first commit
0 parents
Showing
41 changed files
with
2364 additions
and
0 deletions
.gitignore
0 → 100644
| 1 | resources/* |
ansible.cfg
0 → 100644
| 1 | [defaults] | ||
| 2 | inventory = inventories/test/hosts | ||
| 3 | remote_user = root | ||
| 4 | retry_file_enabled = false | ||
| 5 | module_name = shell | ||
| 6 | nocows = 1 | ||
| 7 | stdout_callback = debug | ||
| 8 | roles_path = roles | ||
| 9 | #log_path = log/ansible.log | ||
| 10 | #remote_tmp = /tmp/ | ||
| 11 | host_key_checking = false | ||
| 12 | #callback_whitelist = profile_tasks # ansible.log timestamp | ||
| 13 | #command_warnings = false | ||
| 14 | |||
| 15 | |||
| 16 | |||
| 17 | interpreter_python = /usr/bin/python3 | ||
| 18 | |||
| 19 | |||
| 20 | [privilege_escalation] | ||
| 21 | #become = true | ||
| 22 | #become_method = sudo | ||
| 23 | #become_user = root | ||
| 24 | #become_ask_pass=False |
files/jboss_version.fact
0 → 100644
install_custom_facts.yml
0 → 100644
| 1 | --- | ||
| 2 | - name: Custom facts for JBoss EAP version checking | ||
| 3 | hosts: all | ||
| 4 | become: true | ||
| 5 | tasks: | ||
| 6 | - name: create the custom facts directory | ||
| 7 | file: | ||
| 8 | path: /etc/ansible/facts.d | ||
| 9 | state: directory | ||
| 10 | |||
| 11 | - name: copy custom facts | ||
| 12 | copy: | ||
| 13 | src: files/jboss_version.fact | ||
| 14 | dest: /etc/ansible/facts.d | ||
| 15 | mode: "0777" |
inventories/produccion/hosts
0 → 100644
inventories/test/hosts
0 → 100644
jboss_patch_apply.yml
0 → 100644
| 1 | --- | ||
| 2 | - name: Apply JBoss Security Patch | ||
| 3 | hosts: all | ||
| 4 | become: true | ||
| 5 | roles: | ||
| 6 | - role: jboss_patch_apply | ||
| 7 | vars: | ||
| 8 | patch_version: "7.2.8" | ||
| 9 | patch_zip_location: "resources/" | ||
| 10 | patch_zip_file: "jboss-eap-7.2.8-patch.zip" | ||
| 11 | jboss_home_bin: "/opt/jboss-eap-7.2/bin/" | ||
| 12 | jboss_service_name: "jboss-eap" |
main.yml
0 → 100644
| 1 | --- | ||
| 2 | - name: Install JBoss EAP | ||
| 3 | hosts: all | ||
| 4 | become: true | ||
| 5 | roles: | ||
| 6 | - role: jboss | ||
| 7 | vars: | ||
| 8 | pkg_location: "resources/" | ||
| 9 | jboss_zip: "jboss-eap-7.2.0.zip" | ||
| 10 | system_user: "jboss" | ||
| 11 | install_location: "/opt/" | ||
| 12 | service_name: "jboss-eap" | ||
| 13 | jboss_admin_user: "admin" | ||
| 14 | jboss_admin_pass: "admin" | ||
| 15 | jboss_home: "/opt/jboss-eap-7.2/" | ||
| 16 | jboss_mode: "standalone" | ||
| 17 | jboss_host_config: "standalone.xml" | ||
| 18 | jboss_service_conf_home: "/opt/jboss-eap-7.2/bin/init.d/" | ||
| 19 | jboss_service_script: "jboss-eap-rhel.sh" | ||
| 20 | jboss_service_conf: "jboss-eap.conf" | ||
| 21 | java_version: "java-1.8.0-openjdk" | ||
| 22 | java_heap_xms: "12g" | ||
| 23 | java_heap_xmx: "12g" | ||
| 24 | java_metaspace_min: "1g" | ||
| 25 | java_metaspace_max: "1g" |
roles/jboss/.travis.yml
0 → 100644
| 1 | --- | ||
| 2 | language: python | ||
| 3 | python: "2.7" | ||
| 4 | |||
| 5 | # Use the new container infrastructure | ||
| 6 | sudo: false | ||
| 7 | |||
| 8 | # Install ansible | ||
| 9 | addons: | ||
| 10 | apt: | ||
| 11 | packages: | ||
| 12 | - python-pip | ||
| 13 | |||
| 14 | install: | ||
| 15 | # Install ansible | ||
| 16 | - pip install ansible | ||
| 17 | |||
| 18 | # Check ansible version | ||
| 19 | - ansible --version | ||
| 20 | |||
| 21 | # Create ansible.cfg with correct roles_path | ||
| 22 | - printf '[defaults]\nroles_path=../' >ansible.cfg | ||
| 23 | |||
| 24 | script: | ||
| 25 | # Basic role syntax check | ||
| 26 | - ansible-playbook tests/test.yml -i tests/inventory --syntax-check | ||
| 27 | |||
| 28 | notifications: | ||
| 29 | webhooks: https://galaxy.ansible.com/api/v1/notifications/ | ||
| ... | \ No newline at end of file | ... | \ No newline at end of file |
roles/jboss/README.md
0 → 100644
| 1 | Role Name | ||
| 2 | ========= | ||
| 3 | |||
| 4 | A brief description of the role goes here. | ||
| 5 | |||
| 6 | Requirements | ||
| 7 | ------------ | ||
| 8 | |||
| 9 | Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required. | ||
| 10 | |||
| 11 | Role Variables | ||
| 12 | -------------- | ||
| 13 | |||
| 14 | A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well. | ||
| 15 | |||
| 16 | Dependencies | ||
| 17 | ------------ | ||
| 18 | |||
| 19 | A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles. | ||
| 20 | |||
| 21 | Example Playbook | ||
| 22 | ---------------- | ||
| 23 | |||
| 24 | Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: | ||
| 25 | |||
| 26 | - hosts: servers | ||
| 27 | roles: | ||
| 28 | - { role: username.rolename, x: 42 } | ||
| 29 | |||
| 30 | License | ||
| 31 | ------- | ||
| 32 | |||
| 33 | BSD | ||
| 34 | |||
| 35 | Author Information | ||
| 36 | ------------------ | ||
| 37 | |||
| 38 | An optional section for the role authors to include contact information, or a website (HTML is not allowed). |
roles/jboss/defaults/main.yml
0 → 100644
| 1 | --- | ||
| 2 | # defaults file for Jboss | ||
| 3 | jboss_zip: "jboss-eap-7.3.0.zip" | ||
| 4 | system_user: "jboss" | ||
| 5 | install_location: "/opt/" | ||
| 6 | service_name: "jboss-eap" | ||
| 7 | jboss_admin_user: "admin" | ||
| 8 | jboss_admin_pass: "admin" | ||
| 9 | jboss_home: "jboss-eap-7.3.0.zip" | ||
| 10 | jboss_host_config: "standalone-ha.xml" | ||
| 11 | jboss_mode: "standalone" | ||
| 12 | jboss_service_conf_home: "/opt/jboss-eap-7.3/bin/init.d/" | ||
| 13 | jboss_service_script: "jboss-eap-rhel.sh" | ||
| 14 | jboss_service_conf: "jboss-eap.conf" | ||
| 15 | java_version: "java-11-openjdk" | ||
| 16 | java_heap_xms: "1g" | ||
| 17 | java_heap_xmx: "1g" | ||
| 18 | java_metaspace_min: "96m" | ||
| 19 | java_metaspace_max: "256m" | ||
| 20 | jboss_firewall: | ||
| 21 | - {port: '9990/tcp', state: 'enabled'} | ||
| 22 | - {port: '8080/tcp', state: 'enabled'} | ||
| 23 | - {port: '8443/tcp', state: 'enabled'} | ||
| 24 | - {port: '8009/tcp', state: 'enabled'} # ajp | ||
| 25 | - {port: '8090/tcp', state: 'enabled'} # modcluster mcmp | ||
| 26 | - {port: '55200/udp', state: 'enabled'} # jgroups | ||
| 27 | - {port: '54200/udp', state: 'enabled'} # jgroups | ||
| 28 | - {port: '45688/udp', state: 'enabled'} # jgroups multicast address | ||
| 29 | - {port: '23364/udp', state: 'enabled'} # mod_cluster | ||
| 30 | |||
| 31 | jboss_jdbc_drivers: | ||
| 32 | - {name: "ojdbc6.jar", location: "modules/com/oracle/main/"} | ||
| 33 | - {name: "postgresql-9.2-1000.jdbc4.jar", location: "modules/org/postgresql/main/"} | ||
| 34 | |||
| 35 | jboss_jdbc_module: | ||
| 36 | - {file: "oracle_module.xml", location: "modules/com/oracle/main/", name: "module.xml"} | ||
| 37 | - {file: "postgresql_module.xml", location: "modules/org/postgresql/main/", name: "module.xml"} | ||
| 38 | |||
| 39 | jboss_admin_users: # web console | ||
| 40 | - {user: "admin", password: "c06ba95adae374bc766be220fad6cc0a", state: 'present'} | ||
| 41 | - {user: "data", password: "f27fcf18e55bd68962f75e0c2633539a", state: 'present'} |
roles/jboss/files/01-max_buff_jboss.conf
0 → 100644
roles/jboss/files/oracle_module.xml
0 → 100644
roles/jboss/handlers/main.yml
0 → 100644
roles/jboss/meta/main.yml
0 → 100644
roles/jboss/tasks/firewall_config.yml
0 → 100644
| 1 | --- | ||
| 2 | # tasks file for jboss | ||
| 3 | |||
| 4 | - name: Start firewall | ||
| 5 | service: | ||
| 6 | name: firewalld | ||
| 7 | state: started | ||
| 8 | tags: | ||
| 9 | - firewall_start | ||
| 10 | - firewall_config_yml | ||
| 11 | |||
| 12 | - name: Configure firewall | ||
| 13 | firewalld: | ||
| 14 | port: "{{ item.port }}" | ||
| 15 | permanent: yes | ||
| 16 | immediate: yes | ||
| 17 | state: "{{ item.state }}" | ||
| 18 | loop: "{{ jboss_firewall }}" | ||
| 19 | tags: | ||
| 20 | - firewall_config | ||
| 21 | - firewall_config_yml |
roles/jboss/tasks/install.yml
0 → 100644
| 1 | --- | ||
| 2 | # tasks file for jboss | ||
| 3 | |||
| 4 | - name: Check that Java is present | ||
| 5 | yum: | ||
| 6 | name: "{{ java_version }}" | ||
| 7 | state: present | ||
| 8 | tags: | ||
| 9 | - java_install | ||
| 10 | - install_yml | ||
| 11 | |||
| 12 | - name: Add a System user that runs the JBoss process | ||
| 13 | user: | ||
| 14 | name: "{{ system_user }}" | ||
| 15 | state: present | ||
| 16 | system: yes | ||
| 17 | tags: | ||
| 18 | - add_system_user | ||
| 19 | - install_yml | ||
| 20 | |||
| 21 | - name: Copy the zip file to the remote server and unzip | ||
| 22 | unarchive: | ||
| 23 | src: "{{ pkg_location | default('files/') }}{{ jboss_zip }}" | ||
| 24 | dest: "{{ install_location }}" | ||
| 25 | owner: "{{ system_user }}" | ||
| 26 | group: "{{ system_user }}" | ||
| 27 | creates: "{{ install_location }}{{ jboss_zip[:-6] }}/" | ||
| 28 | tags: | ||
| 29 | - copy_installer_zip | ||
| 30 | - install_yml | ||
| 31 | |||
| 32 | - name: Copy the init script to /etc/init.d/ | ||
| 33 | copy: | ||
| 34 | src: "{{ jboss_service_conf_home }}{{ jboss_service_script }}" | ||
| 35 | dest: /etc/init.d/{{ service_name }} | ||
| 36 | mode: 0755 | ||
| 37 | remote_src: yes | ||
| 38 | tags: | ||
| 39 | - copy_init_script | ||
| 40 | - install_yml | ||
| 41 | |||
| 42 | - name: copy the JBoss service config to /etc/default/ | ||
| 43 | template: | ||
| 44 | src: templates/{{ jboss_service_conf }} | ||
| 45 | dest: /etc/default/ | ||
| 46 | owner: "{{ system_user }}" | ||
| 47 | group: "{{ system_user }}" | ||
| 48 | notify: restart jboss | ||
| 49 | tags: | ||
| 50 | - copy_service_config | ||
| 51 | - install_yml | ||
| 52 | |||
| 53 | - name: reload daemon | ||
| 54 | systemd: | ||
| 55 | daemon_reload: yes | ||
| 56 | tags: | ||
| 57 | - reload_daemon | ||
| 58 | - install_yml |
roles/jboss/tasks/jboss_xml_config.yml
0 → 100644
| 1 | --- | ||
| 2 | # tasks file for jboss | ||
| 3 | |||
| 4 | - name: Configuracion de usuarios de la consola web | ||
| 5 | template: | ||
| 6 | src: templates/mgmt-users.properties | ||
| 7 | dest: "{{ jboss_home }}{{ jboss_mode }}/configuration/" | ||
| 8 | owner: "{{ system_user }}" | ||
| 9 | group: "{{ system_user }}" | ||
| 10 | tags: | ||
| 11 | - add_admin_user | ||
| 12 | - jboss_xml_config_xml | ||
| 13 | |||
| 14 | # Este es el standanloneX.xml | ||
| 15 | - name: copy the default {{ jboss_mode }} xml config file | ||
| 16 | template: | ||
| 17 | src: templates/{{ jboss_host_config }} | ||
| 18 | dest: "{{ jboss_home }}{{ jboss_mode }}/configuration/{{ jboss_host_config }}" | ||
| 19 | owner: "{{ system_user }}" | ||
| 20 | group: "{{ system_user }}" | ||
| 21 | notify: restart jboss | ||
| 22 | tags: | ||
| 23 | - copy_host_xmlconfig | ||
| 24 | - jboss_xml_config_yml | ||
| 25 | |||
| 26 | # Aca se encuentran las configuracion de java opts | ||
| 27 | - name: copy the default {{ jboss_mode }}.conf | ||
| 28 | template: | ||
| 29 | src: templates/{{ jboss_mode }}.conf | ||
| 30 | dest: "{{ jboss_home }}/bin/" | ||
| 31 | owner: "{{ system_user }}" | ||
| 32 | group: "{{ system_user }}" | ||
| 33 | notify: restart jboss | ||
| 34 | tags: | ||
| 35 | - copy_jboss_conf | ||
| 36 | - jboss_xml_config_yml |
roles/jboss/tasks/jdbc_driver_config.yml
0 → 100644
| 1 | --- | ||
| 2 | # tasks file for jboss | ||
| 3 | # datasources configs | ||
| 4 | - name: Create modules directory structure | ||
| 5 | file: | ||
| 6 | path: "{{ jboss_home }}{{ item.location }}" | ||
| 7 | state: directory | ||
| 8 | owner: "{{ system_user }}" | ||
| 9 | group: "{{ system_user }}" | ||
| 10 | loop: "{{ jboss_jdbc_module }}" | ||
| 11 | tags: | ||
| 12 | - create_module_structure | ||
| 13 | - jdbc_driver_config_yml | ||
| 14 | |||
| 15 | - name: copy the driver config xml config | ||
| 16 | copy: | ||
| 17 | src: templates/{{ item.file }} | ||
| 18 | dest: "{{ jboss_home }}/{{ item.location }}{{ item.name }}" | ||
| 19 | owner: "{{ system_user }}" | ||
| 20 | group: "{{ system_user }}" | ||
| 21 | mode: '0644' | ||
| 22 | #notify: restart jboss | ||
| 23 | loop: "{{ jboss_jdbc_module }}" | ||
| 24 | tags: | ||
| 25 | - copy_jdbc_driver_config | ||
| 26 | - jdbc_driver_config_yml | ||
| 27 | |||
| 28 | - name: copy the driver jar file | ||
| 29 | copy: | ||
| 30 | src: "{{ pkg_location | default('files/') }}{{ item.name }}" | ||
| 31 | dest: "{{ jboss_home }}/{{ item.location }}" | ||
| 32 | owner: "{{ system_user }}" | ||
| 33 | group: "{{ system_user }}" | ||
| 34 | mode: '0644' | ||
| 35 | #notify: restart jboss | ||
| 36 | loop: "{{ jboss_jdbc_drivers }}" | ||
| 37 | tags: | ||
| 38 | - copy_driver_jar | ||
| 39 | - jdbc_driver_config_yml |
roles/jboss/tasks/main.yml
0 → 100644
roles/jboss/templates/bk.standalone.xml
0 → 100644
| 1 | <?xml version='1.0' encoding='UTF-8'?> | ||
| 2 | |||
| 3 | <server xmlns="urn:jboss:domain:8.0"> | ||
| 4 | <extensions> | ||
| 5 | <extension module="org.jboss.as.clustering.infinispan"/> | ||
| 6 | <extension module="org.jboss.as.connector"/> | ||
| 7 | <extension module="org.jboss.as.deployment-scanner"/> | ||
| 8 | <extension module="org.jboss.as.ee"/> | ||
| 9 | <extension module="org.jboss.as.ejb3"/> | ||
| 10 | <extension module="org.jboss.as.jaxrs"/> | ||
