2caa1e7650
* build(deps-dev): bump bandit from 1.6.2 to 1.6.3 Bumps [bandit](https://github.com/PyCQA/bandit) from 1.6.2 to 1.6.3. - [Release notes](https://github.com/PyCQA/bandit/releases) - [Commits](https://github.com/PyCQA/bandit/compare/1.6.2...1.6.3) Signed-off-by: dependabot[bot] <support@github.com> * root: update for new bandit version Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jens Langhammer <jens.langhammer@beryju.org>
58 lines
1.7 KiB
Python
58 lines
1.7 KiB
Python
"""Gunicorn config"""
|
|
import os
|
|
import warnings
|
|
from multiprocessing import cpu_count
|
|
from pathlib import Path
|
|
|
|
import structlog
|
|
|
|
bind = "0.0.0.0:8000"
|
|
|
|
user = "authentik"
|
|
group = "authentik"
|
|
|
|
worker_class = "uvicorn.workers.UvicornWorker"
|
|
# Docker containers don't have /tmp as tmpfs
|
|
worker_tmp_dir = "/dev/shm" # nosec
|
|
|
|
os.environ.setdefault("DJANGO_SETTINGS_MODULE", "authentik.root.settings")
|
|
|
|
logconfig_dict = {
|
|
"version": 1,
|
|
"disable_existing_loggers": False,
|
|
"formatters": {
|
|
"json_formatter": {
|
|
"()": structlog.stdlib.ProcessorFormatter,
|
|
"processor": structlog.processors.JSONRenderer(),
|
|
"foreign_pre_chain": [
|
|
structlog.stdlib.add_log_level,
|
|
structlog.stdlib.add_logger_name,
|
|
structlog.processors.TimeStamper(),
|
|
structlog.processors.StackInfoRenderer(),
|
|
structlog.processors.format_exc_info,
|
|
],
|
|
}
|
|
},
|
|
"handlers": {
|
|
"error_console": {
|
|
"class": "logging.StreamHandler",
|
|
"formatter": "json_formatter",
|
|
},
|
|
"console": {"class": "logging.StreamHandler", "formatter": "json_formatter"},
|
|
},
|
|
"loggers": {
|
|
"uvicorn": {"handlers": ["console"], "level": "WARNING", "propagate": False},
|
|
"gunicorn": {"handlers": ["console"], "level": "INFO", "propagate": False},
|
|
},
|
|
}
|
|
|
|
# if we're running in kubernetes, use fixed workers because we can scale with more pods
|
|
# otherwise (assume docker-compose), use as much as we can
|
|
if Path("/var/run/secrets/kubernetes.io").exists():
|
|
workers = 2
|
|
else:
|
|
worker = cpu_count() * 2 + 1
|
|
threads = 4
|
|
|
|
warnings.simplefilter("once")
|