1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
[uwsgi]
############################
### Generic UWSGI config ###
############################
# Override the default size for headers from the 4k default.
buffer-size = 65535
# This avoids error 104: "Connection reset by peer"
#rem-header = Content-Length
# This is running standalone
master = true
# uwsgi recommends this to prevent thundering herd on accept.
thunder-lock = true
plugins = python3
# This ensures that file descriptors aren't shared between the WSGI application processes.
lazy-apps = true
# Log from the wsgi application: needs python3-pastescript as runtime depends.
paste-logger = true
# automatically kill workers if master dies
no-orphans = true
# exit instead of brutal reload on SIGTERM
die-on-term = true
##########################
### Performance tuning ###
##########################
# Threads and processes
enable-threads = true
# For max perf, set this to number of core*2
processes = 8
# This was benchmarked as a good value
threads = 32
# This is the number of sockets in the queue.
# It improves a lot performances. This is comparable
# to the Apache ServerLimit/MaxClients option.
listen = 100
##################################
### OpenStack service specific ###
##################################
# This is needed, otherwise connections stay open
add-header = Connection: close
# Important stuff...
paste = config:/etc/cloudkitty/api_paste.ini
# This is the standard port for the WSGI application, listening on all available IPs
logto = /var/log/cloudkitty/cloudkitty-api.log
name = cloudkitty-api
uid = cloudkitty
gid = cloudkitty
chdir = /var/lib/cloudkitty
wsgi-file = /usr/bin/cloudkitty-api
# This is controled by the init script using the --http-socket
# or using the --https thing. https will be activated if a file
# /etc/cloudkitty/ssl/private/*.pem is found. In both case, port 8889
# on all IPs will be used.
# The partern to search for the private key file is:
# find /etc/cloudkitty/ssl/private -type f -iname '*.pem' | head -n 1
# and for the certificate:
# find /etc/cloudkitty/ssl/private -type f -iname '*.crt' | head -n 1
# just drop files there and restart the daemon, and you'll have
# SSL up and running.
#http-socket = [::]:8889
#https-socket = [::]:8889,foobar.crt,foobar.key
|
