copy nifi properties

server/Dockerfile

@@ -102,6 +102,8 @@ RUN cp ../custom/flow.xml.gz conf
 # Copy custom extensions
 RUN cp ../custom/jsonld-processor/nifi-jsonld-nar/target/*.nar extensions
 RUN cp ../custom/jsonld-processor/nifi-jsonld-nar/target/*.nar nar_extensions
+# Copy nifi properties
+RUN cp ../custom/nifi.properties conf
 
 # Apply configuration and start NiFi
 #

server/custom/nifi.properties

@@ -15,7 +15,6 @@
 
 # Core Properties #
 nifi.flow.configuration.file=./conf/flow.xml.gz
-nifi.flow.configuration.json.file=./conf/flow.json.gz
 nifi.flow.configuration.archive.enabled=true
 nifi.flow.configuration.archive.dir=./conf/archive/
 nifi.flow.configuration.archive.max.time=30 days
@@ -39,7 +38,6 @@ nifi.nar.library.directory=./lib
 nifi.nar.library.autoload.directory=./extensions
 nifi.nar.working.directory=./work/nar/
 nifi.documentation.working.directory=./work/docs/components
-nifi.nar.unpack.uber.jar=false
 
 ####################
 # State Management #
@@ -54,39 +52,46 @@ nifi.state.management.embedded.zookeeper.start=false
 # Properties file that provides the ZooKeeper properties to use if <nifi.state.management.embedded.zookeeper.start> is set to true
 nifi.state.management.embedded.zookeeper.properties=./conf/zookeeper.properties
 
-# Database Settings
-nifi.database.directory=./database_repository
 
-# Repository Encryption properties override individual repository implementation properties
-nifi.repository.encryption.protocol.version=
-nifi.repository.encryption.key.id=
-nifi.repository.encryption.key.provider=
-nifi.repository.encryption.key.provider.keystore.location=
-nifi.repository.encryption.key.provider.keystore.password=
+# H2 Settings
+nifi.database.directory=./database_repository
+nifi.h2.url.append=;LOCK_TIMEOUT=25000;WRITE_DELAY=0;AUTO_SERVER=FALSE
 
 # FlowFile Repository
 nifi.flowfile.repository.implementation=org.apache.nifi.controller.repository.WriteAheadFlowFileRepository
 nifi.flowfile.repository.wal.implementation=org.apache.nifi.wali.SequentialAccessWriteAheadLog
 nifi.flowfile.repository.directory=./flowfile_repository
 nifi.flowfile.repository.checkpoint.interval=20 secs
 nifi.flowfile.repository.always.sync=false
+nifi.flowfile.repository.encryption.key.provider.implementation=
+nifi.flowfile.repository.encryption.key.provider.location=
+nifi.flowfile.repository.encryption.key.id=
+nifi.flowfile.repository.encryption.key=
 nifi.flowfile.repository.retain.orphaned.flowfiles=true
 
 nifi.swap.manager.implementation=org.apache.nifi.controller.FileSystemSwapManager
 nifi.queue.swap.threshold=20000
 
 # Content Repository
 nifi.content.repository.implementation=org.apache.nifi.controller.repository.FileSystemRepository
-nifi.content.claim.max.appendable.size=50 KB
+nifi.content.claim.max.appendable.size=1 MB
 nifi.content.repository.directory.default=./content_repository
 nifi.content.repository.archive.max.retention.period=7 days
 nifi.content.repository.archive.max.usage.percentage=50%
 nifi.content.repository.archive.enabled=true
 nifi.content.repository.always.sync=false
 nifi.content.viewer.url=../nifi-content-viewer/
+nifi.content.repository.encryption.key.provider.implementation=
+nifi.content.repository.encryption.key.provider.location=
+nifi.content.repository.encryption.key.id=
+nifi.content.repository.encryption.key=
 
