tu peux laisser vide. Il s’agit d’un autre moyen de collecter les peers, par leur pubkey.
Tu peux laisser en commentaire (ou vide)
mais non, t’inquietes. Dis toi quand allant au bout tu nous aide, car cela nous oblige à formaliser d’avantage, corriger les coquilles, etc.
Voici le fichier config/elasticsearch.yml d’un Pod (celui du Sou) :
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
cluster.name: g1-es-data
cluster.remote.host: g1.data.le-sou.org
cluster.remote.port: 443
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
node.name: es-g1-01
#
# Add custom attributes to the node:
#
# node.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
# path.data: /path/to/data
#
# Path to log files:
#
# path.logs: /path/to/logs
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
# bootstrap.mlockall: true
#
# Make sure that the `ES_HEAP_SIZE` environment variable is set to about half the memory
# available on the system and that the owner of the process is allowed to use this limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
network.host: 127.0.0.1
#
# Set a custom port for HTTP:
#
http.port: 9701
http.cors.allow-origin: "/.*/"
http.cors.enabled: true
# Internal transport layer
#
# transport.tcp.port: 9210-9220
#
# For more information, see the documentation at:
# <http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html>
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when new node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
# discovery.zen.ping.unicast.hosts: ["host1", "host2"]
discovery.zen.ping.unicast.hosts: ["127.0.0.1"]
#
# Prevent the "split brain" by configuring the majority of nodes (total number of nodes / 2 + 1):
#
# discovery.zen.minimum_master_nodes: 3
#
# For more information, see the documentation at:
# <http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html>
#
# ---------------------------------- Gateway -----------------------------------
#
# Block initial recovery after a full cluster restart until N nodes are started:
#
# gateway.recover_after_nodes: 3
#
# For more information, see the documentation at:
# <http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html>
#
# ---------------------------------- Various -----------------------------------
#
# Disable starting multiple nodes on a single system:
#
# node.max_local_storage_nodes: 1
#
# Require explicit names when deleting indices:
#
# action.destructive_requires_name: true
#
# Security to isolate plugin classpath - /!\ WARNING: should be DISABLE for Duniter4j
#
security.manager.enabled: false
#
# ---------------------------------- Duniter4j ---------------------------------
#
# Enable duniter4j plugins
#
# duniter.enabled: false
#
# Delete then create all indices at startup - /!\ WARNING: DO NOT set to true in production
#
# duniter.indices.reload: true
#
# Default string analyzer
#
duniter.string.analyzer: french
#
# Enabling blockchain synchronization
#
duniter.blockchain.enable: true
#
# Force blockchain full synchronization - /!\ WARNING: all user events will be reset to 'unread'
#
#duniter.blockchain.reload: true
#duniter.blockchain.reload.from: 92500
#
# Duniter node address
#
duniter.host: 127.0.0.1
duniter.port: 10901
# duniter.useSsl: true
#
# Compute statistics on indices (each hour) ? (default: true)
#
# duniter.stats.enable: false
#
# ---------------------------------- Duniter4j security module -------------------
#
# Keyring, use to sign emitted documents (user events, subscription, etc.).
# If not set, random keys will be generated.
#
duniter.keyring.salt: '*****'
duniter.keyring.password: '*****'
#
# Enable security - will restrict HTTP access to only Duniter4j known indices - /!\ WARNING: should be enable for production use
#
duniter.security.enable: true
#
# ---------------------------------- Duniter4j P2P module -------------------------
#
# Enable P2P synchronize between ES peers ? (default: true)
#
duniter.p2p.enable: true
#
# Enable P2P websocket direct synchronisation ? (default: true)
#
#duniter.p2p.ws.enable: true
#
# Max peer time offset, in seconds (max peer's clock error) - use to request peer's data. (default: 3600 = 1hour)
#
duniter.p2p.peerTimeOffset: 7200
#
# Enable discovery on network peers, to automatically synchronize this peers (default: true)
#
duniter.p2p.discovery.enable: true
#
# Pass an initial list of hosts to perform synchronization when new node is started:
#
duniter.p2p.includes.endpoints: [
"ES_CORE_API g1.data.duniter.fr 443",
"ES_USER_API g1.data.duniter.fr 443",
"ES_SUBSCRIPTION_API g1.data.duniter.fr 443"
]
#duniter.p2p.ping.endpoints: [
# "g1:ES_USER_API server.e-is.pro 9222",
# "g1:ES_SUBSCRIPTION_API server.e-is.pro 9222"
#]
#
# Pass a list of pubkeys to always synchronize (default: <empty>)
#
#duniter.p2p.includes.pubkeys: [
# "38MEAZN68Pz1DTvT3tqgxx4yQP6snJCQhPqEFxbDk4aE"
#]
