1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
[uwsgi]
############################
### Generic UWSGI config ###
############################
# Override the default size for headers from the 4k default.
buffer-size = 65535
# This avoids error 104: "Connection reset by peer"
# This makes "openstack image save" break when using
# the swift backend, so do not activate:
#rem-header = Content-Length
# This is running standalone
master = true
# Threads and processes
enable-threads = true
# uwsgi recommends this to prevent thundering herd on accept.
thunder-lock = true
plugins = python3
# This ensures that file descriptors aren't shared between the WSGI application processes.
lazy-apps = true
# Log from the wsgi application: needs python3-pastescript as runtime depends.
paste-logger = true
# automatically kill workers if master dies
no-orphans = true
# exit instead of brutal reload on SIGTERM
die-on-term = true
##################################
### OpenStack service specific ###
##################################
# We ran benches to validate these values, and they seem ok:
threads = 12
listen = 100
# These are used in the gate.
# The http-auto-chunked / http-chunked-input
# are mandatory, specific to Glance, and are
# the reasons why Glance doesn't work on Apache
socket-timeout = 10
http-auto-chunked = true
http-chunked-input = true
http-raw-body = true
chmod-socket = 666
lazy-apps = true
add-header = Connection: close
enable-threads = true
exit-on-reload = true
die-on-term = true
wsgi-manage-chunked-input = true
# This is the standard port for the WSGI application, listening on all available IPs
logto = /var/log/swift/swift-proxy.log
name = swift-proxy-server
uid = swift
gid = swift
chdir = /var/lib/swift
wsgi-file = /usr/bin/swift-proxy-server-uwsgi
# This is controled by the init script using the --http-socket
# or using the --https thing. https will be activated if a file
# /etc/swift/ssl/private/*.pem is found. In both case, port 9292
# on all IPs will be used.
# The partern to search for the private key file is:
# find /etc/swift/ssl/private -type f -iname '*.pem' | head -n 1
# and for the certificate:
# find /etc/swift/ssl/private -type f -iname '*.crt' | head -n 1
# just drop files there and restart the daemon, and you'll have
# SSL up and running.
#http-socket = :8080
#https 0.0.0.0:8080,foobar.crt,foobar.key
|