 # Provenance Repository Properties
 nifi.provenance.repository.implementation=org.apache.nifi.provenance.WriteAheadProvenanceRepository
+nifi.provenance.repository.encryption.key.provider.implementation=
+nifi.provenance.repository.encryption.key.provider.location=
+nifi.provenance.repository.encryption.key.id=
+nifi.provenance.repository.encryption.key=
 
 # Persistent Provenance Repository Properties
 nifi.provenance.repository.directory.default=./provenance_repository
@@ -115,82 +120,52 @@ nifi.provenance.repository.concurrent.merge.threads=2
 # Volatile Provenance Respository Properties
 nifi.provenance.repository.buffer.size=100000
 
-# Component and Node Status History Repository
+# Component Status Repository
 nifi.components.status.repository.implementation=org.apache.nifi.controller.status.history.VolatileComponentStatusRepository
-
-# Volatile Status History Repository Properties
 nifi.components.status.repository.buffer.size=1440
 nifi.components.status.snapshot.frequency=1 min
 
-# QuestDB Status History Repository Properties
-nifi.status.repository.questdb.persist.node.days=14
-nifi.status.repository.questdb.persist.component.days=3
-nifi.status.repository.questdb.persist.location=./status_repository
-
 # Site to Site properties
-nifi.remote.input.host=semantification.integration
-nifi.remote.input.secure=true
-nifi.remote.input.socket.port=10443
+nifi.remote.input.host=
+nifi.remote.input.secure=false
+nifi.remote.input.socket.port=
 nifi.remote.input.http.enabled=true
 nifi.remote.input.http.transaction.ttl=30 sec
 nifi.remote.contents.cache.expiration=30 secs
 
 # web properties #
-#############################################
-
-# For security, NiFi will present the UI on 127.0.0.1 and only be accessible through this loopback interface.
-# Be aware that changing these properties may affect how your instance can be accessed without any restriction.
-# We recommend configuring HTTPS instead. The administrators guide provides instructions on how to do this.
-
-nifi.web.http.host=
-nifi.web.http.port=
+nifi.web.http.host=0.0.0.0
+nifi.web.http.port=8080
 nifi.web.http.network.interface.default=
-
-#############################################
-
-nifi.web.https.host=semantification.integration
-nifi.web.https.port=8443
+nifi.web.https.host=
+nifi.web.https.port=
 nifi.web.https.network.interface.default=
-nifi.web.https.application.protocols=http/1.1
 nifi.web.jetty.working.directory=./work/jetty
 nifi.web.jetty.threads=200
 nifi.web.max.header.size=16 KB
 nifi.web.proxy.context.path=
 nifi.web.proxy.host=
 nifi.web.max.content.size=
 nifi.web.max.requests.per.second=30000
-nifi.web.max.access.token.requests.per.second=25
-nifi.web.request.timeout=60 secs
-nifi.web.request.ip.whitelist=
 nifi.web.should.send.server.version=true
-nifi.web.request.log.format=%{client}a - %u %t "%r" %s %O "%{Referer}i" "%{User-Agent}i"
-
-# Filter JMX MBeans available through the System Diagnostics REST API
-nifi.web.jmx.metrics.allowed.filter.pattern=
-
-# Include or Exclude TLS Cipher Suites for HTTPS
-nifi.web.https.ciphersuites.include=
-nifi.web.https.ciphersuites.exclude=
 
 # security properties #
 nifi.sensitive.props.key=
 nifi.sensitive.props.key.protected=
-nifi.sensitive.props.algorithm=NIFI_PBKDF2_AES_GCM_256
+nifi.sensitive.props.algorithm=PBEWITHMD5AND256BITAES-CBC-OPENSSL
+nifi.sensitive.props.provider=BC
 nifi.sensitive.props.additional.keys=
 
