbook (2), dependsonchocolateycookbooks (2), dependsonchefvaultcookbook (2), definitions (2), defineschefspecmatchers (2), defaultactionfrominitialize (2), declareactionclass (2), databaghelpers (2), customresourcewithattributes (2), cronmanageresource (2), crondfileortemplate (2), conditionalusingtest (2), classevalactionclass (2), chefgemnokogiri (2), allowedactionsfrominitialize (2), actionmethodinresource (2), modernize (2), searchforenvironmentsorroles (2), dependschefvault (2), cookbookusessearch (2), cookbookusesroles (2), cookbookusespolicygroups (2), cookbookusesenvironments (2), cookbookusesdatabags (2), chefvaultused (2), berksfile (2), windowsversionhelpers (2), windowstaskchangeaction (2), windowspackageinstallertypestring (2), windowsfeatureservermanagercmd (2), verifypropertyusesfileexpansion (2), useyamldump (2), usesruncommandhelper (2), usesdeprecatedmixins (2), useschefresthelpers (2), userdeprecatedsupportsproperty (2), useinlineresourcesdefined (2), useautomaticresourcename (2), searchusespositionalparameters (2), rubyblockcreateaction (2), ruby27keywordargumentwarnings (2), resourcewithoutunifiedtrue (2), resourceusesupdatedmethod (2), resourceusesproviderbasemethod (2), resourceusesonlyresourcename (2), resourceusesdslnamemethod (2), resourceoverridesprovidesmethod (2), resourceinheritsfromcompatresource (2), requirerecipe (2), powershellcookbookhelpers (2), policyfilecommunitysource (2), poisearchiveusage (2), partialsearchhelperusage (2), partialsearchclassusage (2), nodesetwithoutlevel (2), nodesetunless (2), nodeset (2), nodemethodsinsteadofattributes (2), nodedeepfetch (2), namepropertywithdefaultvalue (2), macosuserdefaultsglobalproperty (2), logresourcenotifications (2), localedeprecatedlcallproperty (2), librarianchefspec (2), legacyyumcookbookrecipes (2), legacynotifysyntax (2), launchddeprecatedhashproperty (2), includingyumdnfcompatrecipe (2), includingxmlrubyrecipe (2), hwrpwithoutunifiedtrue (2), hwrpwithoutprovides (2), foodcritictesting (2), foodcriticfile (2), executerelativecreateswithoutcwd (2), executepathproperty (2), erlcallresource (2), epicfail (2), eolauditmodeusage (2), easyinstallresource (2), deprecatedyumrepositoryproperties (2), deprecatedyumrepositoryactions (2), deprecatedwindowsversioncheck (2), deprecatedsudoactions (2), deprecatedshelloutmethods (2), deprecatedplatformmethods (2), deprecatedchefspecplatform (2), dependsonomnibusupdatercookbook (2), dependsonchefreportingcookbook (2), dependsonchefnginxcookbook (2), delivery (2), cookbooksdependsonself (2), cookbookdependsonpoise (2), cookbookdependsonpartialsearch (2), cookbookdependsoncompatresource (2), chocolateypackageuninstallaction (2), chefwindowsplatformhelper (2), chefsugarhelpers (2), chefspeclegacyrunner (2), chefspeccoveragereport (2), chefshellout (2), chefrewind (2), chefhandlerusessupports (2), chefhandlerrecipe (2), cheffile (2), chefdkgenerators (2), tmppath (2), supportsmustbefloat (2), serviceresource (2), scopedfileexist (2), resourcewithnoneaction (2), resourcesetsnameproperty (2), resourcesetsinternalproperties (2), propertywithouttype (2), powershellscriptdeletefile (2), powershellfileexists (2), opensslpasswordhelpers (2), octalmodeasstring (2), notifiesactionnotsymbol (2), nodenormalunless (2), nodenormal (2), metadatamissingversion (2), metadatamissingname (2), metadatamalformeddepends (2), malformedplatformvalueforplatformhelper (2), macosuserdefaultsinvalidtype (2), lazyinresourceguard (2), lazyevalnodeattributedefaults (2), invalidversionmetadata (2), invalidplatformvalueforplatformhelper (2), invalidplatformvalueforplatformfamilyhelper (2), invalidplatformmetadata (2), invalidplatformincase (2), invalidplatformhelper (2), invalidplatformfamilyincase (2), invalidplatformfamilyhelper (2), invalidnotificationtiming (2), invalidnotificationresource (2), invaliddefaultaction (2), invalidcookbookname (2), incorrectlibraryinjection (2), emptyresourceguard (2), dnfpackageallowdowngrades (2), cookbookusesnodesave (2), conditionalrubyshellout (2), chefapplicationfatal (2), blockguardwithonlystring (2), correctness (2), v25 (2), v26 (2), tuning (2), tiered (2), installation (2), airgap (2), planning (2), plan (2), refresh (2), strategy (2), membership (2), rbac (2), rotate (2), certs (2), separate (2), scale (2), artifactory (2), artifact (2), warm (2), spare (2), env (2), windows_update_settings (2), windows_power_management (2), windows_password_policy (2), windows_ie_esc (2), windows_firewall (2), windows_disk_encryption (2), windows_desktop_winrm_settings (2), windows_desktop_screensaver (2), windows_defender_exclusion (2), windows_defender (2), windows_choco_installer (2), windows_automatic_logout (2), windows_app_management (2), windows_admin_control (2), rescue_account (2), macos_power_management (2), macos_password_policy (2), macos_firewall (2), macos_disk_encryption (2), macos_desktop_screensaver (2), macos_automatic_software_updates (2), macos_automatic_logout (2), macos_app_management (2), macos_admin_control (2), touch (2), redirect (2), sso (2), opsworks (2), skills (2), administration (2), guides (2), enroll (2), clis (2), san (2), best (2), practices (2), flags (2), cli (2), architecture (2), incident (2), servicenow (2), marketplace (2), scan (2), reports (2), eas (2), event (2), feed (2), teams (2), policies (2), projects (2), lifecycle (2), feeds (2), cleanup (2), monitoring (2), centralize (2), ingestion (2), invalid (2), telemetry (2), session (2), disclosure (2), panel (2), banner (2), topics (2), bastion (2), sudo (2), rds (2), vpc (2), cidr (2), faqs (2), benchmarks (2), custom (2), bootstrapping (2), generation (2), existing (2), efs (2), back (2), customer (2), airgapped (2), tutorial (2), shortcodes (2), matter (2), reuse (2), hugo (2), procedures (2), tables (2), headings (2), notices (2), markdown (2), lists (2), linking (2), tools (2), house (2), contribute (2), guidelines (2), contributions (2), commercial (2), training (2), blog (2), main (2), certain, registered, countries, markings, inclusion, imply, endorsement, affiliation, sponsorship, copyright, 2026, last, january, privacy, trademark, site, map, thank, submit, fill, ask, contact, still, stuck, edit, help, was, helpful, built, processed, means, conditional, recipes, templates, associated, authorized, issued, special, pulled, indexes, searching, timely, serve, owned, world, writeable, allows, regardless, targeted, expert, practitioners, delivering, isolated, agent, further, explanation, found, development, saves, save, save_frequency, 16379, nearest, ttl, operation, maxmemory_policy, bytes, maxmemory, verbose, loglevel, asynchronously, appendonly, once, second, everysec, let, flush, writes, waiting, appendfsync, compared, aof_rewrite_percent, 16mb, aof_rewrite_min_size, rehashing, activerehashing, onwards, underneath, functions, supposed, fork, continue, populate, ssl_versions, reindexer_vhost, rabbit_mgmt_timeout, rabbit_mgmt_ibrowse_options, rabbit_mgmt_http_max_count, rabbit_mgmt_http_max_connection_duration, rabbit_mgmt_http_max_age, rabbit_mgmt_http_init_count, rabbit_mgmt_http_cull_interval, queue_length_monitor_vhost, alaska, queue_length_monitor_queue, calls, overloaded, queue_length_monitor_timeout_millis, checked, queue_length_monitor_millis, queue_length_monitor_enabled, queue_at_capacity_affects_overall_status, prevent_erchef_startup_on_full_capacity, rabbit, nodename, 5672, node_port, node_ip_address, rabbitmgmt, management_user, 15672, management_port, management_enabled, drop_on_full_capacity, hotsauce, queued, drops, make, room, analytics_max_length, actions_vhost, actions_password, exchange, actions_exchange, 8mb, sorting, work_mem, hardcoded, user_path, 7200, pg_upgrade_timeout, clear, sslmode, 17179869184, shmmax, 4194304, shmall, shared_buffers, 5432, encrypt, hashes, 350, concurrent, logged, disabled, slow, log_min_duration_statement, source, listen_address, keepalives_interval, remain, resume, keepalives_idle, proves, dropping, keepalives_count, effective_cache_size, db_superuser_password, dashes, replaced, underscores, opscode_pgsql, db_connection_superuser, 30s, filled, checkpoint_warning, 5min, checkpoint_timeout, checkpoint_segments, quickly, relation, status, checkpoint_completion_target, documentation, supports, listening, raise, buffer, amout, pending, ram_buffer_size, secondary, polls, primary, poll_seconds, variable, segment, merge_factor, merged, 2147483647, max_merge_docs, complete, building, 100000, max_field_length, max_commit_docs, log_gc, empty, ip_address, ec11, smaller, commit_interval, soft, commit, triggered, auto_soft_commit, reindexer_log_directory, latency, calculating, exact, impact, capps, 000, validator, validation_client_name, 0022, umask, udp_socket_pool_size, could, affect, determined, redundant, checks, been, picks, batch, search_queue_mode, search_provider, opensearch_user, search_auth_username, search_auth_password, connecting, mainly, manually, eliminate, some, buckets, future, s3_url_type, 28800, bootstraps, specific, fifteen, 15m, s3_url_expiry_window_size, s3_parallel_ops_timeout, s3_parallel_ops_fanout, bucket, locations, s3_bucket, chefapi, root_metric_key, case, reindex_item_retries, 500, items, fetch, reindex_batch_size, 8000, serves, cached, nginx_bookshelf_caching, 2000000, 