cacus-default.yml

storage:
  type: FileStorage
  path: /srv/cacus/pool/
# Other storages supported:
#    type: AzureStorage
#    account_name: put_your_own
#    account_key: put_your_own
#    container: repos
#    timeout: 3
#    retries: 3

logging:
  level: debug
  app:
    console: true
    syslog: False       # or syslog facility (daemon, user etc)
    file: /tmp/cacus.log
  access:
    console: true
    syslog: False       # or syslog facility (daemon, user etc)
    file: /tmp/cacus-access.log

db:
  # possible values for 'implementation': 'mongo' (usual mongodb) or 'cosmos' (Azure CosmosDB with mongodb API enabled
  implementation: mongo     
  # threat this subtree as kwargs to pymongo.MongoClient(),
  # for example, add replicaSet option if you want to connect to replicaset 
  host: 
    - mongodb://cacus:secret@example.org:27017
  ssl: True
  socketKeepAlive: true
  heartbeatFrequencyMS: 5000
  socketTimeoutMS: 1000
  connectTimeoutMS: 5000

repo_daemon:
  port: 1488
  repo_base: '/debian'
  storage_subdir: 'storage'
  proxy_storage: true
  max_body_size: 1073741824         # 1 GiB (I think it's safe to set any value, since body is streamed, not saved in memory in one piece)
  auth_secret: DLBcyOXUuRK0VFygWDe2+iXAihV6vHVNurasw38Rc+Q=     #Generate your own using, for example, using `openssl rand 32 -base64`"
  privileged_nets: [ '127.0.0.0/8' ]        # requests from this nets wouldn't require authorization
  restrict_dangerous_operations: true       # Dangerous operations, like distro removal, would require admin access

duploader_daemon:
  incoming_root: /srv/cacus/incoming/

gpg:    
  home: /var/lib/cacus/.gnupg
  sign_key: D520677A

retry_count: 3
retry_delays: [2, 5, 10, 30, 60, 90]

lock:
  method: mongo         # also 'consul' is supported
  connection: {}        # optional kwargs for consul.Consul() (ignored for mongo lock)
  ttl: 600

# additional plugins
plugin_path:
  - /opt/cacus/plugins