2017-12-16 07:25:59 -05:00
---
id: configuration
title: "Configuration File"
---
2017-08-26 04:32:18 -05:00
This file is the cornerstone of verdaccio where you can modify the default behaviour, enable plugins and extend features.
A default configuration file is created the very first time you run `verdaccio` .
## Default Configuration
The default configuration has support for **scoped** packages and allow any user to access all packages but only **authenticated users to publish** .
2017-08-26 04:35:04 -05:00
```yaml
2017-08-26 04:32:18 -05:00
storage: ./storage
auth:
htpasswd:
file: ./htpasswd
uplinks:
npmjs:
url: https://registry.npmjs.org/
packages:
'@*/*':
access: $all
publish: $authenticated
proxy: npmjs
'**':
proxy: npmjs
logs:
- {type: stdout, format: pretty, level: http}
```
## Sections
2018-07-16 15:13:49 -05:00
The following sections explain what each property means and the different options.
2017-08-26 04:32:18 -05:00
### Storage
Is the location of the default storage. **Verdaccio is by default based on local file system** .
2017-08-26 04:35:04 -05:00
```yaml
2017-08-26 04:32:18 -05:00
storage: ./storage
```
2018-07-18 07:53:08 -05:00
### Plugins
Is the location of the plugin directory. Useful for Docker/Kubernetes based deployments.
```yaml
plugins: ./plugins
```
2017-08-26 04:32:18 -05:00
### Authentification
2018-01-08 14:40:36 -05:00
The authentification set up is done here, the default auth is based on `htpasswd` and is built-in. You can modify this behaviour via [plugins ](plugins.md ). For more information about this section read the [auth page ](auth.md ).
2017-08-26 04:32:18 -05:00
2017-08-26 04:35:04 -05:00
```yaml
2017-08-26 04:32:18 -05:00
auth:
htpasswd:
file: ./htpasswd
max_users: 1000
```
### Web UI
This properties allow you to modify the look and feel of the web UI. For more information about this section read the [web ui page ](web.md ).
2017-08-26 04:35:04 -05:00
```yaml
2017-08-26 04:32:18 -05:00
web:
enable: true
title: Verdaccio
logo: logo.png
2018-07-30 14:11:36 -05:00
scope:
2017-08-26 04:32:18 -05:00
```
2017-09-27 06:58:41 -05:00
### Uplinks
2017-08-26 04:32:18 -05:00
2017-08-26 04:35:04 -05:00
Uplinks is the ability of the system to fetch packages from remote registries when those packages are not available locally. For more information about this section read the [uplinks page ](uplinks.md ).
2017-08-26 04:32:18 -05:00
2017-08-26 04:35:04 -05:00
```yaml
2017-08-26 04:32:18 -05:00
uplinks:
npmjs:
url: https://registry.npmjs.org/
```
2017-08-26 04:35:04 -05:00
### Packages
2018-07-16 15:13:49 -05:00
Packages allow the user to control how the packages are gonna be accessed. For more information about this section read the [packages page ](packages.md ).
2017-08-26 04:35:04 -05:00
```yaml
packages:
'@*/*':
access: $all
publish: $authenticated
proxy: npmjs
```
## Advanced Settings
2017-08-26 04:32:18 -05:00
2017-12-16 07:25:59 -05:00
### Offline Publish
2017-08-26 04:32:18 -05:00
2018-07-16 15:13:49 -05:00
By default `verdaccio` does not allow to publish when the client is offline, that behavior can be overridden by setting this to *true* .