| 11 | <extension module="org.jboss.as.jdr"/> | ||
| 12 | <extension module="org.jboss.as.jmx"/> | ||
| 13 | <extension module="org.jboss.as.jpa"/> | ||
| 14 | <extension module="org.jboss.as.jsf"/> | ||
| 15 | <extension module="org.jboss.as.logging"/> | ||
| 16 | <extension module="org.jboss.as.mail"/> | ||
| 17 | <extension module="org.jboss.as.naming"/> | ||
| 18 | <extension module="org.jboss.as.pojo"/> | ||
| 19 | <extension module="org.jboss.as.remoting"/> | ||
| 20 | <extension module="org.jboss.as.sar"/> | ||
| 21 | <extension module="org.jboss.as.security"/> | ||
| 22 | <extension module="org.jboss.as.transactions"/> | ||
| 23 | <extension module="org.jboss.as.webservices"/> | ||
| 24 | <extension module="org.jboss.as.weld"/> | ||
| 25 | <extension module="org.wildfly.extension.batch.jberet"/> | ||
| 26 | <extension module="org.wildfly.extension.bean-validation"/> | ||
| 27 | <extension module="org.wildfly.extension.core-management"/> | ||
| 28 | <extension module="org.wildfly.extension.discovery"/> | ||
| 29 | <extension module="org.wildfly.extension.ee-security"/> | ||
| 30 | <extension module="org.wildfly.extension.elytron"/> | ||
| 31 | <extension module="org.wildfly.extension.io"/> | ||
| 32 | <extension module="org.wildfly.extension.microprofile.config-smallrye"/> | ||
| 33 | <extension module="org.wildfly.extension.microprofile.health-smallrye"/> | ||
| 34 | <extension module="org.wildfly.extension.microprofile.opentracing-smallrye"/> | ||
| 35 | <extension module="org.wildfly.extension.request-controller"/> | ||
| 36 | <extension module="org.wildfly.extension.security.manager"/> | ||
| 37 | <extension module="org.wildfly.extension.undertow"/> | ||
| 38 | </extensions> | ||
| 39 | <management> | ||
| 40 | <security-realms> | ||
| 41 | <security-realm name="ManagementRealm"> | ||
| 42 | <authentication> | ||
| 43 | <local default-user="$local" skip-group-loading="true"/> | ||
| 44 | <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/> | ||
| 45 | </authentication> | ||
| 46 | <authorization map-groups-to-roles="false"> | ||
| 47 | <properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/> | ||
| 48 | </authorization> | ||
| 49 | </security-realm> | ||
| 50 | <security-realm name="ApplicationRealm"> | ||
| 51 | <server-identities> | ||
| 52 | <ssl> | ||
| 53 | <keystore path="application.keystore" relative-to="jboss.server.config.dir" keystore-password="password" alias="server" key-password="password" generate-self-signed-certificate-host="localhost"/> | ||
| 54 | </ssl> | ||
| 55 | </server-identities> | ||
| 56 | <authentication> | ||
| 57 | <local default-user="$local" allowed-users="*" skip-group-loading="true"/> | ||
| 58 | <properties path="application-users.properties" relative-to="jboss.server.config.dir"/> | ||
| 59 | </authentication> | ||
| 60 | <authorization> | ||
| 61 | <properties path="application-roles.properties" relative-to="jboss.server.config.dir"/> | ||
| 62 | </authorization> | ||
| 63 | </security-realm> | ||
| 64 | </security-realms> | ||
| 65 | <audit-log> | ||
| 66 | <formatters> | ||
| 67 | <json-formatter name="json-formatter"/> | ||
| 68 | </formatters> | ||
| 69 | <handlers> | ||
| 70 | <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/> | ||
| 71 | </handlers> | ||
| 72 | <logger log-boot="true" log-read-only="false" enabled="false"> | ||
| 73 | <handlers> | ||
| 74 | <handler name="file"/> | ||
| 75 | </handlers> | ||
| 76 | </logger> | ||
| 77 | </audit-log> | ||
| 78 | <management-interfaces> | ||
| 79 | <http-interface security-realm="ManagementRealm"> | ||
| 80 | <http-upgrade enabled="true"/> | ||
| 81 | <socket-binding http="management-http"/> | ||
| 82 | </http-interface> | ||
| 83 | </management-interfaces> | ||
| 84 | <access-control provider="simple"> | ||
| 85 | <role-mapping> | ||
| 86 | <role name="SuperUser"> | ||
| 87 | <include> | ||
| 88 | <user name="$local"/> | ||
| 89 | </include> | ||
| 90 | </role> | ||
| 91 | </role-mapping> | ||
| 92 | </access-control> | ||
| 93 | </management> | ||
| 94 | <profile> | ||
| 95 | <subsystem xmlns="urn:jboss:domain:logging:6.0"> | ||
| 96 | <console-handler name="CONSOLE"> | ||
| 97 | <level name="INFO"/> | ||
| 98 | <formatter> | ||
| 99 | <named-formatter name="COLOR-PATTERN"/> | ||
| 100 | </formatter> | ||
| 101 | </console-handler> | ||
| 102 | <periodic-rotating-file-handler name="FILE" autoflush="true"> | ||
| 103 | <formatter> | ||
| 104 | <named-formatter name="PATTERN"/> | ||
| 105 | </formatter> | ||
| 106 | <file relative-to="jboss.server.log.dir" path="server.log"/> | ||
| 107 | <suffix value=".yyyy-MM-dd"/> | ||
| 108 | <append value="true"/> | ||
| 109 | </periodic-rotating-file-handler> | ||
| 110 | <logger category="com.arjuna"> | ||
| 111 | <level name="WARN"/> | ||
| 112 | </logger> | ||
| 113 | <logger category="org.jboss.as.config"> | ||
| 114 | <level name="DEBUG"/> | ||
| 115 | </logger> | ||
| 116 | <logger category="sun.rmi"> | ||
| 117 | <level name="WARN"/> | ||
| 118 | </logger> | ||
| 119 | <root-logger> | ||
| 120 | <level name="INFO"/> | ||
| 121 | <handlers> | ||
| 122 | <handler name="CONSOLE"/> | ||
| 123 | <handler name="FILE"/> | ||
| 124 | </handlers> | ||
| 125 | </root-logger> | ||
| 126 | <formatter name="PATTERN"> | ||
| 127 | <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/> | ||
| 128 | </formatter> | ||
| 129 | <formatter name="COLOR-PATTERN"> | ||
| 130 | <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/> | ||
| 131 | </formatter> | ||
| 132 | </subsystem> | ||
| 133 | <subsystem xmlns="urn:jboss:domain:batch-jberet:2.0"> | ||
| 134 | <default-job-repository name="in-memory"/> | ||
| 135 | <default-thread-pool name="batch"/> | ||
| 136 | <job-repository name="in-memory"> | ||
| 137 | <in-memory/> | ||
| 138 | </job-repository> | ||
| 139 | <thread-pool name="batch"> | ||
| 140 | <max-threads count="10"/> | ||
| 141 | <keepalive-time time="30" unit="seconds"/> | ||
| 142 | </thread-pool> | ||
| 143 | </subsystem> | ||
| 144 | <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/> | ||
| 145 | <subsystem xmlns="urn:jboss:domain:core-management:1.0"/> | ||
| 146 | <subsystem xmlns="urn:jboss:domain:datasources:5.0"> | ||
| 147 | <datasources> | ||
| 148 | <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true"> | ||
| 149 | <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE</connection-url> | ||
| 150 | <driver>h2</driver> | ||
| 151 | <security> | ||
| 152 | <user-name>sa</user-name> | ||
| 153 | <password>sa</password> | ||
| 154 | </security> | ||
| 155 | </datasource> | ||
| 156 | <drivers> | ||
| 157 | <driver name="h2" module="com.h2database.h2"> | ||
| 158 | <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class> | ||
| 159 | </driver> | ||
| 160 | <driver name="oracle" module="com.oracle"> | ||
| 161 | <driver-class>oracle.jdbc.driver.OracleDriver</driver-class> | ||
| 162 | <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class> | ||
| 163 | </driver> | ||
| 164 | </drivers> | ||
| 165 | </datasources> | ||
| 166 | </subsystem> | ||
| 167 | <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0"> | ||
| 168 | <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/> | ||
| 169 | </subsystem> | ||
| 170 | <subsystem xmlns="urn:jboss:domain:discovery:1.0"/> | ||
| 171 | <subsystem xmlns="urn:jboss:domain:ee:4.0"> | ||
| 172 | <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement> | ||
| 173 | <concurrent> | ||
| 174 | <context-services> | ||
| 175 | <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default" use-transaction-setup-provider="true"/> | ||
| 176 | </context-services> | ||
| 177 | <managed-thread-factories> | ||
| 178 | <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/> | ||
| 179 | </managed-thread-factories> | ||
| 180 | <managed-executor-services> | ||
| 181 | <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-threshold="60000" keepalive-time="5000"/> | ||
| 182 | </managed-executor-services> | ||
| 183 | <managed-scheduled-executor-services> | ||
| 184 | <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-threshold="60000" keepalive-time="3000"/> | ||
| 185 | </managed-scheduled-executor-services> | ||
| 186 | </concurrent> | ||
| 187 | <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/> | ||
| 188 | </subsystem> | ||
| 189 | <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/> | ||
| 190 | <subsystem xmlns="urn:jboss:domain:ejb3:5.0"> | ||
| 191 | <session-bean> | ||
| 192 | <stateless> | ||
| 193 | <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/> | ||
| 194 | </stateless> | ||
| 195 | <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/> | ||
| 196 | <singleton default-access-timeout="5000"/> | ||
| 197 | </session-bean> | ||
| 198 | <pools> | ||
| 199 | <bean-instance-pools> | ||
| 200 | <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | ||
| 201 | <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | ||
| 202 | </bean-instance-pools> | ||
| 203 | </pools> | ||
| 204 | <caches> | ||
| 205 | <cache name="simple"/> | ||
| 206 | <cache name="distributable" passivation-store-ref="infinispan" aliases="passivating clustered"/> | ||
| 207 | </caches> | ||
| 208 | <passivation-stores> | ||
| 209 | <passivation-store name="infinispan" cache-container="ejb" max-size="10000"/> | ||
| 210 | </passivation-stores> | ||
| 211 | <async thread-pool-name="default"/> | ||
| 212 | <timer-service thread-pool-name="default" default-data-store="default-file-store"> | ||
| 213 | <data-stores> | ||
| 214 | <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/> | ||
| 215 | </data-stores> | ||
| 216 | </timer-service> | ||
| 217 | <remote connector-ref="http-remoting-connector" thread-pool-name="default"> | ||
| 218 | <channel-creation-options> | ||
| 219 | <option name="READ_TIMEOUT" value="${prop.remoting-connector.read.timeout:20}" type="xnio"/> | ||
| 220 | <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/> | ||
| 221 | </channel-creation-options> | ||
| 222 | </remote> | ||
| 223 | <thread-pools> | ||
| 224 | <thread-pool name="default"> | ||
| 225 | <max-threads count="10"/> | ||
| 226 | <keepalive-time time="100" unit="milliseconds"/> | ||
| 227 | </thread-pool> | ||
| 228 | </thread-pools> | ||
| 229 | <default-security-domain value="other"/> | ||
| 230 | <default-missing-method-permissions-deny-access value="true"/> | ||
| 231 | <log-system-exceptions value="true"/> | ||
| 232 | </subsystem> | ||
| 233 | <subsystem xmlns="urn:wildfly:elytron:4.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto"> | ||
| 234 | <providers> | ||
| 235 | <aggregate-providers name="combined-providers"> | ||
| 236 | <providers name="elytron"/> | ||
| 237 | <providers name="openssl"/> | ||
| 238 | </aggregate-providers> | ||
| 239 | <provider-loader name="elytron" module="org.wildfly.security.elytron"/> | ||
| 240 | <provider-loader name="openssl" module="org.wildfly.openssl"/> | ||
| 241 | </providers> | ||
| 242 | <audit-logging> | ||
| 243 | <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/> | ||
| 244 | </audit-logging> | ||
| 245 | <security-domains> | ||
| 246 | <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper"> | ||
| 247 | <realm name="ApplicationRealm" role-decoder="groups-to-roles"/> | ||
| 248 | <realm name="local"/> | ||
| 249 | </security-domain> | ||
| 250 | <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper"> | ||
| 251 | <realm name="ManagementRealm" role-decoder="groups-to-roles"/> | ||
| 252 | <realm name="local" role-mapper="super-user-mapper"/> | ||
| 253 | </security-domain> | ||
| 254 | </security-domains> | ||
| 255 | <security-realms> | ||
| 256 | <identity-realm name="local" identity="$local"/> | ||
| 257 | <properties-realm name="ApplicationRealm"> | ||
| 258 | <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/> | ||
| 259 | <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/> | ||
| 260 | </properties-realm> | ||
| 261 | <properties-realm name="ManagementRealm"> | ||
| 262 | <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/> | ||
| 263 | <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/> | ||
| 264 | </properties-realm> | ||
| 265 | </security-realms> | ||
| 266 | <mappers> | ||
| 267 | <simple-permission-mapper name="default-permission-mapper" mapping-mode="first"> | ||
| 268 | <permission-mapping> | ||
| 269 | <principal name="anonymous"/> | ||
| 270 | <permission-set name="default-permissions"/> | ||
| 271 | </permission-mapping> | ||
| 272 | <permission-mapping match-all="true"> | ||
| 273 | <permission-set name="login-permission"/> | ||
| 274 | <permission-set name="default-permissions"/> | ||
| 275 | </permission-mapping> | ||
| 276 | </simple-permission-mapper> | ||
| 277 | <constant-realm-mapper name="local" realm-name="local"/> | ||
| 278 | <simple-role-decoder name="groups-to-roles" attribute="groups"/> | ||
| 279 | <constant-role-mapper name="super-user-mapper"> | ||
| 280 | <role name="SuperUser"/> | ||
| 281 | </constant-role-mapper> | ||
