production.ini

###
# app configuration
# http://docs.pylonsproject.org/projects/pyramid/en/latest/narr/environment.html
###
[app:main]
use = egg:caramel

# Point the following two settings on where you want your CA certificate & Key to live
ca.cert = /etc/pki/tls/certs/ca.example.com.cert
ca.key = /etc/pki/tls/private/ca.example.com.key

# This causes all certs to be backdated to the age of the start cert.
# This is an ugly workaround for our embedded systems that lack RTC.
backdate = False
# We use 3 day periods
lifetime.short = 72
# Long term certs are for ~1 month
lifetime.long = 729


# Change this to match your database
# http://docs.sqlalchemy.org/en/rel_0_9/core/engines.html#database-urls
sqlalchemy.url = sqlite:////srv/ca.example.com/caramel.sqlite


pyramid.reload_templates = false
pyramid.debug_authorization = false
pyramid.debug_notfound = false
pyramid.debug_routematch = false
pyramid.default_locale_name = en
pyramid.includes =
    pyramid_tm

###
# wsgi server configuration
###
[server:main]
use = egg:waitress#main
host = 0.0.0.0
port = 6543

###
# logging configuration
# http://docs.pylonsproject.org/projects/pyramid/en/latest/narr/logging.html
###

[loggers]
keys = root, caramel, sqlalchemy

[handlers]
keys = console

[formatters]
keys = generic

[logger_root]
level = WARN
handlers = console

[logger_caramel]
level = WARN
handlers =
qualname = caramel

[logger_sqlalchemy]
level = WARN
handlers =
qualname = sqlalchemy.engine
# "level = INFO" logs SQL queries.
# "level = DEBUG" logs SQL queries and results.
# "level = WARN" logs neither.  (Recommended for production systems.)

[handler_console]
class = StreamHandler
args = (sys.stderr,)
level = NOTSET
formatter = generic

[formatter_generic]
format = %(asctime)s %(levelname)-5.5s [%(name)s][%(threadName)s] %(message)s