413, entity, max_request_size, include, server_version, include_version_in_status, enable_ibrowse_traces, premium, enable_actionlog, unsolved, depsolver, workers, seeing, 503, unavailable, pgrep, depselector, depsolver_worker_count, solved, depsolver_timeout, couchdb_max_conn, cleanup_batch_size, careful, increasing, resolved, increment, approach, updating, cbv_cache_item_ttl, very, long, worth, makes, incrementing, give, subsequent, cookbook_versions, deserialized, applies, base_resource_url, authz_timeout, authz_fanout, auth_skew, knife, allow_email_update_only_from_manage, sandboxes, erlang, areas, solr_timeout, solr_ibrowse_options, solr_http_max_count, solr_http_max_connection_duration, solr_http_max_age, solr_http_init_count, solr_http_cull_interval, od_id, 9090, onetrust_id, consent, verification, email_from_address, none, mycompany, auth, chef_oauth2, callback, redirect_uri, define, user1, user2, administrators, webui_priv, pem, traffic, log_http_requests, tests, debug_org_creation, max_connection_request_limit, established, oc_erchef, authz, superuser_id, bifrost_ro, 9463, extended_perf_log, failures, indicate, ran, x_forwarded_proto, cpu, 10240, simultaneous, welcome, shown, show_welcome_page, useful, combination, use_implicit_hosts, jun, 2018, 0900, time_local, 2020, 21t07, time_format, tcp, transactions, tcp_nopush, nagle, buffering, algorithm, tcp_nodelay, nginx_status, 9999, accessing, matches, state, province, region, ssl_state_name, enhanced, defaulted, linux, unix, necessary, life, operations, ssl_organizational_unit_name, seattle, city, ssl_locality_name, ssl_email_address, country, ssl_country_name, youcorp, ssl_company_name, psk, cipher, suites, establish, aes256, ecdhe, forward, drop, prefix, link, sha, rsa, ssl_certificate_key, over, ssl_certificate, server_name, copy, descriptors, bound, otherwise, requires, master, nginx_no_root, http_x_forwarded_for, remote_addr, log_x_forwarded_for, keepalive_timeout, year, 63072000, till, browser, caches, hsts, hsts_max_age, rss, css, plain, mime, types, gzip_types, gzip_proxied, depending, gzip_http_version, fastest, slowest, gzip_comp_level, enable_stub_status, termination, hardware, endpoints, internet, ipv6, enable_ipv6, 250m, accepted, indicated, client_max_body_size, 5000m, parameter, directive, removes, recently, proxy_cache_path, max_size, cache_max_size, descriptive, displayed, interface, display, strings, system_adjective, cause, simple_tls, 389, configurations, samaccountname, holds, login_attribute, sure, resolve, filters, works, servers, openldap, overlay, provides, binding, unset, sufficient, need, characters, escaped, backslash, character, perform, needs, blank, exist, structure, missing, unable, proceed, 9683, oc_bifrost_port, 9680, chef_port, 9685, account_port, internal, couchdb_organizations, couchdb_groups, couchdb_containers, couchdb_associations, couchdb_association_requests, couchdb_acls, 503_mode, web_ui_fqdn, redis_keepalive_timeout, redis_connection_timeout, 250, redis_connection_pool_size, maint_refresh_interval, chef_server_webui, chef_min_version, chef_max_version, cache_cookbook_files, ban_refresh_interval, statistics, 9466, boolean, controls, included, overall, healthy, cannot, health_check, passed, choose, reject, check, signature, right, just, present, appended, correctly, uri, look, my_automate_server, sql_users, performs, quick_start, new_theme, add_type_and_bag_to_items, expected, indicates, generally, stream, downloading, improved, especially, behavior, stream_download, instances, 4321, tier, manual, role, addressed, notification_email, www, pricing, visit, upgrade_url, donotreply, invitations, installed, install_path, supporting, compatibility, rendering, written, kernel, force, flavor, org_name, default_orgname, api_version, reconfigured, sections, describe, various, menu,
Text of the page (random words):
value true oc_id email_from_address outbound email address defaults to the from_email value oc_id enable_onetrust whether to enable onetrust cookie consent verification default value false new in chef infra server 15 9 20 oc_id onetrust_id the onetrust data domain script id for chef infra you must also set oc_id enable_onetrust to true default value nil new in chef infra server 15 9 27 oc_id log_directory the directory in which log data is stored the default value is the recommended value default value var opt opscode oc_id oc_id log_rotation the log rotation policy for this service log files are rotated when they exceed file_maxbytes the maximum number of log files in the rotation is defined by num_to_keep default value file_maxbytes 104857600 num_to_keep 10 oc_id origin the fqdn for the server that is sending outbound email fqdns must always be in lowercase defaults to the api_fqdn value