| 282 | </mappers> | ||
| 283 | <permission-sets> | ||
| 284 | <permission-set name="login-permission"> | ||
| 285 | <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/> | ||
| 286 | </permission-set> | ||
| 287 | <permission-set name="default-permissions"> | ||
| 288 | <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/> | ||
| 289 | <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/> | ||
| 290 | <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/> | ||
| 291 | </permission-set> | ||
| 292 | </permission-sets> | ||
| 293 | <http> | ||
| 294 | <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global"> | ||
| 295 | <mechanism-configuration> | ||
| 296 | <mechanism mechanism-name="DIGEST"> | ||
| 297 | <mechanism-realm realm-name="ManagementRealm"/> | ||
| 298 | </mechanism> | ||
| 299 | </mechanism-configuration> | ||
| 300 | </http-authentication-factory> | ||
| 301 | <provider-http-server-mechanism-factory name="global"/> | ||
| 302 | </http> | ||
| 303 | <sasl> | ||
| 304 | <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain"> | ||
| 305 | <mechanism-configuration> | ||
| 306 | <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | ||
| 307 | <mechanism mechanism-name="DIGEST-MD5"> | ||
| 308 | <mechanism-realm realm-name="ApplicationRealm"/> | ||
| 309 | </mechanism> | ||
| 310 | </mechanism-configuration> | ||
| 311 | </sasl-authentication-factory> | ||
| 312 | <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain"> | ||
| 313 | <mechanism-configuration> | ||
| 314 | <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | ||
| 315 | <mechanism mechanism-name="DIGEST-MD5"> | ||
| 316 | <mechanism-realm realm-name="ManagementRealm"/> | ||
| 317 | </mechanism> | ||
| 318 | </mechanism-configuration> | ||
| 319 | </sasl-authentication-factory> | ||
| 320 | <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron"> | ||
| 321 | <properties> | ||
| 322 | <property name="wildfly.sasl.local-user.default-user" value="$local"/> | ||
| 323 | </properties> | ||
| 324 | </configurable-sasl-server-factory> | ||
| 325 | <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global"> | ||
| 326 | <filters> | ||
| 327 | <filter provider-name="WildFlyElytron"/> | ||
| 328 | </filters> | ||
| 329 | </mechanism-provider-filtering-sasl-server-factory> | ||
| 330 | <provider-sasl-server-factory name="global"/> | ||
| 331 | </sasl> | ||
| 332 | </subsystem> | ||
| 333 | <subsystem xmlns="urn:jboss:domain:infinispan:7.0"> | ||
| 334 | <cache-container name="server" default-cache="default" module="org.wildfly.clustering.server"> | ||
| 335 | <local-cache name="default"> | ||
| 336 | <transaction mode="BATCH"/> | ||
| 337 | </local-cache> | ||
| 338 | </cache-container> | ||
| 339 | <cache-container name="web" default-cache="passivation" module="org.wildfly.clustering.web.infinispan"> | ||
| 340 | <local-cache name="passivation"> | ||
| 341 | <locking isolation="REPEATABLE_READ"/> | ||
| 342 | <transaction mode="BATCH"/> | ||
| 343 | <file-store passivation="true" purge="false"/> | ||
| 344 | </local-cache> | ||
| 345 | </cache-container> | ||
| 346 | <cache-container name="ejb" aliases="sfsb" default-cache="passivation" module="org.wildfly.clustering.ejb.infinispan"> | ||
| 347 | <local-cache name="passivation"> | ||
| 348 | <locking isolation="REPEATABLE_READ"/> | ||
| 349 | <transaction mode="BATCH"/> | ||
| 350 | <file-store passivation="true" purge="false"/> | ||
| 351 | </local-cache> | ||
| 352 | </cache-container> | ||
| 353 | <cache-container name="hibernate" module="org.infinispan.hibernate-cache"> | ||
| 354 | <local-cache name="entity"> | ||
| 355 | <transaction mode="NON_XA"/> | ||
| 356 | <object-memory size="10000"/> | ||
| 357 | <expiration max-idle="100000"/> | ||
| 358 | </local-cache> | ||
| 359 | <local-cache name="local-query"> | ||
| 360 | <object-memory size="10000"/> | ||
| 361 | <expiration max-idle="100000"/> | ||
| 362 | </local-cache> | ||
| 363 | <local-cache name="timestamps"/> | ||
| 364 | </cache-container> | ||
| 365 | </subsystem> | ||
| 366 | <subsystem xmlns="urn:jboss:domain:io:3.0"> | ||
| 367 | <worker name="default"/> | ||
| 368 | <buffer-pool name="default"/> | ||
| 369 | </subsystem> | ||
| 370 | <subsystem xmlns="urn:jboss:domain:jaxrs:1.0"/> | ||
| 371 | <subsystem xmlns="urn:jboss:domain:jca:5.0"> | ||
| 372 | <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/> | ||
| 373 | <bean-validation enabled="true"/> | ||
| 374 | <default-workmanager> | ||
| 375 | <short-running-threads> | ||
| 376 | <core-threads count="50"/> | ||
| 377 | <queue-length count="50"/> | ||
| 378 | <max-threads count="50"/> | ||
| 379 | <keepalive-time time="10" unit="seconds"/> | ||
| 380 | </short-running-threads> | ||
| 381 | <long-running-threads> | ||
| 382 | <core-threads count="50"/> | ||
| 383 | <queue-length count="50"/> | ||
| 384 | <max-threads count="50"/> | ||
| 385 | <keepalive-time time="10" unit="seconds"/> | ||
| 386 | </long-running-threads> | ||
| 387 | </default-workmanager> | ||
| 388 | <cached-connection-manager/> | ||
| 389 | </subsystem> | ||
| 390 | <subsystem xmlns="urn:jboss:domain:jdr:1.0"/> | ||
| 391 | <subsystem xmlns="urn:jboss:domain:jmx:1.3"> | ||
| 392 | <expose-resolved-model/> | ||
| 393 | <expose-expression-model/> | ||
| 394 | <remoting-connector/> | ||
| 395 | </subsystem> | ||
| 396 | <subsystem xmlns="urn:jboss:domain:jpa:1.1"> | ||
| 397 | <jpa default-datasource="" default-extended-persistence-inheritance="DEEP"/> | ||
| 398 | </subsystem> | ||
| 399 | <subsystem xmlns="urn:jboss:domain:jsf:1.1"/> | ||
| 400 | <subsystem xmlns="urn:jboss:domain:mail:3.0"> | ||
| 401 | <mail-session name="default" jndi-name="java:jboss/mail/Default"> | ||
| 402 | <smtp-server outbound-socket-binding-ref="mail-smtp"/> | ||
| 403 | </mail-session> | ||
| 404 | </subsystem> | ||
| 405 | <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:1.0"/> | ||
| 406 | <subsystem xmlns="urn:wildfly:microprofile-health-smallrye:1.0" security-enabled="false"/> | ||
| 407 | <subsystem xmlns="urn:wildfly:microprofile-opentracing-smallrye:1.0"/> | ||
| 408 | <subsystem xmlns="urn:jboss:domain:naming:2.0"> | ||
| 409 | <remote-naming/> | ||
| 410 | </subsystem> | ||
| 411 | <subsystem xmlns="urn:jboss:domain:pojo:1.0"/> | ||
| 412 | <subsystem xmlns="urn:jboss:domain:remoting:4.0"> | ||
| 413 | <http-connector name="http-remoting-connector" connector-ref="default" security-realm="ApplicationRealm"/> | ||
| 414 | </subsystem> | ||
| 415 | <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/> | ||
| 416 | <subsystem xmlns="urn:jboss:domain:resource-adapters:5.0"/> | ||
| 417 | <subsystem xmlns="urn:jboss:domain:sar:1.0"/> | ||
| 418 | <subsystem xmlns="urn:jboss:domain:security:2.0"> | ||
| 419 | <security-domains> | ||
| 420 | <security-domain name="other" cache-type="default"> | ||
| 421 | <authentication> | ||
| 422 | <login-module code="Remoting" flag="optional"> | ||
| 423 | <module-option name="password-stacking" value="useFirstPass"/> | ||
| 424 | </login-module> | ||
| 425 | <login-module code="RealmDirect" flag="required"> | ||
| 426 | <module-option name="password-stacking" value="useFirstPass"/> | ||
| 427 | </login-module> | ||
| 428 | </authentication> | ||
| 429 | </security-domain> | ||
| 430 | <security-domain name="jboss-web-policy" cache-type="default"> | ||
| 431 | <authorization> | ||
| 432 | <policy-module code="Delegating" flag="required"/> | ||
| 433 | </authorization> | ||
| 434 | </security-domain> | ||
| 435 | <security-domain name="jaspitest" cache-type="default"> | ||
| 436 | <authentication-jaspi> | ||
| 437 | <login-module-stack name="dummy"> | ||
| 438 | <login-module code="Dummy" flag="optional"/> | ||
| 439 | </login-module-stack> | ||
| 440 | <auth-module code="Dummy"/> | ||
| 441 | </authentication-jaspi> | ||
| 442 | </security-domain> | ||
| 443 | <security-domain name="jboss-ejb-policy" cache-type="default"> | ||
| 444 | <authorization> | ||
| 445 | <policy-module code="Delegating" flag="required"/> | ||
| 446 | </authorization> | ||
| 447 | </security-domain> | ||
| 448 | </security-domains> | ||
| 449 | </subsystem> | ||
| 450 | <subsystem xmlns="urn:jboss:domain:security-manager:1.0"> | ||
| 451 | <deployment-permissions> | ||
| 452 | <maximum-set> | ||
| 453 | <permission class="java.security.AllPermission"/> | ||
| 454 | </maximum-set> | ||
| 455 | </deployment-permissions> | ||
| 456 | </subsystem> | ||
| 457 | <subsystem xmlns="urn:jboss:domain:transactions:5.0"> | ||
| 458 | <core-environment node-identifier="${jboss.tx.node.id:1}"> | ||
| 459 | <process-id> | ||
| 460 | <uuid/> | ||
| 461 | </process-id> | ||
| 462 | </core-environment> | ||
| 463 | <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/> | ||
| 464 | <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/> | ||
| 465 | </subsystem> | ||
| 466 | <subsystem xmlns="urn:jboss:domain:undertow:7.0" default-server="default-server" default-virtual-host="default-host" default-servlet-container="default" default-security-domain="other"> | ||
| 467 | <buffer-cache name="default"/> | ||
| 468 | <server name="default-server"> | ||
| 469 | <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/> | ||
| 470 | <https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/> | ||
| 471 | <host name="default-host" alias="localhost"> | ||
| 472 | <location name="/" handler="welcome-content"/> | ||
| 473 | <http-invoker security-realm="ApplicationRealm"/> | ||
| 474 | </host> | ||
| 475 | </server> | ||
| 476 | <servlet-container name="default"> | ||
| 477 | <jsp-config/> | ||
| 478 | <websockets/> | ||
| 479 | </servlet-container> | ||
| 480 | <handlers> | ||
| 481 | <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/> | ||
| 482 | </handlers> | ||
| 483 | </subsystem> | ||
| 484 | <subsystem xmlns="urn:jboss:domain:webservices:2.0"> | ||
| 485 | <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host> | ||
| 486 | <endpoint-config name="Standard-Endpoint-Config"/> | ||
| 487 | <endpoint-config name="Recording-Endpoint-Config"> | ||
| 488 | <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"> | ||
| 489 | <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/> | ||
| 490 | </pre-handler-chain> | ||
| 491 | </endpoint-config> | ||
| 492 | <client-config name="Standard-Client-Config"/> | ||
| 493 | </subsystem> | ||
| 494 | <subsystem xmlns="urn:jboss:domain:weld:4.0"/> | ||
| 495 | </profile> | ||
| 496 | <interfaces> | ||
| 497 | <interface name="management"> | ||
| 498 | <inet-address value="${jboss.bind.address.management:{{ ansible_facts.default_ipv4.address}}}"/> | ||
| 499 | </interface> | ||
| 500 | <interface name="public"> | ||
| 501 | <inet-address value="${jboss.bind.address.management:{{ ansible_facts.default_ipv4.address}}}"/> | ||
| 502 | </interface> | ||
| 503 | </interfaces> | ||
| 504 | <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}"> | ||
| 505 | <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/> | ||
| 506 | <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/> | ||
| 507 | <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/> | ||
| 508 | <socket-binding name="http" port="${jboss.http.port:8080}"/> | ||
| 509 | <socket-binding name="https" port="${jboss.https.port:8443}"/> | ||
| 510 | <socket-binding name="txn-recovery-environment" port="4712"/> | ||
| 511 | <socket-binding name="txn-status-manager" port="4713"/> | ||
| 512 | <outbound-socket-binding name="mail-smtp"> | ||
| 513 | <remote-destination host="localhost" port="25"/> | ||
| 514 | </outbound-socket-binding> | ||
| 515 | </socket-binding-group> | ||
| 516 | </server> |
roles/jboss/templates/jboss-eap.conf
0 → 100644
| 1 | # General configuration for the init.d scripts, | ||
| 2 | # not necessarily for JBoss EAP itself. | ||
| 3 | # default location: /etc/default/jboss-eap | ||
| 4 | |||
| 5 | ## Location of JDK | ||
| 6 | # JAVA_HOME="/usr/lib/jvm/default-java" | ||
| 7 | |||
| 8 | ## Location of JBoss EAP | ||
| 9 | # JBOSS_HOME="/opt/jboss-eap" | ||
| 10 | JBOSS_HOME={{ jboss_home | default('/opt/jboss-eap') }} | ||
| 11 | |||
| 12 | ## The username who should own the process. | ||
| 13 | # JBOSS_USER=jboss-eap | ||
| 14 | JBOSS_USER={{ system_user | default('jboss-eap') }} | ||
| 15 | |||
| 16 | ## The mode JBoss EAP should start, standalone or domain | ||
| 17 | # JBOSS_MODE=standalone | ||
| 18 | JBOSS_MODE={{ jboss_mode | default('standalone') }} | ||
| 19 | |||
| 20 | ## Configuration for standalone mode | ||
| 21 | # JBOSS_CONFIG=standalone.xml | ||
| 22 | JBOSS_CONFIG={{ jboss_host_config | default('standalone.xml') }} | ||
| 23 | |||
| 24 | ## Configuration for domain mode | ||
| 25 | # JBOSS_DOMAIN_CONFIG=domain.xml | ||
| 26 | # JBOSS_HOST_CONFIG=host-master.xml | ||
| 27 | |||
| 28 | ## The amount of time to wait for startup | ||
| 29 | # STARTUP_WAIT=60 | ||
| 30 | |||
| 31 | ## The amount of time to wait for shutdown | ||
| 32 | # SHUTDOWN_WAIT=60 | ||
| 33 | |||
| 34 | ## Location to keep the console log | ||