-nifi.security.autoreload.enabled=false
-nifi.security.autoreload.interval=10 secs
-nifi.security.keystore=./conf/keystore.jks
-nifi.security.keystoreType=jks
-nifi.security.keystorePasswd=NrqbYBMvXOpEI2U3VBkBWZ9zVKpdtKU25sldzj6GgZ4
-nifi.security.keyPasswd=NrqbYBMvXOpEI2U3VBkBWZ9zVKpdtKU25sldzj6GgZ4
-nifi.security.truststore=./conf/truststore.jks
-nifi.security.truststoreType=jks
-nifi.security.truststorePasswd=oZcpySraNvL38UT7eCUmwyuTegk4ljpPqphO9ldnLmw
-nifi.security.user.authorizer=single-user-authorizer
+nifi.security.keystore=
+nifi.security.keystoreType=
+nifi.security.keystorePasswd=
+nifi.security.keyPasswd=
+nifi.security.truststore=
+nifi.security.truststoreType=
+nifi.security.truststorePasswd=
+nifi.security.user.authorizer=managed-authorizer
 nifi.security.allow.anonymous.authentication=false
-nifi.security.user.login.identity.provider=single-user-provider
-nifi.security.user.jws.key.rotation.period=PT1H
+nifi.security.user.login.identity.provider=
 nifi.security.ocsp.responder.url=
 nifi.security.ocsp.responder.certificate=
 
@@ -201,33 +176,15 @@ nifi.security.user.oidc.read.timeout=5 secs
 nifi.security.user.oidc.client.id=
 nifi.security.user.oidc.client.secret=
 nifi.security.user.oidc.preferred.jwsalgorithm=
-nifi.security.user.oidc.additional.scopes=offline_access
+nifi.security.user.oidc.additional.scopes=
 nifi.security.user.oidc.claim.identifying.user=
-nifi.security.user.oidc.fallback.claims.identifying.user=
-nifi.security.user.oidc.claim.groups=groups
-nifi.security.user.oidc.truststore.strategy=JDK
-nifi.security.user.oidc.token.refresh.window=60 secs
 
 # Apache Knox SSO Properties #
 nifi.security.user.knox.url=
 nifi.security.user.knox.publicKey=
 nifi.security.user.knox.cookieName=hadoop-jwt
 nifi.security.user.knox.audiences=
 
-# SAML Properties #
-nifi.security.user.saml.idp.metadata.url=
-nifi.security.user.saml.sp.entity.id=
-nifi.security.user.saml.identity.attribute.name=
-nifi.security.user.saml.group.attribute.name=
-nifi.security.user.saml.request.signing.enabled=false
-nifi.security.user.saml.want.assertions.signed=true
-nifi.security.user.saml.signature.algorithm=http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
-nifi.security.user.saml.authentication.expiration=12 hours
-nifi.security.user.saml.single.logout.enabled=false
-nifi.security.user.saml.http.client.truststore.strategy=JDK
-nifi.security.user.saml.http.client.connect.timeout=30 secs
-nifi.security.user.saml.http.client.read.timeout=30 secs
-
 # Identity Mapping Properties #
 # These properties allow normalizing user identities such that identities coming from different identity providers
 # (certificates, LDAP, Kerberos) can be treated the same internally in NiFi. The following example demonstrates normalizing
@@ -248,20 +205,16 @@ nifi.security.user.saml.http.client.read.timeout=30 secs
 # nifi.security.group.mapping.value.anygroup=$1
 # nifi.security.group.mapping.transform.anygroup=LOWER
 
-# Listener Bootstrap properties #
-# This property defines the port used to listen for communications from NiFi Bootstrap. If this property
-# is missing, empty, or 0, a random ephemeral port is used.
-nifi.listener.bootstrap.port=0
-
 # cluster common properties (all nodes must have same values) #
 nifi.cluster.protocol.heartbeat.interval=5 sec
 nifi.cluster.protocol.heartbeat.missable.max=8
-nifi.cluster.protocol.is.secure=true
+nifi.cluster.protocol.is.secure=false
 