which is the fqdn for the chef infra server oc_id num_to_keep the number of log files to keep default value 10 oc_id port the port on which the service is to listen default value 9090 oc_id sql_connection_user the postgresql user name in username hostname format e g oc_id my_postgresql postgres database azure com where username would normally equal the value of oc_id sql_user default od_id this setting is required in an external azure postgresql database as a service configuration if set to nil chef infra server assumes that the database is not on azure and the postgresql connection will be made using the value specified in oc_id sql_user default value nil oc_id sql_database the name of the database default value oc_id oc_id sql_password the password for the sql_user default value generated to override the default value use the secrets management command chef server ctl set secret oc_id sql_password oc_id sql_user the user with permission to write to sql_database default value oc_id oc_id vip the virtual ip address default value 127 0 0 1 opscode chef mover this configuration file has the following settings for opscode chef mover opscode_chef_mover bulk_fetch_batch_size setting eol in chef infra server 14 default value 5 opscode_chef_mover cache_ttl setting eol in chef infra server 14 default value 3600 opscode_chef_mover db_pool_size setting eol in chef infra server 14 the number of open connections to postgresql that are maintained by the service default value 5 opscode_chef_mover data_dir setting eol in chef infra server 14 the directory in which on disk data is stored the default value is the recommended value default value var opt opscode opscode chef mover data opscode_chef_mover dir setting eol in chef infra server 14 the working directory the default value is the recommended value default value var opt opscode opscode chef mover opscode_chef_mover enable setting eol in chef infra server 14 enable a service default value true opscode_chef_mover ibrowse_max_pipeline_size setting eol in chef infra server 14 default value 1 opscode_chef_mover ibrowse_max_sessions setting eol in chef infra server 14 default value 256 opscode_chef_mover log_directory the directory in which log data is stored the default value is the recommended value default value var log opscode opscode chef mover opscode_chef_mover log_rotation the log rotation policy for this service log files are rotated when they exceed file_maxbytes the maximum number of log files in the rotation is defined by num_to_keep default value file_maxbytes 104857600 num_to_keep 10 opscode_chef_mover max_cache_size setting eol in chef infra server 14 default value 10000 opscode_chef_mover solr_http_cull_interval setting eol in chef infra server 14 default value 1 min opscode_chef_mover solr_http_init_count setting eol in chef infra server 14 default value 25 opscode_chef_mover solr_http_max_age setting eol in chef infra server 14 default value 70 sec opscode_chef_mover solr_http_max_connection_duration setting eol in chef infra server 14 default value 70 sec opscode_chef_mover solr_http_max_count setting eol in chef infra server 14 default value 100 opscode_chef_mover solr_ibrowse_options setting eol in chef infra server 14 default value connect_timeout 10000 opscode_chef_mover solr_timeout setting eol in chef infra server 14 default value 30000 opscode erchef the opscode erchef service is an erlang based service that is used to handle chef infra server api requests to the following areas within the chef infra server cookbooks data bags environments nodes roles sandboxes search this configuration file has the following settings for opscode erchef opscode_erchef allow_email_update_only_from_manage set to true users can only update their email from the chef management console set to false users can update their email using knife and the chef management console default value false new in chef infra server 14 5 opscode_erchef auth_skew default value 900 opscode_erchef authz_fanout default value 20 opscode_erchef authz_timeout the amount of time in seconds before a request to the oc_bifrost service times out default value 2000 opscode_erchef base_resource_url the base url to which the service is to return links to api resources use host_header to ensure the url is derived from the host header of the incoming http request default value host_header opscode_erchef bulk_fetch_batch_size the number of nodes that may be deserialized currently only applies to the search endpoint in the chef infra server api the default value is the recommended value default value 5 opscode_erchef cache_ttl default value 3600 opscode_erchef cbv_cache_enabled whether to enable cookbook version