| 35 | # JBOSS_CONSOLE_LOG="/var/log/jboss-eap/console.log" | ||
| 36 | JBOSS_CONSOLE_LOG="/var/log/jboss-eap/console.log" | ||
| 37 | |||
| 38 | ## Additionals args to include in startup | ||
| 39 | # JBOSS_OPTS="--admin-only -b 127.0.0.1" | ||
| 40 | # original | ||
| 41 | #{% if inventory_hostname.startswith('p') %} | ||
| 42 | # JBOSS_OPTS="-Djboss.default.multicast.address=230.0.0.10 -Djboss.modcluster.multicast.address=224.0.1.106 -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true" | ||
| 43 | #{% endif %} | ||
| 44 | |||
| 45 | #{% if inventory_hostname.startswith('t') %} | ||
| 46 | # JBOSS_OPTS="-Djboss.default.multicast.address=230.0.0.20 -Djboss.modcluster.multicast.address=224.0.1.107 -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true" | ||
| 47 | #{% endif %} |
roles/jboss/templates/mgmt-users.properties
0 → 100644
| 1 | # | ||
| 2 | # Properties declaration of users for the realm 'ManagementRealm' which is the default realm | ||
| 3 | # for new installations. Further authentication mechanism can be configured | ||
| 4 | # as part of the <management /> in standalone.xml. | ||
| 5 | # | ||
| 6 | # Users can be added to this properties file at any time, updates after the server has started | ||
| 7 | # will be automatically detected. | ||
| 8 | # | ||
| 9 | # By default the properties realm expects the entries to be in the format: - | ||
| 10 | # username=HEX( MD5( username ':' realm ':' password)) | ||
| 11 | # | ||
| 12 | # A utility script is provided which can be executed from the bin folder to add the users: - | ||
| 13 | # - Linux | ||
| 14 | # bin/add-user.sh | ||
| 15 | # | ||
| 16 | # - Windows | ||
| 17 | # bin\add-user.bat | ||
| 18 | # | ||
| 19 | #$REALM_NAME=ManagementRealm$ This line is used by the add-user utility to identify the realm name already used in this file. | ||
| 20 | # | ||
| 21 | # On start-up the server will also automatically add a user $local - this user is specifically | ||
| 22 | # for local tools running against this AS installation. | ||
| 23 | # | ||
| 24 | # The following illustrates how an admin user could be defined, this | ||
| 25 | # is for illustration only and does not correspond to a usable password. | ||
| 26 | # | ||
| 27 | |||
| 28 | # Usuarios de Test | ||
| 29 | {% if inventory_hostname.startswith('t') %} | ||
| 30 | admin=c06ba95adae374bc766be220fad6cc0a | ||
| 31 | devcodium=dae58724eeb3a075ed0f1328baaf7412 | ||
| 32 | dtrevisan=4cfe1609b4f882d9d5df167201b5f8f3 | ||
| 33 | earce=eab2990cd53ae5660f68b8031a9087b2 | ||
| 34 | data=38d49bf344d1404f2b43a7981e888bfd | ||
| 35 | {% endif %} | ||
| 36 | |||
| 37 | |||
| 38 | # Usuarios de Produccion | ||
| 39 | {% if inventory_hostname.startswith('p') %} | ||
| 40 | admin=c06ba95adae374bc766be220fad6cc0a | ||
| 41 | devcodium=dae58724eeb3a075ed0f1328baaf7412 | ||
| 42 | dtrevisan=4cfe1609b4f882d9d5df167201b5f8f3 | ||
| 43 | earce=eab2990cd53ae5660f68b8031a9087b2 | ||
| 44 | data=38d49bf344d1404f2b43a7981e888bfd | ||
| 45 | {% endif %} |
roles/jboss/templates/new_standalone.xml
0 → 100755
| 1 | <?xml version='1.0' encoding='UTF-8'?> | ||
| 2 | |||
| 3 | <server xmlns="urn:jboss:domain:8.0"> | ||
| 4 | <extensions> | ||
| 5 | <extension module="org.jboss.as.clustering.infinispan"/> | ||
| 6 | <extension module="org.jboss.as.connector"/> | ||
| 7 | <extension module="org.jboss.as.deployment-scanner"/> | ||
| 8 | <extension module="org.jboss.as.ee"/> | ||
| 9 | <extension module="org.jboss.as.ejb3"/> | ||
| 10 | <extension module="org.jboss.as.jaxrs"/> | ||
| 11 | <extension module="org.jboss.as.jdr"/> | ||
| 12 | <extension module="org.jboss.as.jmx"/> | ||
| 13 | <extension module="org.jboss.as.jpa"/> | ||
| 14 | <extension module="org.jboss.as.jsf"/> | ||
| 15 | <extension module="org.jboss.as.logging"/> | ||
| 16 | <extension module="org.jboss.as.mail"/> | ||
| 17 | <extension module="org.jboss.as.naming"/> | ||
| 18 | <extension module="org.jboss.as.pojo"/> | ||
| 19 | <extension module="org.jboss.as.remoting"/> | ||
| 20 | <extension module="org.jboss.as.sar"/> | ||
| 21 | <extension module="org.jboss.as.security"/> | ||
| 22 | <extension module="org.jboss.as.transactions"/> | ||
| 23 | <extension module="org.jboss.as.webservices"/> | ||
| 24 | <extension module="org.jboss.as.weld"/> | ||
| 25 | <extension module="org.wildfly.extension.batch.jberet"/> | ||
| 26 | <extension module="org.wildfly.extension.bean-validation"/> | ||
| 27 | <extension module="org.wildfly.extension.core-management"/> | ||
| 28 | <extension module="org.wildfly.extension.discovery"/> | ||
| 29 | <extension module="org.wildfly.extension.ee-security"/> | ||
| 30 | <extension module="org.wildfly.extension.elytron"/> | ||
| 31 | <extension module="org.wildfly.extension.io"/> | ||
| 32 | <extension module="org.wildfly.extension.microprofile.config-smallrye"/> | ||
| 33 | <extension module="org.wildfly.extension.microprofile.health-smallrye"/> | ||
| 34 | <extension module="org.wildfly.extension.microprofile.opentracing-smallrye"/> | ||
| 35 | <extension module="org.wildfly.extension.request-controller"/> | ||
| 36 | <extension module="org.wildfly.extension.security.manager"/> | ||
| 37 | <extension module="org.wildfly.extension.undertow"/> | ||
| 38 | </extensions> | ||
| 39 | <management> | ||
| 40 | <security-realms> | ||
| 41 | <security-realm name="ManagementRealm"> | ||
| 42 | <authentication> | ||
| 43 | <local default-user="$local" skip-group-loading="true"/> | ||
| 44 | <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/> | ||
| 45 | </authentication> | ||
| 46 | <authorization map-groups-to-roles="false"> | ||
| 47 | <properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/> | ||
| 48 | </authorization> | ||
| 49 | </security-realm> | ||
| 50 | <security-realm name="ApplicationRealm"> | ||
| 51 | <server-identities> | ||
| 52 | <ssl> | ||
| 53 | <keystore path="application.keystore" relative-to="jboss.server.config.dir" keystore-password="password" alias="server" key-password="password" generate-self-signed-certificate-host="localhost"/> | ||
| 54 | </ssl> | ||
| 55 | </server-identities> | ||
| 56 | <authentication> | ||
| 57 | <local default-user="$local" allowed-users="*" skip-group-loading="true"/> | ||
| 58 | <properties path="application-users.properties" relative-to="jboss.server.config.dir"/> | ||
| 59 | </authentication> | ||
| 60 | <authorization> | ||
| 61 | <properties path="application-roles.properties" relative-to="jboss.server.config.dir"/> | ||
| 62 | </authorization> | ||
| 63 | </security-realm> | ||
| 64 | </security-realms> | ||
| 65 | <audit-log> | ||
| 66 | <formatters> | ||
| 67 | <json-formatter name="json-formatter"/> | ||
| 68 | </formatters> | ||
| 69 | <handlers> | ||
| 70 | <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/> | ||
| 71 | </handlers> | ||
| 72 | <logger log-boot="true" log-read-only="false" enabled="false"> | ||
| 73 | <handlers> | ||
| 74 | <handler name="file"/> | ||
| 75 | </handlers> | ||
| 76 | </logger> | ||
| 77 | </audit-log> | ||
| 78 | <management-interfaces> | ||
| 79 | <http-interface security-realm="ManagementRealm"> | ||
| 80 | <http-upgrade enabled="true"/> | ||
| 81 | <socket-binding http="management-http"/> | ||
| 82 | </http-interface> | ||
| 83 | </management-interfaces> | ||
| 84 | <access-control provider="simple"> | ||
| 85 | <role-mapping> | ||
| 86 | <role name="SuperUser"> | ||
| 87 | <include> | ||
| 88 | <user name="$local"/> | ||
| 89 | </include> | ||
| 90 | </role> | ||
| 91 | </role-mapping> | ||
| 92 | </access-control> | ||
| 93 | </management> | ||
| 94 | <profile> | ||
| 95 | <subsystem xmlns="urn:jboss:domain:logging:6.0"> | ||
| 96 | <console-handler name="CONSOLE"> | ||
| 97 | <level name="INFO"/> | ||
| 98 | <formatter> | ||
| 99 | <named-formatter name="COLOR-PATTERN"/> | ||
| 100 | </formatter> | ||
| 101 | </console-handler> | ||
| 102 | <periodic-rotating-file-handler name="FILE" autoflush="true"> | ||
| 103 | <formatter> | ||
| 104 | <named-formatter name="PATTERN"/> | ||
| 105 | </formatter> | ||
| 106 | <file relative-to="jboss.server.log.dir" path="server.log"/> | ||
| 107 | <suffix value=".yyyy-MM-dd"/> | ||
| 108 | <append value="true"/> | ||
| 109 | </periodic-rotating-file-handler> | ||
| 110 | <logger category="com.arjuna"> | ||
| 111 | <level name="WARN"/> | ||
| 112 | </logger> | ||
| 113 | <logger category="org.jboss.as.config"> | ||
| 114 | <level name="DEBUG"/> | ||
| 115 | </logger> | ||
| 116 | <logger category="sun.rmi"> | ||
| 117 | <level name="WARN"/> | ||
| 118 | </logger> | ||
| 119 | <root-logger> | ||
| 120 | <level name="INFO"/> | ||
| 121 | <handlers> | ||
| 122 | <handler name="CONSOLE"/> | ||
| 123 | <handler name="FILE"/> | ||
| 124 | </handlers> | ||
| 125 | </root-logger> | ||
| 126 | <formatter name="PATTERN"> | ||
| 127 | <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/> | ||
| 128 | </formatter> | ||
| 129 | <formatter name="COLOR-PATTERN"> | ||
| 130 | <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/> | ||
| 131 | </formatter> | ||
| 132 | </subsystem> | ||
| 133 | <subsystem xmlns="urn:jboss:domain:batch-jberet:2.0"> | ||
| 134 | <default-job-repository name="in-memory"/> | ||
| 135 | <default-thread-pool name="batch"/> | ||
| 136 | <job-repository name="in-memory"> | ||
| 137 | <in-memory/> | ||
| 138 | </job-repository> | ||
| 139 | <thread-pool name="batch"> | ||
| 140 | <max-threads count="10"/> | ||
| 141 | <keepalive-time time="30" unit="seconds"/> | ||
| 142 | </thread-pool> | ||
| 143 | </subsystem> | ||
| 144 | <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/> | ||
| 145 | <subsystem xmlns="urn:jboss:domain:core-management:1.0"/> | ||
| 146 | <subsystem xmlns="urn:jboss:domain:datasources:5.0"> | ||
| 147 | <datasources> | ||
| 148 | <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true"> | ||
| 149 | <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE</connection-url> | ||
| 150 | <driver>h2</driver> | ||
| 151 | <security> | ||
| 152 | <user-name>sa</user-name> | ||
| 153 | <password>sa</password> | ||
| 154 | </security> | ||
| 155 | </datasource> | ||
| 156 | <drivers> | ||
| 157 | <driver name="h2" module="com.h2database.h2"> | ||
| 158 | <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class> | ||
| 159 | </driver> | ||
| 160 | </drivers> | ||
| 161 | </datasources> | ||
| 162 | </subsystem> | ||
| 163 | <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0"> | ||
| 164 | <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/> | ||
| 165 | </subsystem> | ||
| 166 | <subsystem xmlns="urn:jboss:domain:discovery:1.0"/> | ||
| 167 | <subsystem xmlns="urn:jboss:domain:ee:4.0"> | ||
| 168 | <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement> | ||
| 169 | <concurrent> | ||
| 170 | <context-services> | ||
| 171 | <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default" use-transaction-setup-provider="true"/> | ||
| 172 | </context-services> | ||
| 173 | <managed-thread-factories> | ||
| 174 | <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/> | ||
| 175 | </managed-thread-factories> | ||
| 176 | <managed-executor-services> | ||
| 177 | <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-threshold="60000" keepalive-time="5000"/> | ||
| 178 | </managed-executor-services> | ||
| 179 | <managed-scheduled-executor-services> | ||
| 180 | <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-threshold="60000" keepalive-time="3000"/> | ||
| 181 | </managed-scheduled-executor-services> | ||
| 182 | </concurrent> | ||
| 183 | <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/> | ||
| 184 | </subsystem> | ||
| 185 | <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/> | ||
| 186 | <subsystem xmlns="urn:jboss:domain:ejb3:5.0"> | ||
| 187 | <session-bean> | ||
| 188 | <stateless> | ||
| 189 | <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/> | ||
| 190 | </stateless> | ||
| 191 | <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/> | ||
| 192 | <singleton default-access-timeout="5000"/> | ||
| 193 | </session-bean> | ||
| 194 | <pools> | ||
| 195 | <bean-instance-pools> | ||
| 196 | <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | ||
| 197 | <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | ||
| 198 | </bean-instance-pools> | ||
| 199 | </pools> | ||
| 200 | <caches> | ||
| 201 | <cache name="simple"/> | ||
| 202 | <cache name="distributable" passivation-store-ref="infinispan" aliases="passivating clustered"/> | ||
| 203 | </caches> | ||
| 204 | <passivation-stores> | ||
| 205 | <passivation-store name="infinispan" cache-container="ejb" max-size="10000"/> | ||
| 206 | </passivation-stores> | ||
| 207 | <async thread-pool-name="default"/> | ||
| 208 | <timer-service thread-pool-name="default" default-data-store="default-file-store"> | ||
| 209 | <data-stores> | ||
| 210 | <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/> | ||
| 211 | </data-stores> | ||
| 212 | </timer-service> | ||
| 213 | <remote connector-ref="http-remoting-connector" thread-pool-name="default"> | ||
