-
Notifications
You must be signed in to change notification settings - Fork 107
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Tomasz Arendt
committed
Nov 25, 2020
1 parent
8fcc54f
commit 2f3e42f
Showing
7 changed files
with
398 additions
and
55 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
349 changes: 349 additions & 0 deletions
349
core/src/epicli/data/common/ansible/playbooks/roles/postgresql/files/pgbouncer.ini
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,349 @@ | ||
;; database name = connect string | ||
;; | ||
;; connect string params: | ||
;; dbname= host= port= user= password= | ||
;; client_encoding= datestyle= timezone= | ||
;; pool_size= connect_query= | ||
;; auth_user= | ||
[databases] | ||
postgres = host=127.0.0.1 port=5432 dbname=postgres | ||
|
||
; foodb over Unix socket | ||
;foodb = | ||
|
||
; redirect bardb to bazdb on localhost | ||
;bardb = host=localhost dbname=bazdb | ||
|
||
; access to dest database will go with single user | ||
;forcedb = host=127.0.0.1 port=300 user=baz password=foo client_encoding=UNICODE datestyle=ISO connect_query='SELECT 1' | ||
|
||
; use custom pool sizes | ||
;nondefaultdb = pool_size=50 reserve_pool=10 | ||
|
||
; use auth_user with auth_query if user not present in auth_file | ||
; auth_user must exist in auth_file | ||
; foodb = auth_user=bar | ||
|
||
; fallback connect string | ||
;* = host=testserver | ||
|
||
;; Configuration section | ||
[pgbouncer] | ||
|
||
;;; | ||
;;; Administrative settings | ||
;;; | ||
|
||
logfile = /var/log/pgbouncer/pgbouncer.log | ||
pidfile = /var/run/pgbouncer/pgbouncer.pid | ||
|
||
;;; | ||
;;; Where to wait for clients | ||
;;; | ||
|
||
; IP address or * which means all IPs | ||
listen_addr = 127.0.0.1 | ||
listen_port = 6432 | ||
|
||
; Unix socket is also used for -R. | ||
; On Debian it should be /var/run/postgresql | ||
;unix_socket_dir = /tmp | ||
;unix_socket_mode = 0777 | ||
;unix_socket_group = | ||
|
||
;;; | ||
;;; TLS settings for accepting clients | ||
;;; | ||
|
||
;; disable, allow, require, verify-ca, verify-full | ||
;client_tls_sslmode = disable | ||
|
||
;; Path to file that contains trusted CA certs | ||
;client_tls_ca_file = <system default> | ||
|
||
;; Private key and cert to present to clients. | ||
;; Required for accepting TLS connections from clients. | ||
;client_tls_key_file = | ||
;client_tls_cert_file = | ||
|
||
;; fast, normal, secure, legacy, <ciphersuite string> | ||
;client_tls_ciphers = fast | ||
|
||
;; all, secure, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3 | ||
;client_tls_protocols = all | ||
|
||
;; none, auto, legacy | ||
;client_tls_dheparams = auto | ||
|
||
;; none, auto, <curve name> | ||
;client_tls_ecdhcurve = auto | ||
|
||
;;; | ||
;;; TLS settings for connecting to backend databases | ||
;;; | ||
|
||
;; disable, allow, require, verify-ca, verify-full | ||
;server_tls_sslmode = disable | ||
|
||
;; Path to that contains trusted CA certs | ||
;server_tls_ca_file = <system default> | ||
|
||
;; Private key and cert to present to backend. | ||
;; Needed only if backend server require client cert. | ||
;server_tls_key_file = | ||
;server_tls_cert_file = | ||
|
||
;; all, secure, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3 | ||
;server_tls_protocols = all | ||
|
||
;; fast, normal, secure, legacy, <ciphersuite string> | ||
;server_tls_ciphers = fast | ||
|
||
;;; | ||
;;; Authentication settings | ||
;;; | ||
|
||
; any, trust, plain, crypt, md5, cert, hba, pam | ||
auth_type = trust | ||
auth_file = /etc/pgbouncer/userlist.txt | ||
|
||
;; Path to HBA-style auth config | ||
;auth_hba_file = | ||
|
||
;; Query to use to fetch password from database. Result | ||