2017-08-26 04:32:18 -05:00
2017-08-26 04:35:04 -05:00
```yaml
publish:
allow_offline: false
```
2018-01-20 17:00:45 -05:00
< small > Since: `verdaccio@2.3.6` due [#223 ](https://github.com/verdaccio/verdaccio/pull/223 )</ small >
2017-08-26 04:35:04 -05:00
### URL Prefix
```yaml
url_prefix: https://dev.company.local/verdaccio/
```
2018-01-20 17:00:45 -05:00
Since: `verdaccio@2.3.6` due [#197 ](https://github.com/verdaccio/verdaccio/pull/197 )
2017-08-26 04:35:04 -05:00
### Max Body Size
2018-05-29 07:28:23 -05:00
By default the maximum body size for a JSON document is `10mb` , if you run in errors as `"request entity too large"` you may increase this value.
2017-08-26 04:35:04 -05:00
```yaml
2018-05-29 07:28:23 -05:00
max_body_size: 10mb
2017-08-26 04:35:04 -05:00
```
### Listen Port
2018-07-16 15:13:49 -05:00
`verdaccio` runs by default in the port `4873` . Changing the port can be done via [cli ](cli.md ) or in the configuration file, the following options are valid.
2017-08-26 04:35:04 -05:00
```yaml
listen:
# - localhost:4873 # default value
# - http://localhost:4873 # same thing
# - 0.0.0.0:4873 # listen on all addresses (INADDR_ANY)
# - https://example.org:4873 # if you want to use https
2018-01-19 15:40:13 -05:00
# - "[::1]:4873" # ipv6
2017-08-26 04:35:04 -05:00
# - unix:/tmp/verdaccio.sock # unix socket
```
### HTTPS
2018-07-16 15:13:49 -05:00
To enable `https` in `verdaccio` it's enough to set the `listen` flag with the protocol *https://* . For more information about this section read the [ssl page ](ssl.md ).
2017-08-26 04:35:04 -05:00
```yaml
https:
2018-02-16 02:21:40 -05:00
key: ./path/verdaccio-key.pem
cert: ./path/verdaccio-cert.pem
ca: ./path/verdaccio-csr.pem
2017-08-26 04:35:04 -05:00
```
2018-01-24 15:47:23 -05:00
### Proxy
Proxies are special-purpose HTTP servers designed to transfer data from remote servers to local clients.
#### http_proxy and https_proxy
If you have a proxy in your network you can set a `X-Forwarded-For` header using the following properties.
```yaml
http_proxy: http://something.local/
https_proxy: https://something.local/
```
#### no_proxy
This variable should contain a comma-separated list of domain extensions proxy should not be used for.
```yaml
2018-07-16 15:13:49 -05:00
no_proxy: localhost,127.0.0.1
2018-01-24 15:47:23 -05:00
```
2017-08-26 04:35:04 -05:00
### Notifications
2018-07-16 15:13:49 -05:00
Enabling notifications to third-party tools is fairly easy via web hooks. For more information about this section read the [notifications page ](notifications.md ).
2017-08-26 04:35:04 -05:00
```yaml
notify:
method: POST
headers: [{'Content-Type': 'application/json'}]
endpoint: https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken
content: '{"color":"green","message":"New package published: * {{ name }}* ","notify":true,"message_format":"text"}'
```
2017-08-26 04:32:18 -05:00
2018-01-20 17:00:45 -05:00
> For more detailed configuration settings, please [check the source code](https://github.com/verdaccio/verdaccio/tree/master/conf).
2017-08-26 04:32:18 -05:00
2018-05-31 03:41:00 -05:00
### Audit
2017-08-26 04:32:18 -05:00
2018-05-31 04:11:35 -05:00
< small > Since: `verdaccio@3.0.0` </ small >
2018-05-31 03:41:00 -05:00
`npm audit` is a new command released with [npm 6.x ](https://github.com/npm/npm/releases/tag/v6.1.0 ). Verdaccio includes
a built-in middleware plugin to handle this command.
2017-08-26 04:32:18 -05:00
2018-05-31 03:41:00 -05:00
> If you have a new installation it comes by default, otherwise you need to add the following props to your config file
```yaml
middlewares:
audit:
enabled: true
```
2017-08-26 04:32:18 -05:00
2017-12-16 07:25:59 -05:00