| 214 | <channel-creation-options> | ||
| 215 | <option name="READ_TIMEOUT" value="${prop.remoting-connector.read.timeout:20}" type="xnio"/> | ||
| 216 | <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/> | ||
| 217 | </channel-creation-options> | ||
| 218 | </remote> | ||
| 219 | <thread-pools> | ||
| 220 | <thread-pool name="default"> | ||
| 221 | <max-threads count="10"/> | ||
| 222 | <keepalive-time time="100" unit="milliseconds"/> | ||
| 223 | </thread-pool> | ||
| 224 | </thread-pools> | ||
| 225 | <default-security-domain value="other"/> | ||
| 226 | <default-missing-method-permissions-deny-access value="true"/> | ||
| 227 | <log-system-exceptions value="true"/> | ||
| 228 | </subsystem> | ||
| 229 | <subsystem xmlns="urn:wildfly:elytron:4.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto"> | ||
| 230 | <providers> | ||
| 231 | <aggregate-providers name="combined-providers"> | ||
| 232 | <providers name="elytron"/> | ||
| 233 | <providers name="openssl"/> | ||
| 234 | </aggregate-providers> | ||
| 235 | <provider-loader name="elytron" module="org.wildfly.security.elytron"/> | ||
| 236 | <provider-loader name="openssl" module="org.wildfly.openssl"/> | ||
| 237 | </providers> | ||
| 238 | <audit-logging> | ||
| 239 | <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/> | ||
| 240 | </audit-logging> | ||
| 241 | <security-domains> | ||
| 242 | <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper"> | ||
| 243 | <realm name="ApplicationRealm" role-decoder="groups-to-roles"/> | ||
| 244 | <realm name="local"/> | ||
| 245 | </security-domain> | ||
| 246 | <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper"> | ||
| 247 | <realm name="ManagementRealm" role-decoder="groups-to-roles"/> | ||
| 248 | <realm name="local" role-mapper="super-user-mapper"/> | ||
| 249 | </security-domain> | ||
| 250 | </security-domains> | ||
| 251 | <security-realms> | ||
| 252 | <identity-realm name="local" identity="$local"/> | ||
| 253 | <properties-realm name="ApplicationRealm"> | ||
| 254 | <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/> | ||
| 255 | <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/> | ||
| 256 | </properties-realm> | ||
| 257 | <properties-realm name="ManagementRealm"> | ||
| 258 | <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/> | ||
| 259 | <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/> | ||
| 260 | </properties-realm> | ||
| 261 | </security-realms> | ||
| 262 | <mappers> | ||
| 263 | <simple-permission-mapper name="default-permission-mapper" mapping-mode="first"> | ||
| 264 | <permission-mapping> | ||
| 265 | <principal name="anonymous"/> | ||
| 266 | <permission-set name="default-permissions"/> | ||
| 267 | </permission-mapping> | ||
| 268 | <permission-mapping match-all="true"> | ||
| 269 | <permission-set name="login-permission"/> | ||
| 270 | <permission-set name="default-permissions"/> | ||
| 271 | </permission-mapping> | ||
| 272 | </simple-permission-mapper> | ||
| 273 | <constant-realm-mapper name="local" realm-name="local"/> | ||
| 274 | <simple-role-decoder name="groups-to-roles" attribute="groups"/> | ||
| 275 | <constant-role-mapper name="super-user-mapper"> | ||
| 276 | <role name="SuperUser"/> | ||
| 277 | </constant-role-mapper> | ||
| 278 | </mappers> | ||
| 279 | <permission-sets> | ||
| 280 | <permission-set name="login-permission"> | ||
| 281 | <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/> | ||
| 282 | </permission-set> | ||
| 283 | <permission-set name="default-permissions"> | ||
| 284 | <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/> | ||
| 285 | <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/> | ||
| 286 | <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/> | ||
| 287 | </permission-set> | ||
| 288 | </permission-sets> | ||
| 289 | <http> | ||
| 290 | <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global"> | ||
| 291 | <mechanism-configuration> | ||
| 292 | <mechanism mechanism-name="DIGEST"> | ||
| 293 | <mechanism-realm realm-name="ManagementRealm"/> | ||
| 294 | </mechanism> | ||
| 295 | </mechanism-configuration> | ||
| 296 | </http-authentication-factory> | ||
| 297 | <provider-http-server-mechanism-factory name="global"/> | ||
| 298 | </http> | ||
| 299 | <sasl> | ||
| 300 | <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain"> | ||
| 301 | <mechanism-configuration> | ||
| 302 | <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | ||
| 303 | <mechanism mechanism-name="DIGEST-MD5"> | ||
| 304 | <mechanism-realm realm-name="ApplicationRealm"/> | ||
| 305 | </mechanism> | ||
| 306 | </mechanism-configuration> | ||
| 307 | </sasl-authentication-factory> | ||
| 308 | <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain"> | ||
| 309 | <mechanism-configuration> | ||
| 310 | <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | ||
| 311 | <mechanism mechanism-name="DIGEST-MD5"> | ||
| 312 | <mechanism-realm realm-name="ManagementRealm"/> | ||
| 313 | </mechanism> | ||
| 314 | </mechanism-configuration> | ||
| 315 | </sasl-authentication-factory> | ||
| 316 | <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron"> | ||
| 317 | <properties> | ||
| 318 | <property name="wildfly.sasl.local-user.default-user" value="$local"/> | ||
| 319 | </properties> | ||
| 320 | </configurable-sasl-server-factory> | ||
| 321 | <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global"> | ||
| 322 | <filters> | ||
| 323 | <filter provider-name="WildFlyElytron"/> | ||
| 324 | </filters> | ||
| 325 | </mechanism-provider-filtering-sasl-server-factory> | ||
| 326 | <provider-sasl-server-factory name="global"/> | ||
| 327 | </sasl> | ||
| 328 | </subsystem> | ||
| 329 | <subsystem xmlns="urn:jboss:domain:infinispan:7.0"> | ||
| 330 | <cache-container name="server" default-cache="default" module="org.wildfly.clustering.server"> | ||
| 331 | <local-cache name="default"> | ||
| 332 | <transaction mode="BATCH"/> | ||
| 333 | </local-cache> | ||
| 334 | </cache-container> | ||
| 335 | <cache-container name="web" default-cache="passivation" module="org.wildfly.clustering.web.infinispan"> | ||
| 336 | <local-cache name="passivation"> | ||
| 337 | <locking isolation="REPEATABLE_READ"/> | ||
| 338 | <transaction mode="BATCH"/> | ||
| 339 | <file-store passivation="true" purge="false"/> | ||
| 340 | </local-cache> | ||
| 341 | </cache-container> | ||
| 342 | <cache-container name="ejb" aliases="sfsb" default-cache="passivation" module="org.wildfly.clustering.ejb.infinispan"> | ||
| 343 | <local-cache name="passivation"> | ||
| 344 | <locking isolation="REPEATABLE_READ"/> | ||
| 345 | <transaction mode="BATCH"/> | ||
| 346 | <file-store passivation="true" purge="false"/> | ||
| 347 | </local-cache> | ||
| 348 | </cache-container> | ||
| 349 | <cache-container name="hibernate" module="org.infinispan.hibernate-cache"> | ||
| 350 | <local-cache name="entity"> | ||
| 351 | <transaction mode="NON_XA"/> | ||
| 352 | <object-memory size="10000"/> | ||
| 353 | <expiration max-idle="100000"/> | ||
| 354 | </local-cache> | ||
| 355 | <local-cache name="local-query"> | ||
| 356 | <object-memory size="10000"/> | ||
| 357 | <expiration max-idle="100000"/> | ||
| 358 | </local-cache> | ||
| 359 | <local-cache name="timestamps"/> | ||
| 360 | </cache-container> | ||
| 361 | </subsystem> | ||
| 362 | <subsystem xmlns="urn:jboss:domain:io:3.0"> | ||
| 363 | <worker name="default"/> | ||
| 364 | <buffer-pool name="default"/> | ||
| 365 | </subsystem> | ||
| 366 | <subsystem xmlns="urn:jboss:domain:jaxrs:1.0"/> | ||
| 367 | <subsystem xmlns="urn:jboss:domain:jca:5.0"> | ||
| 368 | <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/> | ||
| 369 | <bean-validation enabled="true"/> | ||
| 370 | <default-workmanager> | ||
| 371 | <short-running-threads> | ||
| 372 | <core-threads count="50"/> | ||
| 373 | <queue-length count="50"/> | ||
| 374 | <max-threads count="50"/> | ||
| 375 | <keepalive-time time="10" unit="seconds"/> | ||
| 376 | </short-running-threads> | ||
| 377 | <long-running-threads> | ||
| 378 | <core-threads count="50"/> | ||
| 379 | <queue-length count="50"/> | ||
| 380 | <max-threads count="50"/> | ||
| 381 | <keepalive-time time="10" unit="seconds"/> | ||
| 382 | </long-running-threads> | ||
| 383 | </default-workmanager> | ||
| 384 | <cached-connection-manager/> | ||
| 385 | </subsystem> | ||
| 386 | <subsystem xmlns="urn:jboss:domain:jdr:1.0"/> | ||
| 387 | <subsystem xmlns="urn:jboss:domain:jmx:1.3"> | ||
| 388 | <expose-resolved-model/> | ||
| 389 | <expose-expression-model/> | ||
| 390 | <remoting-connector/> | ||
| 391 | </subsystem> | ||
| 392 | <subsystem xmlns="urn:jboss:domain:jpa:1.1"> | ||
| 393 | <jpa default-datasource="" default-extended-persistence-inheritance="DEEP"/> | ||
| 394 | </subsystem> | ||
| 395 | <subsystem xmlns="urn:jboss:domain:jsf:1.1"/> | ||
| 396 | <subsystem xmlns="urn:jboss:domain:mail:3.0"> | ||
| 397 | <mail-session name="default" jndi-name="java:jboss/mail/Default"> | ||
| 398 | <smtp-server outbound-socket-binding-ref="mail-smtp"/> | ||
| 399 | </mail-session> | ||
| 400 | </subsystem> | ||
| 401 | <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:1.0"/> | ||
| 402 | <subsystem xmlns="urn:wildfly:microprofile-health-smallrye:1.0" security-enabled="false"/> | ||
| 403 | <subsystem xmlns="urn:wildfly:microprofile-opentracing-smallrye:1.0"/> | ||
| 404 | <subsystem xmlns="urn:jboss:domain:naming:2.0"> | ||
| 405 | <remote-naming/> | ||
| 406 | </subsystem> | ||
| 407 | <subsystem xmlns="urn:jboss:domain:pojo:1.0"/> | ||
| 408 | <subsystem xmlns="urn:jboss:domain:remoting:4.0"> | ||
| 409 | <http-connector name="http-remoting-connector" connector-ref="default" security-realm="ApplicationRealm"/> | ||
| 410 | </subsystem> | ||
| 411 | <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/> | ||
| 412 | <subsystem xmlns="urn:jboss:domain:resource-adapters:5.0"/> | ||
| 413 | <subsystem xmlns="urn:jboss:domain:sar:1.0"/> | ||
| 414 | <subsystem xmlns="urn:jboss:domain:security:2.0"> | ||
| 415 | <security-domains> | ||
| 416 | <security-domain name="other" cache-type="default"> | ||
| 417 | <authentication> | ||
| 418 | <login-module code="Remoting" flag="optional"> | ||
| 419 | <module-option name="password-stacking" value="useFirstPass"/> | ||
| 420 | </login-module> | ||
| 421 | <login-module code="RealmDirect" flag="required"> | ||
| 422 | <module-option name="password-stacking" value="useFirstPass"/> | ||
| 423 | </login-module> | ||
| 424 | </authentication> | ||
| 425 | </security-domain> | ||
| 426 | <security-domain name="jboss-web-policy" cache-type="default"> | ||
| 427 | <authorization> | ||
| 428 | <policy-module code="Delegating" flag="required"/> | ||
| 429 | </authorization> | ||
| 430 | </security-domain> | ||
| 431 | <security-domain name="jaspitest" cache-type="default"> | ||
| 432 | <authentication-jaspi> | ||
| 433 | <login-module-stack name="dummy"> | ||
| 434 | <login-module code="Dummy" flag="optional"/> | ||
| 435 | </login-module-stack> | ||
| 436 | <auth-module code="Dummy"/> | ||
| 437 | </authentication-jaspi> | ||
| 438 | </security-domain> | ||
| 439 | <security-domain name="jboss-ejb-policy" cache-type="default"> | ||
| 440 | <authorization> | ||
| 441 | <policy-module code="Delegating" flag="required"/> | ||
| 442 | </authorization> | ||
| 443 | </security-domain> | ||
| 444 | </security-domains> | ||
| 445 | </subsystem> | ||
| 446 | <subsystem xmlns="urn:jboss:domain:security-manager:1.0"> | ||
| 447 | <deployment-permissions> | ||
| 448 | <maximum-set> | ||
| 449 | <permission class="java.security.AllPermission"/> | ||
| 450 | </maximum-set> | ||
| 451 | </deployment-permissions> | ||
| 452 | </subsystem> | ||
| 453 | <subsystem xmlns="urn:jboss:domain:transactions:5.0"> | ||
| 454 | <core-environment node-identifier="${jboss.tx.node.id:1}"> | ||
| 455 | <process-id> | ||
| 456 | <uuid/> | ||
| 457 | </process-id> | ||
| 458 | </core-environment> | ||
| 459 | <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/> | ||
| 460 | <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/> | ||
| 461 | </subsystem> | ||
| 462 | <subsystem xmlns="urn:jboss:domain:undertow:7.0" default-server="default-server" default-virtual-host="default-host" default-servlet-container="default" default-security-domain="other"> | ||
| 463 | <buffer-cache name="default"/> | ||
| 464 | <server name="default-server"> | ||
| 465 | <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/> | ||
| 466 | <https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/> | ||
| 467 | <host name="default-host" alias="localhost"> | ||
| 468 | <location name="/" handler="welcome-content"/> | ||
| 469 | <http-invoker security-realm="ApplicationRealm"/> | ||
| 470 | </host> | ||
| 471 | </server> | ||
| 472 | <servlet-container name="default"> | ||
| 473 | <jsp-config/> | ||
| 474 | <websockets/> | ||
| 475 | </servlet-container> | ||
| 476 | <handlers> | ||
| 477 | <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/> | ||