response caching if you frequently see very long response times from cookbook_versions when under load this is worth enabling enabling this makes it possible for a client to receive stale results when a cookbook is updated in place without incrementing the version and the old response has not expired from the cache the infra server will give the old response to the client subsequent client runs will receive the updated response possible values true false default value false new in chef infra server 14 11 opscode_erchef cbv_cache_item_ttl the maximum time in milliseconds that chef infra server will keep any given cookbook version response in the cache when when cbv_cache_enabled is enabled default value 30000 note be careful if increasing this number requests for a given set of cookbook versions will be stale if the resolved cookbook versions are updated before the cache entry times out this will not occur if you increment the version of a cookbook with every cookbook update which is the recommended approach to updating cookbooks opscode_erchef cleanup_batch_size default value 0 opscode_erchef couchdb_max_conn default value 100 opscode_erchef db_pool_size the number of open connections to postgresql that are maintained by the service default value 20 opscode_erchef depsolver_timeout the amount of time in milliseconds to wait for cookbook dependency problems to be solved default value 5000 opscode_erchef depsolver_worker_count the number of ruby processes for which cookbook dependency problems are unsolved use the pgrep fl depselector command to verify the number of depsolver workers that are running if you are seeing 503 service unavailable errors increase this value default value 5 opscode_erchef dir the working directory the default value is the recommended value default value var opt opscode opscode erchef opscode_erchef enable enable a service default value true opscode_erchef enable_actionlog use to enable chef actions a premium feature of the chef infra server default value false opscode_erchef enable_request_logging use to configure request logging for the opscode_erchef service default value true opscode_erchef ibrowse_max_pipeline_size default value 1 opscode_erchef ibrowse_max_sessions default value 256 opscode_erchef enable_ibrowse_traces use to configure ibrowse logging for the opscode_erchef service default value false new in chef infra server 14 11 opscode_erchef include_version_in_status set to true to include server_version as part of the _status endpoint default value false new in chef infra server 14 1 opscode_erchef listen the ip address on which the service is to listen default value 127 0 0 1 opscode_erchef log_directory the directory in which log data is stored the default value is the recommended value default value var log opscode opscode erchef opscode_erchef log_rotation the log rotation policy for this service log files are rotated when they exceed file_maxbytes the maximum number of log files in the rotation is defined by num_to_keep default value file_maxbytes 104857600 num_to_keep 10 opscode_erchef max_cache_size default value 10000 opscode_erchef max_request_size when the request body size is greater than this value a 413 request entity too large error is returned default value 2000000 opscode_erchef nginx_bookshelf_caching whether nginx is used to cache cookbooks when on nginx serves up the cached content instead of forwarding the request default value off opscode_erchef port the port on which the service is to listen default value 8000 opscode_erchef reindex_batch_size the number of items to fetch from the database and send to the search index at a time default value 10 opscode_erchef reindex_sleep_min_ms the minimum number of milliseconds to sleep before retrying a failed attempt to index an item retries are delayed a random number of miliseconds between reindex_sleep_min_ms and reindex_sleep_max_ms set both this and reindex_sleep_max_ms to 0 to retry without delay default value 500 opscode_erchef reindex_sleep_max_ms the maximum number of milliseconds to sleep before retrying a failed attempt to index an item retries are delayed a random number of miliseconds between reindex_sleep_min_ms and reindex_sleep_max_ms set both this and reindex_sleep_min_ms to 0 to retry without delay default value 2000 opscode_erchef reindex_item_retries the number of times to retry sending an object for indexing in the case of failure default value 3 opscode_erchef root_metric_key default value chefapi opscode_erchef s3_bucket the name of the amazon simple storage service s3 bucket this may point at external storage locations such as amazon ec2 see aws external bookshelf settings for more information