mirror of
https://github.com/hanzoai/datastore.git
synced 2026-09-26 13:55:07 +00:00
zooqueen
fce0ee72e1
Runtime regression from the final lowercase pass: it renamed <clickhouse> opening tags to <datastore> but the / exclusion (protecting /clickhouse paths) left </clickhouse> closing tags, so embedded + shipped configs became <datastore>...</clickhouse> -> SAXParseException 'Tag mismatch' at runtime (compile was fine; XML is data). Renamed all <clickhouse/</clickhouse XML tags -> datastore (101 closes across configs, embedded strings, keeper configs). Path strings (/var/lib/clickhouse) have no angle bracket and are untouched. Build compiled; this fixes runtime config parsing.
99 lines
3.8 KiB
XML
99 lines
3.8 KiB
XML
<datastore>
|
|
<auth_use_forwarded_address>true</auth_use_forwarded_address>
|
|
<!-- Used with https_port and tcp_port_secure. Full ssl options list: https://github.com/ClickHouse-Extras/poco/blob/master/NetSSL_OpenSSL/include/Poco/Net/SSLManager.h#L71 -->
|
|
<openSSL>
|
|
<server> <!-- Used for https server AND secure tcp port -->
|
|
<!-- openssl req -subj "/CN=localhost" -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout /etc/clickhouse-server/server.key -out /etc/clickhouse-server/server.crt -->
|
|
<certificateFile>/etc/clickhouse-server/config.d/server.crt</certificateFile>
|
|
<privateKeyFile>/etc/clickhouse-server/config.d/server.key</privateKeyFile>
|
|
<verificationMode>none</verificationMode>
|
|
<loadDefaultCAFile>true</loadDefaultCAFile>
|
|
<cacheSessions>true</cacheSessions>
|
|
<disableProtocols>sslv2,sslv3</disableProtocols>
|
|
<preferServerCiphers>true</preferServerCiphers>
|
|
</server>
|
|
</openSSL>
|
|
|
|
<listen_host>0.0.0.0</listen_host>
|
|
|
|
<protocols>
|
|
<tcp>
|
|
<type>tcp</type>
|
|
<host>0.0.0.0</host>
|
|
<port>9000</port>
|
|
<description>native protocol (tcp)</description>
|
|
</tcp>
|
|
<tcp_secure>
|
|
<type>tls</type>
|
|
<impl>tcp</impl>
|
|
<port>9440</port>
|
|
<description>secure native protocol (tcp_secure)</description>
|
|
</tcp_secure>
|
|
<tcp_endpoint>
|
|
<impl>tcp</impl>
|
|
<host>0.0.0.0</host>
|
|
<port>9001</port>
|
|
<description>native protocol endpoint (tcp)</description>
|
|
</tcp_endpoint>
|
|
<tcp_proxy>
|
|
<type>proxy1</type>
|
|
<impl>tcp</impl>
|
|
<port>9100</port>
|
|
<description>native protocol with PROXYv1 (tcp_proxy)</description>
|
|
</tcp_proxy>
|
|
<http>
|
|
<type>http</type>
|
|
<port>8123</port>
|
|
<description>http protocol</description>
|
|
</http>
|
|
<https>
|
|
<type>tls</type>
|
|
<impl>http</impl>
|
|
<host>0.0.0.0</host>
|
|
<port>8443</port>
|
|
<description>https protocol</description>
|
|
</https>
|
|
<https_endpoint>
|
|
<impl>https</impl>
|
|
<port>8444</port>
|
|
<description>https protocol endpoint</description>
|
|
</https_endpoint>
|
|
<https_tls1_2>
|
|
<type>tls</type>
|
|
<impl>http</impl>
|
|
<host>0.0.0.0</host>
|
|
<port>8445</port>
|
|
<description>https protocol with TLSv1_2 minimum version</description>
|
|
<disableProtocols>sslv2,sslv3,tlsv1,tlsv1_1</disableProtocols>
|
|
<certificateFile>/etc/clickhouse-server/config.d/server.crt</certificateFile>
|
|
<privateKeyFile>/etc/clickhouse-server/config.d/server.key</privateKeyFile>
|
|
</https_tls1_2>
|
|
<https_tls1_3>
|
|
<type>tls</type>
|
|
<impl>http</impl>
|
|
<host>0.0.0.0</host>
|
|
<port>8446</port>
|
|
<description>https protocol with TLSv1_3 minimum version</description>
|
|
<disableProtocols>sslv2,sslv3,tlsv1,tlsv1_1,tlsv1_2</disableProtocols>
|
|
<certificateFile>/etc/clickhouse-server/config.d/server.crt</certificateFile>
|
|
<privateKeyFile>/etc/clickhouse-server/config.d/server.key</privateKeyFile>
|
|
</https_tls1_3>
|
|
<http_proxy>
|
|
<type>proxy1</type>
|
|
<impl>http</impl>
|
|
<host>0.0.0.0</host>
|
|
<port>8223</port>
|
|
<description>http with PROXYv1</description>
|
|
</http_proxy>
|
|
</protocols>
|
|
|
|
<!--tcp_port>9010</tcp_port-->
|
|
|
|
<validate_tcp_client_information>true</validate_tcp_client_information>
|
|
|
|
<query_log>
|
|
<database>system</database>
|
|
<table>query_log</table>
|
|
</query_log>
|
|
</datastore>
|