| 478 | </handlers> | ||
| 479 | </subsystem> | ||
| 480 | <subsystem xmlns="urn:jboss:domain:webservices:2.0"> | ||
| 481 | <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host> | ||
| 482 | <endpoint-config name="Standard-Endpoint-Config"/> | ||
| 483 | <endpoint-config name="Recording-Endpoint-Config"> | ||
| 484 | <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"> | ||
| 485 | <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/> | ||
| 486 | </pre-handler-chain> | ||
| 487 | </endpoint-config> | ||
| 488 | <client-config name="Standard-Client-Config"/> | ||
| 489 | </subsystem> | ||
| 490 | <subsystem xmlns="urn:jboss:domain:weld:4.0"/> | ||
| 491 | </profile> | ||
| 492 | <interfaces> | ||
| 493 | <interface name="management"> | ||
| 494 | <inet-address value="${jboss.bind.address.management:127.0.0.1}"/> | ||
| 495 | </interface> | ||
| 496 | <interface name="public"> | ||
| 497 | <inet-address value="${jboss.bind.address:127.0.0.1}"/> | ||
| 498 | </interface> | ||
| 499 | </interfaces> | ||
| 500 | <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}"> | ||
| 501 | <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/> | ||
| 502 | <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/> | ||
| 503 | <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/> | ||
| 504 | <socket-binding name="http" port="${jboss.http.port:8080}"/> | ||
| 505 | <socket-binding name="https" port="${jboss.https.port:8443}"/> | ||
| 506 | <socket-binding name="txn-recovery-environment" port="4712"/> | ||
| 507 | <socket-binding name="txn-status-manager" port="4713"/> | ||
| 508 | <outbound-socket-binding name="mail-smtp"> | ||
| 509 | <remote-destination host="localhost" port="25"/> | ||
| 510 | </outbound-socket-binding> | ||
| 511 | </socket-binding-group> | ||
| 512 | </server> | ||
| ... | \ No newline at end of file | ... | \ No newline at end of file |
roles/jboss/templates/oracle_module.xml
0 → 100644
roles/jboss/templates/postgresql_module.xml
0 → 100644
| 1 | <?xml version='1.0' encoding='UTF-8'?> | ||
| 2 | |||
| 3 | <module xmlns="urn:jboss:module:1.1" name="org.postgresql"> | ||
| 4 | |||
| 5 | <resources> | ||
| 6 | <resource-root path="postgresql-9.2-1000.jdbc4.jar"/> | ||
| 7 | </resources> | ||
| 8 | |||
| 9 | <dependencies> | ||
| 10 | <module name="javax.api"/> | ||
| 11 | <module name="javax.transaction.api"/> | ||
| 12 | </dependencies> | ||
| 13 | </module> |
roles/jboss/templates/standalone.conf
0 → 100644
| 1 | ## -*- shell-script -*- ###################################################### | ||
| 2 | ## ## | ||
| 3 | ## JBoss EAP Bootstrap Script Configuration ## | ||
| 4 | ## ## | ||
| 5 | ############################################################################## | ||
| 6 | |||
| 7 | # | ||
| 8 | # This file is optional; it may be removed if not needed. | ||
| 9 | # | ||
| 10 | |||
| 11 | # | ||
| 12 | # Specify the maximum file descriptor limit, use "max" or "maximum" to use | ||
| 13 | # the default, as queried by the system. | ||
| 14 | # | ||
| 15 | # Defaults to "maximum" | ||
| 16 | # | ||
| 17 | #MAX_FD="maximum" | ||
| 18 | |||
| 19 | # | ||
| 20 | # Specify the profiler configuration file to load. | ||
| 21 | # | ||
| 22 | # Default is to not load profiler configuration file. | ||
| 23 | # | ||
| 24 | #PROFILER="" | ||
| 25 | |||
| 26 | # | ||
| 27 | # Specify the location of the Java home directory. If set then $JAVA will | ||
| 28 | # be defined to $JAVA_HOME/bin/java, else $JAVA will be "java". | ||
| 29 | # | ||
| 30 | #JAVA_HOME="/opt/java/jdk" | ||
| 31 | |||
| 32 | # tell linux glibc how many memory pools can be created that are used by malloc | ||
| 33 | # MALLOC_ARENA_MAX="5" | ||
| 34 | |||
| 35 | # | ||
| 36 | # Specify the exact Java VM executable to use. | ||
| 37 | # | ||
| 38 | #JAVA="" | ||
| 39 | |||
| 40 | if [ "x$JBOSS_MODULES_SYSTEM_PKGS" = "x" ]; then | ||
| 41 | JBOSS_MODULES_SYSTEM_PKGS="org.jboss.byteman" | ||
| 42 | fi | ||
| 43 | |||
| 44 | # Uncomment the following line to prevent manipulation of JVM options | ||
| 45 | # by shell scripts. | ||
| 46 | # | ||
| 47 | #PRESERVE_JAVA_OPTS=true | ||
| 48 | |||
| 49 | # | ||
| 50 | # Specify options to pass to the Java VM. | ||
| 51 | # | ||
| 52 | if [ "x$JAVA_OPTS" = "x" ]; then | ||
| 53 | JAVA_OPTS="-Xms{{ java_heap_xms | default('1303m') }} -Xmx{{ java_heap_xmx | default('1303m') }} -XX:MetaspaceSize={{ java_metaspace_min | default('96M') }} -XX:MaxMetaspaceSize={{ java_metaspace_max | default('256m') }} -Djava.net.preferIPv4Stack=true" | ||
| 54 | JAVA_OPTS="$JAVA_OPTS -server -XX:+DoEscapeAnalysis -XX:+UseG1GC -XX:+ExplicitGCInvokesConcurrent -XX:MaxGCPauseMillis=500" | ||
| 55 | JAVA_OPTS="$JAVA_OPTS -Djboss.modules.system.pkgs=$JBOSS_MODULES_SYSTEM_PKGS -Djava.awt.headless=true" | ||
| 56 | else | ||
| 57 | echo "JAVA_OPTS already set in environment; overriding default settings with values: $JAVA_OPTS" | ||
| 58 | fi | ||
| 59 | |||
| 60 | # Sample JPDA settings for remote socket debugging | ||
| 61 | #JAVA_OPTS="$JAVA_OPTS -agentlib:jdwp=transport=dt_socket,address=8787,server=y,suspend=n" | ||
| 62 | |||
| 63 | # Sample JPDA settings for shared memory debugging | ||
| 64 | #JAVA_OPTS="$JAVA_OPTS -agentlib:jdwp=transport=dt_shmem,server=y,suspend=n,address=jboss" | ||
| 65 | |||
| 66 | # Uncomment to not use JBoss Modules lockless mode | ||
| 67 | #JAVA_OPTS="$JAVA_OPTS -Djboss.modules.lockless=false" | ||
| 68 | |||
| 69 | # Uncomment to gather JBoss Modules metrics | ||
| 70 | #JAVA_OPTS="$JAVA_OPTS -Djboss.modules.metrics=true" | ||
| 71 | |||
| 72 | # Uncomment this to run with a security manager enabled | ||
| 73 | # SECMGR="true" | ||
| 74 | |||
| 75 | # Uncomment this in order to be able to run WildFly on FreeBSD | ||
| 76 | # when you get "epoll_create function not implemented" message in dmesg output | ||
| 77 | #JAVA_OPTS="$JAVA_OPTS -Djava.nio.channels.spi.SelectorProvider=sun.nio.ch.PollSelectorProvider" | ||
| 78 | |||
| 79 | # enable garbage collection logging if not set in environment differently | ||
| 80 | if [ "x$GC_LOG" = "x" ]; then | ||
| 81 | GC_LOG="true" | ||
| 82 | else | ||
| 83 | echo "GC_LOG set in environment to $GC_LOG" | ||
| 84 | fi | ||
| 85 |
roles/jboss/templates/standalone.xml
0 → 100644
| 1 | <?xml version='1.0' encoding='UTF-8'?> | ||
| 2 | |||
| 3 | <server xmlns="urn:jboss:domain:8.0"> | ||
| 4 | <extensions> | ||
| 5 | <extension module="org.jboss.as.clustering.infinispan"/> | ||
| 6 | <extension module="org.jboss.as.connector"/> | ||
| 7 | <extension module="org.jboss.as.deployment-scanner"/> | ||
| 8 | <extension module="org.jboss.as.ee"/> | ||
| 9 | <extension module="org.jboss.as.ejb3"/> | ||
| 10 | <extension module="org.jboss.as.jaxrs"/> | ||
| 11 | <extension module="org.jboss.as.jdr"/> | ||
| 12 | <extension module="org.jboss.as.jmx"/> | ||
| 13 | <extension module="org.jboss.as.jpa"/> | ||
| 14 | <extension module="org.jboss.as.jsf"/> | ||
| 15 | <extension module="org.jboss.as.logging"/> | ||
| 16 | <extension module="org.jboss.as.mail"/> | ||
| 17 | <extension module="org.jboss.as.naming"/> | ||
| 18 | <extension module="org.jboss.as.pojo"/> | ||
| 19 | <extension module="org.jboss.as.remoting"/> | ||
| 20 | <extension module="org.jboss.as.sar"/> | ||
| 21 | <extension module="org.jboss.as.security"/> | ||
| 22 | <extension module="org.jboss.as.transactions"/> | ||
| 23 | <extension module="org.jboss.as.webservices"/> | ||
| 24 | <extension module="org.jboss.as.weld"/> | ||
| 25 | <extension module="org.wildfly.extension.batch.jberet"/> | ||
| 26 | <extension module="org.wildfly.extension.bean-validation"/> | ||
| 27 | <extension module="org.wildfly.extension.core-management"/> | ||
| 28 | <extension module="org.wildfly.extension.discovery"/> | ||
| 29 | <extension module="org.wildfly.extension.ee-security"/> | ||
| 30 | <extension module="org.wildfly.extension.elytron"/> | ||
| 31 | <extension module="org.wildfly.extension.io"/> | ||
| 32 | <extension module="org.wildfly.extension.microprofile.config-smallrye"/> | ||
| 33 | <extension module="org.wildfly.extension.microprofile.health-smallrye"/> | ||
| 34 | <extension module="org.wildfly.extension.microprofile.opentracing-smallrye"/> | ||
| 35 | <extension module="org.wildfly.extension.request-controller"/> | ||
| 36 | <extension module="org.wildfly.extension.security.manager"/> | ||
| 37 | <extension module="org.wildfly.extension.undertow"/> | ||
| 38 | </extensions> | ||
| 39 | <management> | ||
| 40 | <security-realms> | ||
| 41 | <security-realm name="ManagementRealm"> | ||
| 42 | <authentication> | ||
| 43 | <local default-user="$local" skip-group-loading="true"/> | ||
| 44 | <properties path="mgmt-users.properties" relative-to="jboss.server.config.dir"/> | ||
| 45 | </authentication> | ||
| 46 | <authorization map-groups-to-roles="false"> | ||
| 47 | <properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/> | ||
| 48 | </authorization> | ||
| 49 | </security-realm> | ||
| 50 | <security-realm name="ApplicationRealm"> | ||
| 51 | <server-identities> | ||
| 52 | <ssl> | ||
| 53 | <keystore path="application.keystore" relative-to="jboss.server.config.dir" keystore-password="password" alias="server" key-password="password" generate-self-signed-certificate-host="localhost"/> | ||
| 54 | </ssl> | ||
| 55 | </server-identities> | ||
| 56 | <authentication> | ||
| 57 | <local default-user="$local" allowed-users="*" skip-group-loading="true"/> | ||
| 58 | <properties path="application-users.properties" relative-to="jboss.server.config.dir"/> | ||
| 59 | </authentication> | ||
| 60 | <authorization> | ||
| 61 | <properties path="application-roles.properties" relative-to="jboss.server.config.dir"/> | ||
| 62 | </authorization> | ||
| 63 | </security-realm> | ||
| 64 | </security-realms> | ||
| 65 | <audit-log> | ||
| 66 | <formatters> | ||
| 67 | <json-formatter name="json-formatter"/> | ||
| 68 | </formatters> | ||
| 69 | <handlers> | ||
| 70 | <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/> | ||
| 71 | </handlers> | ||
| 72 | <logger log-boot="true" log-read-only="false" enabled="false"> | ||
| 73 | <handlers> | ||
| 74 | <handler name="file"/> | ||
| 75 | </handlers> | ||
| 76 | </logger> | ||
| 77 | </audit-log> | ||
| 78 | <management-interfaces> | ||
| 79 | <http-interface security-realm="ManagementRealm"> | ||
| 80 | <http-upgrade enabled="true"/> | ||
| 81 | <socket-binding http="management-http"/> | ||
| 82 | </http-interface> | ||
| 83 | </management-interfaces> | ||
| 84 | <access-control provider="simple"> | ||
| 85 | <role-mapping> | ||
| 86 | <role name="SuperUser"> | ||
| 87 | <include> | ||
| 88 | <user name="$local"/> | ||
| 89 | </include> | ||
| 90 | </role> | ||
| 91 | </role-mapping> | ||
| 92 | </access-control> | ||
| 93 | </management> | ||
| 94 | <profile> | ||
| 95 | <subsystem xmlns="urn:jboss:domain:logging:6.0"> | ||
| 96 | <console-handler name="CONSOLE"> | ||
| 97 | <level name="INFO"/> | ||
| 98 | <formatter> | ||
| 99 | <named-formatter name="COLOR-PATTERN"/> | ||
| 100 | </formatter> | ||
| 101 | </console-handler> | ||
| 102 | <periodic-rotating-file-handler name="FILE" autoflush="true"> | ||
| 103 | <formatter> | ||
| 104 | <named-formatter name="PATTERN"/> | ||
| 105 | </formatter> | ||
| 106 | <file relative-to="jboss.server.log.dir" path="server.log"/> | ||
| 107 | <suffix value=".yyyy-MM-dd"/> | ||
| 108 | <append value="true"/> | ||
| 109 | </periodic-rotating-file-handler> | ||
| 110 | <logger category="com.arjuna"> | ||
| 111 | <level name="WARN"/> | ||
| 112 | </logger> | ||
| 113 | <logger category="org.jboss.as.config"> | ||
| 114 | <level name="DEBUG"/> | ||
| 115 | </logger> | ||
| 116 | <logger category="sun.rmi"> | ||
| 117 | <level name="WARN"/> | ||
| 118 | </logger> | ||
| 119 | <root-logger> | ||
| 120 | <level name="INFO"/> | ||
| 121 | <handlers> | ||
| 122 | <handler name="CONSOLE"/> | ||
| 123 | <handler name="FILE"/> | ||
| 124 | </handlers> | ||
| 125 | </root-logger> | ||
| 126 | <formatter name="PATTERN"> | ||
| 127 | <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/> | ||
| 128 | </formatter> | ||
| 129 | <formatter name="COLOR-PATTERN"> | ||
| 130 | <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/> | ||
| 131 | </formatter> | ||
| 132 | </subsystem> | ||
| 133 | <subsystem xmlns="urn:jboss:domain:batch-jberet:2.0"> | ||
| 134 | <default-job-repository name="in-memory"/> | ||
| 135 | <default-thread-pool name="batch"/> | ||
| 136 | <job-repository name="in-memory"> | ||
| 137 | <in-memory/> | ||
| 138 | </job-repository> | ||
| 139 | <thread-pool name="batch"> | ||
| 140 | <max-threads count="10"/> | ||
| 141 | <keepalive-time time="30" unit="seconds"/> | ||
| 142 | </thread-pool> | ||
| 143 | </subsystem> | ||
| 144 | <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/> | ||
| 145 | <subsystem xmlns="urn:jboss:domain:core-management:1.0"/> | ||
| 146 | <subsystem xmlns="urn:jboss:domain:datasources:5.0"> | ||
| 147 | <datasources> | ||
| 148 | <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true"> | ||