;; must have 2 columns - username and password hash. | ||
;auth_query = SELECT usename, passwd FROM pg_shadow WHERE usename=$1 | ||
|
||
;;; | ||
;;; Users allowed into database 'pgbouncer' | ||
;;; | ||
|
||
; comma-separated list of users, who are allowed to change settings | ||
admin_users = postgres | ||
|
||
; comma-separated list of users who are just allowed to use SHOW command | ||
stats_users = stats, postgres | ||
|
||
;;; | ||
;;; Pooler personality questions | ||
;;; | ||
|
||
; When server connection is released back to pool: | ||
; session - after client disconnects | ||
; transaction - after transaction finishes | ||
; statement - after statement finishes | ||
pool_mode = transaction | ||
|
||
; | ||
; Query for cleaning connection immediately after releasing from client. | ||
; No need to put ROLLBACK here, pgbouncer does not reuse connections | ||
; where transaction is left open. | ||
; | ||
; Query for 8.3+: | ||
; DISCARD ALL; | ||
; | ||
; Older versions: | ||
; RESET ALL; SET SESSION AUTHORIZATION DEFAULT | ||
; | ||
; Empty if transaction pooling is in use. | ||
; | ||
server_reset_query = DISCARD ALL | ||
|
||
|
||
; Whether server_reset_query should run in all pooling modes. | ||
; If it is off, server_reset_query is used only for session-pooling. | ||
;server_reset_query_always = 0 | ||
|
||
; | ||
; Comma-separated list of parameters to ignore when given | ||
; in startup packet. Newer JDBC versions require the | ||
; extra_float_digits here. | ||
; | ||
;ignore_startup_parameters = extra_float_digits | ||
|
||
; | ||
; When taking idle server into use, this query is ran first. | ||
; SELECT 1 | ||
; | ||
;server_check_query = select 1 | ||
|
||
; If server was used more recently that this many seconds ago, | ||
; skip the check query. Value 0 may or may not run in immediately. | ||
;server_check_delay = 30 | ||
|
||
; Close servers in session pooling mode after a RECONNECT, RELOAD, | ||
; etc. when they are idle instead of at the end of the session. | ||
;server_fast_close = 0 | ||
|
||
;; Use <appname - host> as application_name on server. | ||
;application_name_add_host = 0 | ||
|
||
;;; | ||
;;; Connection limits | ||
;;; | ||
|
||
; total number of clients that can connect | ||
max_client_conn = 100 | ||
|
||
; default pool size. 20 is good number when transaction pooling | ||
; is in use, in session pooling it needs to be the number of | ||
; max clients you want to handle at any moment | ||
default_pool_size = 20 | ||
|
||
;; Minimum number of server connections to keep in pool. | ||
;min_pool_size = 0 | ||
|
||
; how many additional connection to allow in case of trouble | ||
;reserve_pool_size = 0 | ||
|
||
; if a clients needs to wait more than this many seconds, use reserve pool | ||
;reserve_pool_timeout = 5 | ||
|
||
; how many total connections to a single database to allow from all pools | ||
;max_db_connections = 0 | ||
;max_user_connections = 0 | ||
|
||
; If off, then server connections are reused in LIFO manner | ||
;server_round_robin = 0 | ||
|
||
;;; | ||
;;; Logging | ||
;;; | ||
|
||
;; Syslog settings | ||
;syslog = 0 | ||
;syslog_facility = daemon | ||
;syslog_ident = pgbouncer | ||
|
||
; log if client connects or server connection is made | ||
;log_connections = 1 | ||
|
||
; log if and why connection was closed | ||
;log_disconnections = 1 | ||
|
||
; log error messages pooler sends to clients | ||
;log_pooler_errors = 1 | ||
|
||
;; Period for writing aggregated stats into log. | ||
;stats_period = 60 | ||
|
||
;; Logging verbosity. Same as -v switch on command line. | ||
;verbose = 0 | ||
|
||
;;; | ||
;;; Timeouts | ||
;;; | ||
|
||
;; Close server connection if its been connected longer. | ||