 # cluster node properties (only configure for cluster nodes) #
 nifi.cluster.is.node=false
-nifi.cluster.node.address=semantification.integration
-nifi.cluster.node.protocol.port=11443
+nifi.cluster.node.address=
+nifi.cluster.node.protocol.port=
+nifi.cluster.node.protocol.threads=10
 nifi.cluster.node.protocol.max.threads=50
 nifi.cluster.node.event.history.size=25
 nifi.cluster.node.connection.timeout=5 sec
@@ -283,14 +236,6 @@ nifi.zookeeper.connect.string=
 nifi.zookeeper.connect.timeout=10 secs
 nifi.zookeeper.session.timeout=10 secs
 nifi.zookeeper.root.node=/nifi
-nifi.zookeeper.client.secure=false
-nifi.zookeeper.security.keystore=
-nifi.zookeeper.security.keystoreType=
-nifi.zookeeper.security.keystorePasswd=
-nifi.zookeeper.security.truststore=
-nifi.zookeeper.security.truststoreType=
-nifi.zookeeper.security.truststorePasswd=
-nifi.zookeeper.jute.maxbuffer=
 
 # Zookeeper properties for the authentication scheme used when creating acls on znodes used for cluster management
 # Values supported for nifi.zookeeper.auth.type are "default", which will apply world/anyone rights on znodes
@@ -325,52 +270,3 @@ nifi.analytics.query.interval=5 mins
 nifi.analytics.connection.model.implementation=org.apache.nifi.controller.status.analytics.models.OrdinaryLeastSquares
 nifi.analytics.connection.model.score.name=rSquared
 nifi.analytics.connection.model.score.threshold=.90
-
-# runtime monitoring properties
-nifi.monitor.long.running.task.schedule=
-nifi.monitor.long.running.task.threshold=
-
-# Enable automatic diagnostic at shutdown.
-nifi.diagnostics.on.shutdown.enabled=false
-
-# Include verbose diagnostic information.
-nifi.diagnostics.on.shutdown.verbose=false
-
-# The location of the diagnostics folder.
-nifi.diagnostics.on.shutdown.directory=./diagnostics
-
-# The maximum number of files permitted in the directory. If the limit is exceeded, the oldest files are deleted.
-nifi.diagnostics.on.shutdown.max.filecount=10
-
-# The diagnostics folder's maximum permitted size in bytes. If the limit is exceeded, the oldest files are deleted.
-nifi.diagnostics.on.shutdown.max.directory.size=10 MB
-
-# Performance tracking properties
-## Specifies what percentage of the time we should track the amount of time processors are using CPU, reading from/writing to content repo, etc.
-## This can be useful to understand which components are the most expensive and to understand where system bottlenecks may be occurring.
-## The value must be in the range of 0 (inclusive) to 100 (inclusive). A larger value will produce more accurate results, while a smaller value may be
-## less expensive to compute.
-## Results can be obtained by running "nifi.sh diagnostics <filename>" and then inspecting the produced file.
-nifi.performance.tracking.percentage=0
-
-# NAR Provider Properties #
-# These properties allow configuring one or more NAR providers. A NAR provider retrieves NARs from an external source
-# and copies them to the directory specified by nifi.nar.library.autoload.directory.
-#
-# Each NAR provider property follows the format:
-#  nifi.nar.library.provider.<identifier>.<property-name>
-#
-# Each NAR provider must have at least one property named "implementation".
-#
-# Example HDFS NAR Provider:
-#   nifi.nar.library.provider.hdfs.implementation=org.apache.nifi.flow.resource.hadoop.HDFSExternalResourceProvider
-#   nifi.nar.library.provider.hdfs.resources=/path/to/core-site.xml,/path/to/hdfs-site.xml
-#   nifi.nar.library.provider.hdfs.storage.location=hdfs://hdfs-location
-#   nifi.nar.library.provider.hdfs.source.directory=/nars
-#   [email protected]
-#   nifi.nar.library.provider.hdfs.kerberos.keytab=/path/to/nifi.keytab
-#   nifi.nar.library.provider.hdfs.kerberos.password=
-#
-# Example NiFi Registry NAR Provider:
-#   nifi.nar.library.provider.nifi-registry.implementation=org.apache.nifi.registry.extension.NiFiRegistryNarProvider
-#   nifi.nar.library.provider.nifi-registry.url=http://localhost:18080