| 149 | <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE</connection-url> | ||
| 150 | <driver>h2</driver> | ||
| 151 | <security> | ||
| 152 | <user-name>sa</user-name> | ||
| 153 | <password>sa</password> | ||
| 154 | </security> | ||
| 155 | </datasource> | ||
| 156 | |||
| 157 | <!-- CONFIGURACION DE DATASOURCE SI ES ENTORNO DE TEST --> | ||
| 158 | {% if inventory_hostname.startswith('t') %} | ||
| 159 | <datasource jta="true" jndi-name="java:jboss/datasources/ProcessEngine" pool-name="ProcessEngine" enabled="true" use-ccm="false" statistics-enabled="true"> | ||
| 160 | <connection-url>jdbc:oracle:thin:@10.9.2.34:1521:vuedata</connection-url> | ||
| 161 | <driver-class>oracle.jdbc.driver.OracleDriver</driver-class> | ||
| 162 | <driver>oracle</driver> | ||
| 163 | <transaction-isolation>TRANSACTION_READ_COMMITTED</transaction-isolation> | ||
| 164 | <security> | ||
| 165 | <user-name>camunda</user-name> | ||
| 166 | <password>SanSeC4</password> | ||
| 167 | </security> | ||
| 168 | <validation> | ||
| 169 | <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.OracleValidConnectionChecker"/> | ||
| 170 | <validate-on-match>true</validate-on-match> | ||
| 171 | <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.OracleStaleConnectionChecker"/> | ||
| 172 | <exception-sorter class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.OracleExceptionSorter"/> | ||
| 173 | </validation> | ||
| 174 | </datasource> | ||
| 175 | {% endif %} | ||
| 176 | |||
| 177 | <!-- CONFIGURACION DE DATASOURCE SI ES ENTORNO DE PRODUCCION --> | ||
| 178 | {% if inventory_hostname.startswith('p') %} | ||
| 179 | <datasource jta="true" jndi-name="java:jboss/datasources/ProcessEngine" pool-name="ProcessEngine" enabled="true" use-ccm="false" statistics-enabled="true"> | ||
| 180 | <connection-url>jdbc:oracle:thin:@192.168.2.6:1521:vuedata2</connection-url> | ||
| 181 | <driver-class>oracle.jdbc.driver.OracleDriver</driver-class> | ||
| 182 | <driver>oracle</driver> | ||
| 183 | <transaction-isolation>TRANSACTION_READ_COMMITTED</transaction-isolation> | ||
| 184 | <security> | ||
| 185 | <user-name>camunda</user-name> | ||
| 186 | <password>NaBiGoC0</password> | ||
| 187 | </security> | ||
| 188 | <validation> | ||
| 189 | <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.OracleValidConnectionChecker"/> | ||
| 190 | <validate-on-match>true</validate-on-match> | ||
| 191 | <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.OracleStaleConnectionChecker"/> | ||
| 192 | <exception-sorter class-name="org.jboss.jca.adapters.jdbc.extensions.oracle.OracleExceptionSorter"/> | ||
| 193 | </validation> | ||
| 194 | </datasource> | ||
| 195 | {% endif %} | ||
| 196 | |||
| 197 | <drivers> | ||
| 198 | <driver name="h2" module="com.h2database.h2"> | ||
| 199 | <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class> | ||
| 200 | </driver> | ||
| 201 | <driver name="oracle" module="com.oracle"> | ||
| 202 | <driver-class>oracle.jdbc.driver.OracleDriver</driver-class> | ||
| 203 | <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class> | ||
| 204 | </driver> | ||
| 205 | </drivers> | ||
| 206 | </datasources> | ||
| 207 | </subsystem> | ||
| 208 | <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0"> | ||
| 209 | <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/> | ||
| 210 | </subsystem> | ||
| 211 | <subsystem xmlns="urn:jboss:domain:discovery:1.0"/> | ||
| 212 | <subsystem xmlns="urn:jboss:domain:ee:4.0"> | ||
| 213 | <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement> | ||
| 214 | <concurrent> | ||
| 215 | <context-services> | ||
| 216 | <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default" use-transaction-setup-provider="true"/> | ||
| 217 | </context-services> | ||
| 218 | <managed-thread-factories> | ||
| 219 | <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/> | ||
| 220 | </managed-thread-factories> | ||
| 221 | <managed-executor-services> | ||
| 222 | <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-threshold="60000" keepalive-time="5000"/> | ||
| 223 | </managed-executor-services> | ||
| 224 | <managed-scheduled-executor-services> | ||
| 225 | <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-threshold="60000" keepalive-time="3000"/> | ||
| 226 | </managed-scheduled-executor-services> | ||
| 227 | </concurrent> | ||
| 228 | <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/> | ||
| 229 | </subsystem> | ||
| 230 | <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/> | ||
| 231 | <subsystem xmlns="urn:jboss:domain:ejb3:5.0"> | ||
| 232 | <session-bean> | ||
| 233 | <stateless> | ||
| 234 | <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/> | ||
| 235 | </stateless> | ||
| 236 | <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/> | ||
| 237 | <singleton default-access-timeout="5000"/> | ||
| 238 | </session-bean> | ||
| 239 | <pools> | ||
| 240 | <bean-instance-pools> | ||
| 241 | <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | ||
| 242 | <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | ||
| 243 | </bean-instance-pools> | ||
| 244 | </pools> | ||
| 245 | <caches> | ||
| 246 | <cache name="simple"/> | ||
| 247 | <cache name="distributable" passivation-store-ref="infinispan" aliases="passivating clustered"/> | ||
| 248 | </caches> | ||
| 249 | <passivation-stores> | ||
| 250 | <passivation-store name="infinispan" cache-container="ejb" max-size="10000"/> | ||
| 251 | </passivation-stores> | ||
| 252 | <async thread-pool-name="default"/> | ||
| 253 | <timer-service thread-pool-name="default" default-data-store="default-file-store"> | ||
| 254 | <data-stores> | ||
| 255 | <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/> | ||
| 256 | </data-stores> | ||
| 257 | </timer-service> | ||
| 258 | <remote connector-ref="http-remoting-connector" thread-pool-name="default"> | ||
| 259 | <channel-creation-options> | ||
| 260 | <option name="READ_TIMEOUT" value="${prop.remoting-connector.read.timeout:20}" type="xnio"/> | ||
| 261 | <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/> | ||
| 262 | </channel-creation-options> | ||
| 263 | </remote> | ||
| 264 | <thread-pools> | ||
| 265 | <thread-pool name="default"> | ||
| 266 | <max-threads count="10"/> | ||
| 267 | <keepalive-time time="100" unit="milliseconds"/> | ||
| 268 | </thread-pool> | ||
| 269 | </thread-pools> | ||
| 270 | <default-security-domain value="other"/> | ||
| 271 | <default-missing-method-permissions-deny-access value="true"/> | ||
| 272 | <log-system-exceptions value="true"/> | ||
| 273 | </subsystem> | ||
| 274 | <subsystem xmlns="urn:wildfly:elytron:4.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto"> | ||
| 275 | <providers> | ||
| 276 | <aggregate-providers name="combined-providers"> | ||
| 277 | <providers name="elytron"/> | ||
| 278 | <providers name="openssl"/> | ||
| 279 | </aggregate-providers> | ||
| 280 | <provider-loader name="elytron" module="org.wildfly.security.elytron"/> | ||
| 281 | <provider-loader name="openssl" module="org.wildfly.openssl"/> | ||
| 282 | </providers> | ||
| 283 | <audit-logging> | ||
| 284 | <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/> | ||
| 285 | </audit-logging> | ||
| 286 | <security-domains> | ||
| 287 | <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper"> | ||
| 288 | <realm name="ApplicationRealm" role-decoder="groups-to-roles"/> | ||
| 289 | <realm name="local"/> | ||
| 290 | </security-domain> | ||
| 291 | <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper"> | ||
| 292 | <realm name="ManagementRealm" role-decoder="groups-to-roles"/> | ||
| 293 | <realm name="local" role-mapper="super-user-mapper"/> | ||
| 294 | </security-domain> | ||
| 295 | </security-domains> | ||
| 296 | <security-realms> | ||
| 297 | <identity-realm name="local" identity="$local"/> | ||
| 298 | <properties-realm name="ApplicationRealm"> | ||
| 299 | <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/> | ||
| 300 | <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/> | ||
| 301 | </properties-realm> | ||
| 302 | <properties-realm name="ManagementRealm"> | ||
| 303 | <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/> | ||
| 304 | <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/> | ||
| 305 | </properties-realm> | ||
| 306 | </security-realms> | ||
| 307 | <mappers> | ||
| 308 | <simple-permission-mapper name="default-permission-mapper" mapping-mode="first"> | ||
| 309 | <permission-mapping> | ||
| 310 | <principal name="anonymous"/> | ||
| 311 | <permission-set name="default-permissions"/> | ||
| 312 | </permission-mapping> | ||
| 313 | <permission-mapping match-all="true"> | ||
| 314 | <permission-set name="login-permission"/> | ||
| 315 | <permission-set name="default-permissions"/> | ||
| 316 | </permission-mapping> | ||
| 317 | </simple-permission-mapper> | ||
| 318 | <constant-realm-mapper name="local" realm-name="local"/> | ||
| 319 | <simple-role-decoder name="groups-to-roles" attribute="groups"/> | ||
| 320 | <constant-role-mapper name="super-user-mapper"> | ||
| 321 | <role name="SuperUser"/> | ||
| 322 | </constant-role-mapper> | ||
| 323 | </mappers> | ||
| 324 | <permission-sets> | ||
| 325 | <permission-set name="login-permission"> | ||
| 326 | <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/> | ||
| 327 | </permission-set> | ||
| 328 | <permission-set name="default-permissions"> | ||
| 329 | <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/> | ||
| 330 | <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/> | ||
| 331 | <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/> | ||
| 332 | </permission-set> | ||
| 333 | </permission-sets> | ||
| 334 | <http> | ||
| 335 | <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global"> | ||
| 336 | <mechanism-configuration> | ||
| 337 | <mechanism mechanism-name="DIGEST"> | ||
| 338 | <mechanism-realm realm-name="ManagementRealm"/> | ||
| 339 | </mechanism> | ||
| 340 | </mechanism-configuration> | ||
| 341 | </http-authentication-factory> | ||
| 342 | <provider-http-server-mechanism-factory name="global"/> | ||
| 343 | </http> | ||
| 344 | <sasl> | ||
| 345 | <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain"> | ||
| 346 | <mechanism-configuration> | ||
| 347 | <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | ||
| 348 | <mechanism mechanism-name="DIGEST-MD5"> | ||
| 349 | <mechanism-realm realm-name="ApplicationRealm"/> | ||
| 350 | </mechanism> | ||
| 351 | </mechanism-configuration> | ||
| 352 | </sasl-authentication-factory> | ||
| 353 | <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain"> | ||
| 354 | <mechanism-configuration> | ||
| 355 | <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | ||
| 356 | <mechanism mechanism-name="DIGEST-MD5"> | ||
| 357 | <mechanism-realm realm-name="ManagementRealm"/> | ||
| 358 | </mechanism> | ||
| 359 | </mechanism-configuration> | ||
| 360 | </sasl-authentication-factory> | ||
| 361 | <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron"> | ||
| 362 | <properties> | ||
| 363 | <property name="wildfly.sasl.local-user.default-user" value="$local"/> | ||
| 364 | </properties> | ||
| 365 | </configurable-sasl-server-factory> | ||
| 366 | <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global"> | ||
| 367 | <filters> | ||
| 368 | <filter provider-name="WildFlyElytron"/> | ||
| 369 | </filters> | ||
| 370 | </mechanism-provider-filtering-sasl-server-factory> | ||
| 371 | <provider-sasl-server-factory name="global"/> | ||
| 372 | </sasl> | ||
| 373 | </subsystem> | ||
| 374 | <subsystem xmlns="urn:jboss:domain:infinispan:7.0"> | ||
| 375 | <cache-container name="server" default-cache="default" module="org.wildfly.clustering.server"> | ||
| 376 | <local-cache name="default"> | ||
| 377 | <transaction mode="BATCH"/> | ||
| 378 | </local-cache> | ||
| 379 | </cache-container> | ||
| 380 | <cache-container name="web" default-cache="passivation" module="org.wildfly.clustering.web.infinispan"> | ||
| 381 | <local-cache name="passivation"> | ||
| 382 | <locking isolation="REPEATABLE_READ"/> | ||
| 383 | <transaction mode="BATCH"/> | ||
| 384 | <file-store passivation="true" purge="false"/> | ||
| 385 | </local-cache> | ||
| 386 | </cache-container> | ||
| 387 | <cache-container name="ejb" aliases="sfsb" default-cache="passivation" module="org.wildfly.clustering.ejb.infinispan"> | ||
| 388 | <local-cache name="passivation"> | ||
| 389 | <locking isolation="REPEATABLE_READ"/> | ||
| 390 | <transaction mode="BATCH"/> | ||
| 391 | <file-store passivation="true" purge="false"/> | ||
| 392 | </local-cache> | ||
| 393 | </cache-container> | ||
| 394 | <cache-container name="hibernate" module="org.infinispan.hibernate-cache"> | ||
| 395 | <local-cache name="entity"> | ||
| 396 | <transaction mode="NON_XA"/> | ||
| 397 | <object-memory size="10000"/> | ||
| 398 | <expiration max-idle="100000"/> | ||
| 399 | </local-cache> | ||
| 400 | <local-cache name="local-query"> | ||
| 401 | <object-memory size="10000"/> | ||