;server_lifetime = 3600 | ||
|
||
;; Close server connection if its not been used in this time. | ||
;; Allows to clean unnecessary connections from pool after peak. | ||
;server_idle_timeout = 600 | ||
|
||
;; Cancel connection attempt if server does not answer takes longer. | ||
;server_connect_timeout = 15 | ||
|
||
;; If server login failed (server_connect_timeout or auth failure) | ||
;; then wait this many second. | ||
;server_login_retry = 15 | ||
|
||
;; Dangerous. Server connection is closed if query does not return | ||
;; in this time. Should be used to survive network problems, | ||
;; _not_ as statement_timeout. (default: 0) | ||
;query_timeout = 0 | ||
|
||
;; Dangerous. Client connection is closed if the query is not assigned | ||
;; to a server in this time. Should be used to limit the number of queued | ||
;; queries in case of a database or network failure. (default: 120) | ||
;query_wait_timeout = 120 | ||
|
||
;; Dangerous. Client connection is closed if no activity in this time. | ||
;; Should be used to survive network problems. (default: 0) | ||
;client_idle_timeout = 0 | ||
|
||
;; Disconnect clients who have not managed to log in after connecting | ||
;; in this many seconds. | ||
;client_login_timeout = 60 | ||
|
||
;; Clean automatically created database entries (via "*") if they | ||
;; stay unused in this many seconds. | ||
; autodb_idle_timeout = 3600 | ||
|
||
;; How long SUSPEND/-R waits for buffer flush before closing connection. | ||
;suspend_timeout = 10 | ||
|
||
;; Close connections which are in "IDLE in transaction" state longer than | ||
;; this many seconds. | ||
;idle_transaction_timeout = 0 | ||
|
||
;;; | ||
;;; Low-level tuning options | ||
;;; | ||
|
||
;; buffer for streaming packets | ||
;pkt_buf = 4096 | ||
|
||
;; man 2 listen | ||
;listen_backlog = 128 | ||
|
||
;; Max number pkt_buf to process in one event loop. | ||
;sbuf_loopcnt = 5 | ||
|
||
;; Maximum PostgreSQL protocol packet size. | ||
;max_packet_size = 2147483647 | ||
|
||
;; networking options, for info: man 7 tcp | ||
|
||
;; Linux: notify program about new connection only if there | ||
;; is also data received. (Seconds to wait.) | ||
;; On Linux the default is 45, on other OS'es 0. | ||
;tcp_defer_accept = 0 | ||
|
||
;; In-kernel buffer size (Linux default: 4096) | ||
;tcp_socket_buffer = 0 | ||
|
||
;; whether tcp keepalive should be turned on (0/1) | ||
;tcp_keepalive = 1 | ||
|
||
;; The following options are Linux-specific. | ||
;; They also require tcp_keepalive=1. | ||
|
||
;; count of keepalive packets | ||
;tcp_keepcnt = 0 | ||
|
||
;; how long the connection can be idle, | ||
;; before sending keepalive packets | ||
;tcp_keepidle = 0 | ||
|
||
;; The time between individual keepalive probes. | ||
;tcp_keepintvl = 0 | ||
|
||
;; DNS lookup caching time | ||
;dns_max_ttl = 15 | ||
|
||
;; DNS zone SOA lookup period | ||
;dns_zone_check_period = 0 | ||
|
||
;; DNS negative result caching time | ||
;dns_nxdomain_ttl = 15 | ||
|
||
;;; | ||
;;; Random stuff | ||
;;; | ||
|
||
;; Hackish security feature. Helps against SQL-injection - when PQexec is disabled, | ||
;; multi-statement cannot be made. | ||
;disable_pqexec = 0 | ||
|
||
;; Config file to use for next RELOAD/SIGHUP. | ||
;; By default contains config file from command line. | ||
;conffile | ||
|
||
;; Win32 service name to register as. job_name is alias for service_name, | ||
;; used by some Skytools scripts. | ||
;service_name = pgbouncer | ||
;job_name = pgbouncer | ||
|
||
;; Read additional config from the /etc/pgbouncer/pgbouncer-other.ini file | ||
;%include /etc/pgbouncer/pgbouncer-other.ini |
Oops, something went wrong.