on configuring external bookshelf opscode_erchef s3_parallel_ops_fanout default value 20 opscode_erchef s3_parallel_ops_timeout default value 5000 opscode_erchef s3_url_expiry_window_size the frequency at which unique urls are generated this value may be a specific amount of time i e 15m fifteen minutes or a percentage of the value of s3_url_ttl i e 10 default value off opscode_erchef s3_url_ttl the amount of time in seconds before connections to the server expire if node bootstraps are timing out increase this setting default value 28800 opscode_erchef s3_url_type the url style to use path or vhost when connecting to s3 mainly used to manually override the default setting note that amazon may eliminate path style urls on some or all s3 buckets in the future default value vhost new in chef infra server 15 3 opscode_erchef search_auth_password the opensearch password default value nil new in chef infra server 14 14 opscode_erchef search_auth_username the opensearch username default value opensearch_user new in chef infra server 14 14 opscode_erchef search_provider the search index provider default value elasticsearch new in chef infra server 14 14 opscode_erchef search_queue_mode the search index queue mode default value batch new in chef infra server 14 14 opscode_erchef sql_connection_user the postgresql user name in username hostname format e g opscode_chef my_postgresql postgres database azure com where username would normally equal the value of opscode erchef sql_user default opscode_chef this setting is required in an external azure postgresql database as a service configuration if set to nil chef infra server assumes that the database is not on azure and the postgresql connection will be made using the value specified in opscode_erchef sql_user default value nil opscode_erchef strict_search_result_acls use to specify that search results only return objects to which an actor user client etc has read access as determined by acl settings this affects all searches when true the performance of the chef management console may increase because it enables the chef management console to skip redundant acl checks to ensure the chef management console is configured properly after this setting has been applied with a chef server ctl reconfigure run chef manage ctl reconfigure to ensure the chef management console also picks up the setting default value false warning when true opscode_erchef strict_search_result_acls affects all search results and any actor user client etc that does not have read access to a search result will not be able to view it for example this could affect search results returned during a chef infra client runs if a chef infra client does not have permission to read the information opscode_erchef udp_socket_pool_size default value 20 opscode_erchef umask default value 0022 opscode_erchef validation_client_name default value chef validator opscode_erchef vip the virtual ip address default value 127 0 0 1 opscode_erchef track_total_hits if true it will return the total number of matching documents if false the count capps at 10 000 documents default value false warning when true opscode_erchef track_total_hits can increase query latency and memory usage by calculating the exact total of matching documents which may impact performance opscode expander the opscode expander service is used to process data pulled from the rabbitmq service s message queue so that it can be properly indexed by the opscode solr4 service note opscode expander settings are eol in chef infra server 14 this configuration file has the following settings for opscode expander opscode_expander consumer_id setting eol in chef infra server 14 the identity of the consumer to which messages are published default value default opscode_expander dir setting eol in chef infra server 14 the working directory the default value is the recommended value default value var o pt opscode opscode expander opscode_expander enable setting eol in chef infra server 14 enable a service default value true opscode_expander log_directory setting eol in chef infra server 14 the directory in which log data is stored the default value is the recommended value default value var log opscode opscode expander opscode_expander log_rotation setting eol in chef infra server 14 the log rotation policy for this service log files are rotated when they exceed file_maxbytes the maximum number of log files in the rotation is defined by num_to_keep default value file_maxbytes 104857600 num_to_keep 10 opscode_expander nodes setting eol in chef infra server 14 the number of allowed worker processes default value 2 opscode_expander reindexer_log_directory setting eol in...
|