| 402 | <expiration max-idle="100000"/> | ||
| 403 | </local-cache> | ||
| 404 | <local-cache name="timestamps"/> | ||
| 405 | </cache-container> | ||
| 406 | </subsystem> | ||
| 407 | <subsystem xmlns="urn:jboss:domain:io:3.0"> | ||
| 408 | <worker name="default"/> | ||
| 409 | <buffer-pool name="default"/> | ||
| 410 | </subsystem> | ||
| 411 | <subsystem xmlns="urn:jboss:domain:jaxrs:1.0"/> | ||
| 412 | <subsystem xmlns="urn:jboss:domain:jca:5.0"> | ||
| 413 | <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/> | ||
| 414 | <bean-validation enabled="true"/> | ||
| 415 | <default-workmanager> | ||
| 416 | <short-running-threads> | ||
| 417 | <core-threads count="50"/> | ||
| 418 | <queue-length count="50"/> | ||
| 419 | <max-threads count="50"/> | ||
| 420 | <keepalive-time time="10" unit="seconds"/> | ||
| 421 | </short-running-threads> | ||
| 422 | <long-running-threads> | ||
| 423 | <core-threads count="50"/> | ||
| 424 | <queue-length count="50"/> | ||
| 425 | <max-threads count="50"/> | ||
| 426 | <keepalive-time time="10" unit="seconds"/> | ||
| 427 | </long-running-threads> | ||
| 428 | </default-workmanager> | ||
| 429 | <cached-connection-manager/> | ||
| 430 | </subsystem> | ||
| 431 | <subsystem xmlns="urn:jboss:domain:jdr:1.0"/> | ||
| 432 | <subsystem xmlns="urn:jboss:domain:jmx:1.3"> | ||
| 433 | <expose-resolved-model/> | ||
| 434 | <expose-expression-model/> | ||
| 435 | <remoting-connector/> | ||
| 436 | </subsystem> | ||
| 437 | <subsystem xmlns="urn:jboss:domain:jpa:1.1"> | ||
| 438 | <jpa default-datasource="" default-extended-persistence-inheritance="DEEP"/> | ||
| 439 | </subsystem> | ||
| 440 | <subsystem xmlns="urn:jboss:domain:jsf:1.1"/> | ||
| 441 | <subsystem xmlns="urn:jboss:domain:mail:3.0"> | ||
| 442 | <mail-session name="default" jndi-name="java:jboss/mail/Default"> | ||
| 443 | <smtp-server outbound-socket-binding-ref="mail-smtp"/> | ||
| 444 | </mail-session> | ||
| 445 | </subsystem> | ||
| 446 | <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:1.0"/> | ||
| 447 | <subsystem xmlns="urn:wildfly:microprofile-health-smallrye:1.0" security-enabled="false"/> | ||
| 448 | <subsystem xmlns="urn:wildfly:microprofile-opentracing-smallrye:1.0"/> | ||
| 449 | <subsystem xmlns="urn:jboss:domain:naming:2.0"> | ||
| 450 | <remote-naming/> | ||
| 451 | </subsystem> | ||
| 452 | <subsystem xmlns="urn:jboss:domain:pojo:1.0"/> | ||
| 453 | <subsystem xmlns="urn:jboss:domain:remoting:4.0"> | ||
| 454 | <http-connector name="http-remoting-connector" connector-ref="default" security-realm="ApplicationRealm"/> | ||
| 455 | </subsystem> | ||
| 456 | <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/> | ||
| 457 | <subsystem xmlns="urn:jboss:domain:resource-adapters:5.0"/> | ||
| 458 | <subsystem xmlns="urn:jboss:domain:sar:1.0"/> | ||
| 459 | <subsystem xmlns="urn:jboss:domain:security:2.0"> | ||
| 460 | <security-domains> | ||
| 461 | <security-domain name="other" cache-type="default"> | ||
| 462 | <authentication> | ||
| 463 | <login-module code="Remoting" flag="optional"> | ||
| 464 | <module-option name="password-stacking" value="useFirstPass"/> | ||
| 465 | </login-module> | ||
| 466 | <login-module code="RealmDirect" flag="required"> | ||
| 467 | <module-option name="password-stacking" value="useFirstPass"/> | ||
| 468 | </login-module> | ||
| 469 | </authentication> | ||
| 470 | </security-domain> | ||
| 471 | <security-domain name="jboss-web-policy" cache-type="default"> | ||
| 472 | <authorization> | ||
| 473 | <policy-module code="Delegating" flag="required"/> | ||
| 474 | </authorization> | ||
| 475 | </security-domain> | ||
| 476 | <security-domain name="jaspitest" cache-type="default"> | ||
| 477 | <authentication-jaspi> | ||
| 478 | <login-module-stack name="dummy"> | ||
| 479 | <login-module code="Dummy" flag="optional"/> | ||
| 480 | </login-module-stack> | ||
| 481 | <auth-module code="Dummy"/> | ||
| 482 | </authentication-jaspi> | ||
| 483 | </security-domain> | ||
| 484 | <security-domain name="jboss-ejb-policy" cache-type="default"> | ||
| 485 | <authorization> | ||
| 486 | <policy-module code="Delegating" flag="required"/> | ||
| 487 | </authorization> | ||
| 488 | </security-domain> | ||
| 489 | </security-domains> | ||
| 490 | </subsystem> | ||
| 491 | <subsystem xmlns="urn:jboss:domain:security-manager:1.0"> | ||
| 492 | <deployment-permissions> | ||
| 493 | <maximum-set> | ||
| 494 | <permission class="java.security.AllPermission"/> | ||
| 495 | </maximum-set> | ||
| 496 | </deployment-permissions> | ||
| 497 | </subsystem> | ||
| 498 | <subsystem xmlns="urn:jboss:domain:transactions:5.0"> | ||
| 499 | <core-environment node-identifier="${jboss.tx.node.id:1}"> | ||
| 500 | <process-id> | ||
| 501 | <uuid/> | ||
| 502 | </process-id> | ||
| 503 | </core-environment> | ||
| 504 | <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/> | ||
| 505 | <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/> | ||
| 506 | </subsystem> | ||
| 507 | <subsystem xmlns="urn:jboss:domain:undertow:7.0" default-server="default-server" default-virtual-host="default-host" default-servlet-container="default" default-security-domain="other"> | ||
| 508 | <buffer-cache name="default"/> | ||
| 509 | <server name="default-server"> | ||
| 510 | <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/> | ||
| 511 | <https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/> | ||
| 512 | <host name="default-host" alias="localhost"> | ||
| 513 | <location name="/" handler="welcome-content"/> | ||
| 514 | <http-invoker security-realm="ApplicationRealm"/> | ||
| 515 | </host> | ||
| 516 | </server> | ||
| 517 | <servlet-container name="default"> | ||
| 518 | <jsp-config/> | ||
| 519 | <websockets/> | ||
| 520 | </servlet-container> | ||
| 521 | <handlers> | ||
| 522 | <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/> | ||
| 523 | </handlers> | ||
| 524 | </subsystem> | ||
| 525 | <subsystem xmlns="urn:jboss:domain:webservices:2.0"> | ||
| 526 | <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host> | ||
| 527 | <endpoint-config name="Standard-Endpoint-Config"/> | ||
| 528 | <endpoint-config name="Recording-Endpoint-Config"> | ||
| 529 | <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"> | ||
| 530 | <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/> | ||
| 531 | </pre-handler-chain> | ||
| 532 | </endpoint-config> | ||
| 533 | <client-config name="Standard-Client-Config"/> | ||
| 534 | </subsystem> | ||
| 535 | <subsystem xmlns="urn:jboss:domain:weld:4.0"/> | ||
| 536 | </profile> | ||
| 537 | <interfaces> | ||
| 538 | <interface name="management"> | ||
| 539 | <inet-address value="${jboss.bind.address.management:{{ ansible_facts.default_ipv4.address}}}"/> | ||
| 540 | </interface> | ||
| 541 | <interface name="public"> | ||
| 542 | <inet-address value="${jboss.bind.address.management:{{ ansible_facts.default_ipv4.address}}}"/> | ||
| 543 | </interface> | ||
| 544 | </interfaces> | ||
| 545 | <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}"> | ||
| 546 | <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/> | ||
| 547 | <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/> | ||
| 548 | <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/> | ||
| 549 | <socket-binding name="http" port="${jboss.http.port:8080}"/> | ||
| 550 | <socket-binding name="https" port="${jboss.https.port:8443}"/> | ||
| 551 | <socket-binding name="txn-recovery-environment" port="4712"/> | ||
| 552 | <socket-binding name="txn-status-manager" port="4713"/> | ||
| 553 | <outbound-socket-binding name="mail-smtp"> | ||
| 554 | <remote-destination host="localhost" port="25"/> | ||
| 555 | </outbound-socket-binding> | ||
| 556 | </socket-binding-group> | ||
| 557 | </server> |
roles/jboss/tests/inventory
0 → 100644
roles/jboss/tests/test.yml
0 → 100644
roles/jboss/vars/main.yml
0 → 100644
roles/jboss_patch_apply/.travis.yml
0 → 100644
| 1 | --- | ||
| 2 | language: python | ||
| 3 | python: "2.7" | ||
| 4 | |||
| 5 | # Use the new container infrastructure | ||
| 6 | sudo: false | ||
| 7 | |||
| 8 | # Install ansible | ||
| 9 | addons: | ||
| 10 | apt: | ||
| 11 | packages: | ||
| 12 | - python-pip | ||
| 13 | |||
| 14 | install: | ||
| 15 | # Install ansible | ||
| 16 | - pip install ansible | ||
| 17 | |||
| 18 | # Check ansible version | ||
| 19 | - ansible --version | ||
| 20 | |||
| 21 | # Create ansible.cfg with correct roles_path | ||
| 22 | - printf '[defaults]\nroles_path=../' >ansible.cfg | ||
| 23 | |||
| 24 | script: | ||
| 25 | # Basic role syntax check | ||
| 26 | - ansible-playbook tests/test.yml -i tests/inventory --syntax-check | ||
| 27 | |||
| 28 | notifications: | ||
| 29 | webhooks: https://galaxy.ansible.com/api/v1/notifications/ | ||
| ... | \ No newline at end of file | ... | \ No newline at end of file |
roles/jboss_patch_apply/README.md
0 → 100644
| 1 | Role Name | ||
| 2 | ========= | ||
| 3 | |||
| 4 | A brief description of the role goes here. | ||
| 5 | |||
| 6 | Requirements | ||
| 7 | ------------ | ||
| 8 | |||
| 9 | Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required. | ||
| 10 | |||
| 11 | Role Variables | ||
| 12 | -------------- | ||
| 13 | |||
| 14 | A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well. | ||
| 15 | |||
| 16 | Dependencies | ||
| 17 | ------------ | ||
| 18 | |||
| 19 | A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles. | ||
| 20 | |||
| 21 | Example Playbook | ||
| 22 | ---------------- | ||
| 23 | |||
| 24 | Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too: | ||
| 25 | |||
| 26 | - hosts: servers | ||
| 27 | roles: | ||
| 28 | - { role: username.rolename, x: 42 } | ||
| 29 | |||
| 30 | License | ||
| 31 | ------- | ||
| 32 | |||
| 33 | BSD | ||
| 34 | |||
| 35 | Author Information | ||
| 36 | ------------------ | ||
| 37 | |||
| 38 | An optional section for the role authors to include contact information, or a website (HTML is not allowed). |
roles/jboss_patch_apply/defaults/main.yml
0 → 100644
roles/jboss_patch_apply/handlers/main.yml
0 → 100644
roles/jboss_patch_apply/meta/main.yml
0 → 100644
| 1 | galaxy_info: | ||
| 2 | author: your name | ||
| 3 | description: your role description | ||
| 4 | company: your company (optional) | ||
| 5 | |||
| 6 | # If the issue tracker for your role is not on github, uncomment the | ||
| 7 | # next line and provide a value | ||
| 8 | # issue_tracker_url: http://example.com/issue/tracker | ||
| 9 | |||
| 10 | # Choose a valid license ID from https://spdx.org - some suggested licenses: | ||
| 11 | # - BSD-3-Clause (default) | ||
| 12 | # - MIT | ||
| 13 | # - GPL-2.0-or-later | ||
| 14 | # - GPL-3.0-only | ||
| 15 | # - Apache-2.0 | ||
| 16 | # - CC-BY-4.0 | ||
| 17 | license: license (GPL-2.0-or-later, MIT, etc) | ||
| 18 | |||
| 19 | min_ansible_version: 2.9 | ||
| 20 | |||
| 21 | # If this a Container Enabled role, provide the minimum Ansible Container version. | ||
| 22 | # min_ansible_container_version: | ||
| 23 | |||
| 24 | # | ||
| 25 | # Provide a list of supported platforms, and for each platform a list of versions. | ||
| 26 | # If you don't wish to enumerate all versions for a particular platform, use 'all'. | ||
| 27 | # To view available platforms and versions (or releases), visit: | ||
| 28 | # https://galaxy.ansible.com/api/v1/platforms/ | ||
| 29 | # | ||
| 30 | # platforms: | ||
| 31 | # - name: Fedora | ||
| 32 | # versions: | ||
| 33 | # - all | ||
| 34 | # - 25 | ||
| 35 | # - name: SomePlatform | ||
| 36 | # versions: | ||
| 37 | # - all | ||
| 38 | # - 1.0 | ||
| 39 | # - 7 | ||
| 40 | # - 99.99 | ||
| 41 | |||
| 42 | galaxy_tags: [] | ||
| 43 | # List tags for your role here, one per line. A tag is a keyword that describes | ||
| 44 | # and categorizes the role. Users find roles by searching for tags. Be sure to | ||
| 45 | # remove the '[]' above, if you add tags to this list. | ||
| 46 | # | ||
| 47 | # NOTE: A tag is limited to a single word comprised of alphanumeric characters. | ||
| 48 | # Maximum 20 tags per role. | ||
| 49 | |||
| 50 | dependencies: [] | ||
| 51 | # List your role dependencies here, one per line. Be sure to remove the '[]' above, | ||
| 52 | # if you add dependencies to this list. | ||
| 53 | |||
| ... | \ No newline at end of file | ... | \ No newline at end of file |
| 1 | - name: copy the zip file | ||
| 2 | copy: | ||
| 3 | src: "{{ patch_zip_location }}{{ patch_zip_file }}" | ||
| 4 | dest: /root/ | ||
| 5 | |||
| 6 | - name: apply the patch | ||
| 7 | shell: './jboss-cli.sh --command="patch apply /root/{{ patch_zip_file }}"' | ||
| 8 | args: | ||
| 9 | chdir: "{{ jboss_home_bin }}" | ||
| 10 | |||
| 11 | - name: restart jboss | ||
| 12 | service: | ||
| 13 | name: "{{ jboss_service_name }}" | ||
| 14 | state: restarted |
roles/jboss_patch_apply/tasks/main.yml
0 → 100644
roles/jboss_patch_apply/tests/inventory
0 → 100644
roles/jboss_patch_apply/tests/test.yml
0 → 100644
roles/jboss_patch_apply/vars/main.yml
0 → 100644
-
Please register or sign in to post a comment