#
# Enable a full synchro. This will compare each documents from other peers.
#
duniter.p2p.fullResyncAtStartup: true
#
# Enable publishing of pod endpoints to the network (see the peer document in Duniter protocol). (Default: '${duniter.p2p.enable}')
#
duniter.p2p.peering.enable: true
#
# Define targeted API (for peers selection) where to send the peer document (if peering is enable). (Default: ["ES_CORE_API"])
# This API should accept a POST request to '/network/peering' (will send a see the Duniter protocol)
#
duniter.p2p.peering.targetedApis: [
"ES_CORE_API"
]
#
# Define cluster API to publish (if peering is enable). By default, all compatible API
#
# duniter.p2p.peering.publishedApis: [
# "ES_CORE_API", "ES_USER_API", "ES_SUBSCRIPTION_API"
# ]
#
# Interval for publishing peer document to the network, in seconds. (Default: 7200 =2h)
#
#duniter.p2p.peering.interval: 7200
#
#
# ---------------------------------- Duniter4j document moderation ---------------
#
# Filter too old document, if time older that 'maxPastDelta' (in seconds). Default: 7200 (=2h)
#
#duniter.document.time.maxPastDelta: 7200
#duniter.document.time.maxPastDelta: 535680000
#
# Filter document in the futur, if time greater that 'maxFutureDelta' (in seconds). Default: 600 (10m)
#
# duniter.document.time.maxFutureDelta: 600
#
# Allow admin (define in duniter.keyring) to delete documents ? (default: true)
#
# duniter.document.moderators.admin: false
#
# Public keys of moderators. Moderators can delete any user documents (profile, page comment, etc.) (default: <empty>)
#
duniter.document.moderators.pubkeys: [
'38MEAZN68Pz1DTvT3tqgxx4yQP6snJCQhPqEFxbDk4aE', # Benoit Lavenier
'47JpfrGkoHJWtumeu7f67fbAxkvaHYVQBNo5GszNs61Z', # Bertrand Presles
'HmH5beJqKGMeotcQUrSW7Wo5tKvAksHmfYXfiSQ9EbWz' # Le Sou Mayennais
]
# ---------------------------------- Duniter4j Mail module -----------------------
#
# Enable mail module ?
#
duniter.mail.enable: true
#
# Mail: SMTP server configuration (host and port)
#
duniter.mail.smtp.host: '127.0.0.1'
duniter.mail.smtp.port: 25
#
# Mail: SMTP server SSL security
#
# duniter.mail.smtp.ssl: true
# duniter.mail.smtp.starttls: true
#
# Mail: SMTP server authentication
#
# duniter.mail.smtp.username:
# duniter.mail.smtp.password:
#
# Mail: 'from' address
#
duniter.mail.from: 'cesium@le-sou.org'
#
# Mail: admin address
#
duniter.mail.admin: 'benoit.lavenier@e-is.pro'
#
# Mail: subject prefix
#
duniter.mail.subject.prefix: '[LeSou / Ğ1]'
#
# ---------------------------------- Duniter4j Subscription module -------------------
#
# Enable subscription module (Need to enable mail features)
#
duniter.subscription.enable: true
#
# Email subscription: Day of the week to trigger weekly (default: 2 = monday)
#
# duniter.subscription.email.dayOfWeek: 2
#
# Email subscription: Hour in day to trigger daily email subscription (default: 3 AM)
#
duniter.subscription.email.hourOfDay: 2
#
# Email subscription: URL to a Cesium site, for links in the email content (default: https://g1.duniter.fr)
#
duniter.subscription.email.link.url: 'https://g1.le-sou.org'
# ---------------------------------- Cesium+ Pod > Share module -------------------
#
#
# Share title: `og:site_name` (default: 'Cesium')
#
duniter.share.site.name: 'Cesium - Ğ1'
#
# URL to a page (default: https://g1.duniter.fr/#/app/page/view/{id}/{title} )
# Note: available variables are {id} and {title}
#
duniter.share.page.link.url: 'https://g1.le-sou.org/#/app/page/view/{id}/{title}'
#
# URL to a user profile (default: https://g1.duniter.fr/#/app/wot/{pubkey}/{title} )
# Note: available variables are {pubkey} and {title}
#
duniter.share.user.link.url: 'https://g1.le-sou.org/#/app/wot/{pubkey}/{title}'
#
# Default image to share (min size of 200x200px) for `og:image` (default: https://g1.duniter.fr/img/logo_200px.png)
#
duniter.share.image.default.url: 'https://g1.le-sou.org/img/logo_200px.png'
Et la conf nginx associée :
# Map pour gérer les upgrade de connection (version HTTP)
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
# Format des logs
log_format upstreamlog '$remote_addr - $remote_user [$time_local] '
'"$request" $status $body_bytes_sent '
'"$http_referer" "$http_user_agent" "$upstream_addr - $upstream_response_time"';
# Permet de définir un pool de noeuds ES, pour que nginx répartisse la charge
# Ici, je n'en ai qu'un seul
upstream es-g1 {
least_conn;
#ip_hash;
server 127.0.0.1:9701 weight=3;
}
server {
listen 443;
listen [::]:443;
server_name g1.data.le-sou.org;
# Inclusion de config par default pour le https
include includes/ssl.conf;
root /var/www/le-sou.org/cesium;
index index.html;
#allow large uploads of files
client_max_body_size 20m;
location /ws/ {
proxy_pass http://es-g1;
proxy_next_upstream error timeout http_500 http_502;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Connection "upgrade";
proxy_read_timeout 86400s;
proxy_send_timeout 86400s;
access_log /var/log/nginx/es-g1.log upstreamlog;
}
location / {
proxy_pass http://es-g1;
proxy_next_upstream error timeout http_500 http_502;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# CORS: Preflighted requests
if ($request_method = OPTIONS ) {
add_header "Access-Control-Allow-Origin" *;
add_header "Access-Control-Allow-Methods" "GET, POST, OPTIONS";
add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
return 200;
}
access_log /var/log/nginx/es-g1.log upstreamlog;
}
}
)
(encore un soucis avec Orange ! faut que j’aille à mon boulot pour vérifier). Du coup, le tien ne sais pas a qui envoyer sa fiche de pair. Tu vois ?
