|
|
|
|
[server:main]
|
|
|
|
|
use = egg:gunicorn
|
|
|
|
|
workers = 2
|
|
|
|
|
timeout = 60
|
|
|
|
|
|
|
|
|
|
[app:main]
|
|
|
|
|
use = egg:syncserver
|
|
|
|
|
|
|
|
|
|
[syncserver]
|
|
|
|
|
# This must be edited to point to the public URL of your server,
|
|
|
|
|
# i.e. the URL as seen by Firefox.
|
|
|
|
|
public_url = https://{{ effective_domain }}/
|
|
|
|
|
|
|
|
|
|
# By default, syncserver will accept identity assertions issued by
|
|
|
|
|
# any BrowserID issuer. The line below restricts it to accept assertions
|
|
|
|
|
# from just the production Firefox Account servers. If you are hosting
|
|
|
|
|
# your own account server, put its public URL here instead.
|
|
|
|
|
identity_provider = https://accounts.firefox.com/
|
|
|
|
|
|
|
|
|
|
# This defines the database in which to store all server data.
|
|
|
|
|
#sqluri = sqlite:////tmp/syncserver.db
|
|
|
|
|
sqluri = pymysql://{{ database_user | urlencode }}:{{ database_pass | urlencode }}@127.0.0.1/{{ database_name | urlencode }}
|
|
|
|
|
|
|
|
|
|
# This is a secret key used for signing authentication tokens.
|
|
|
|
|
# It should be long and randomly-generated.
|
|
|
|
|
# The following command will give a suitable value on *nix systems:
|
|
|
|
|
#
|
|
|
|
|
# head -c 20 /dev/urandom | sha1sum
|
|
|
|
|
#
|
|
|
|
|
# If not specified then the server will generate a temporary one at startup.
|
|
|
|
|
secret = {{ secret }}
|
|
|
|
|
|
|
|
|
|
# Set this to "false" to disable new-user signups on the server.
|
|
|
|
|
# Only requests by existing accounts will be honoured.
|
|
|
|
|
allow_new_users = false
|
|
|
|
|
|
|
|
|
|
# Set this to "true" to work around a mismatch between public_url and
|
|
|
|
|
# the application URL as seen by python, which can happen in certain reverse-
|
|
|
|
|
# proxy hosting setups. It will overwrite the WSGI environ dict with the
|
|
|
|
|
# details from public_url. This could have security implications if e.g.
|
|
|
|
|
# you tell the app that it's on HTTPS but it's really on HTTP, so it should
|
|
|
|
|
# only be used as a last resort and after careful checking of server config.
|
|
|
|
|
force_wsgi_environ = false
|
