7.9 KiB
| id | title |
|---|---|
| configuration | File di configurazione |
This file is the cornerstone of Verdaccio where you can modify the default behaviour, enable plugins and extend features.
La prima volta in assoluto che si esegue verdaccio viene creato un file di configurazione config.yaml predefinito.
Configurazione Predefinita
The default configuration has support for scoped packages and allows any user to access all packages, but only authenticated users to publish.
storage: ./storage
auth:
htpasswd:
file: ./htpasswd
uplinks:
npmjs:
url: https://registry.npmjs.org/
packages:
"@*/*":
access: $all
publish: $authenticated
proxy: npmjs
"**":
proxy: npmjs
logs:
- { type: stdout, format: pretty, level: http }
Sezioni
The following sections explain what each property means and their different options.
Archiviazione
È il percorso di archiviazione predefinito. Verdaccio è di default basato sul file locale di sistema.
storage: ./storage
Plugin
Is the location of the plugin directory. Useful for Docker/Kubernetes-based deployments.
plugins: ./plugins
Autenticazione
The authentication setup is done here. The default auth is based on htpasswd and is built in. You can modify this behaviour via plugins. For more information about this section read the auth page.
auth:
htpasswd:
file: ./htpasswd
max_users: 1000
Sicurezza
A partire da: verdaccio@4.0.0 #168
Il blocco di sicurezza consente di personalizzare la firma del token. To enable a new JWT (JSON Web Tokens) signature you need to add the block jwt to the api section; web uses jwt by default.
La configurazione è divisa in due sezioni, api e web. To use JWT on api it has to be defined, otherwise the legacy token signature (aes192) will be used. For JWT you might want to customize the signature and the token verification with your own properties.
security:
api:
legacy: true
jwt:
sign:
expiresIn: 29d
verify:
someProp: [value]
web:
sign:
expiresIn: 7d # 7 days by default
verify:
someProp: [value]
Consigliamo caldamente di migrare su JWT poiché la firma ereditata (
aes192) è deprecata e non sarà presente nelle versioni future.
Server
Un insieme di proprietà per modificare il comportamento dell'applicazione del server, specificamente l'API (Express.js).
È possibile specificare il timeout del server HTTP/1.1 keep alive in secondi per le connessioni entranti. Un valore pari a 0 rende il comportamento del server http simile a quello delle versioni di Node.js precedenti alla 8.0.0, le quali non avevano un timeout keep-alive. WORKAROUND: Tramite la configurazione specificata è possibile risolvere i seguenti problemi https://github.com/verdaccio/verdaccio/issues/301. Impostare su 0 in caso 60 non sia sufficiente.
server:
keepAliveTimeout: 60
Interfaccia Utente Web
This property allow you to modify the look and feel of the web UI. For more information about this section read the web UI page.
web:
enable: true
title: Verdaccio
logo: logo.png
scope:
Uplink
Uplinks add the ability to fetch packages from remote registries when those packages are not available locally. For more information about this section read the uplinks page.
uplinks:
npmjs:
url: https://registry.npmjs.org/
Pacchetti
This section allows you to control how packages are accessed. For more information about this section read the packages page.
packages:
"@*/*":
access: $all
publish: $authenticated
proxy: npmjs
Impostazioni Avanzate
Pubblicazione Non in Linea
By default verdaccio does not allow you to publish packages when the client is offline. This can be can be overridden by setting this value to true.
publish:
allow_offline: false
A partire da: verdaccio@2.3.6 paragrafo #223
Prefisso URL
The prefix is intended to be used when the server runs behinds the proxy, check the reverse proxy setup page for more details.
url_prefix: /verdaccio/
Verdaccio 5 has an improved prefix behaviour, check here details.
Dimensione Massima del Corpo
By default the maximum body size for a JSON document is 10mb, if you run into errors that state "request entity too large" you may increase this value.
max_body_size: 10mb
Porta in ascolto
verdaccio runs by default on the port 4873. Changing the port can be done via CLI or in the configuration file. The following options are valid:
listen:
# - localhost:4873 # default value
# - http://localhost:4873 # same thing
# - 0.0.0.0:4873 # listen on all addresses (INADDR_ANY)
# - https://example.org:4873 # if you want to use https
# - "[::1]:4873" # ipv6
# - unix:/tmp/verdaccio.sock # unix socket
HTTPS
To enable https in verdaccio it's enough to set the listen flag with the protocol https://. For more information about this section read the SSL page.
https:
key: ./path/verdaccio-key.pem
cert: ./path/verdaccio-cert.pem
ca: ./path/verdaccio-csr.pem
Proxy
Proxies are special-purpose HTTP servers designed to transfer data from remote servers to local clients.
http_proxy and https_proxy
If you have a proxy in your network you can set a X-Forwarded-For header using the following properties:
http_proxy: http://something.local/
https_proxy: https://something.local/
no_proxy
This variable should contain a comma-separated list of domain extensions that the proxy should not be used for.
no_proxy: localhost,127.0.0.1
Notifiche
Enabling notifications to third-party tools is fairly easy via webhooks. For more information about this section read the notifications page.
notify:
method: POST
headers: [{ "Content-Type": "application/json" }]
endpoint: https://usagge.hipchat.com/v2/room/3729485/notification?auth_token=mySecretToken
content: '{"color":"green","message":"New package published: * {{ name }}*","notify":true,"message_format":"text"}'
Per impostazioni di configurazione più dettagliate, si prega di controllare il codice sorgente.
Audit
Since: verdaccio@3.0.0
npm audit is a new command released with npm 6.x. Verdaccio includes a built-in middleware plugin to handle this command.
Se si dispone di una nuova installazione viene fornito di default, altrimenti è necessario aggiungere le seguenti proprietà al file di configurazione
middlewares:
audit:
enabled: true
Esperimenti
This release includes a new property named experiments that can be placed in the config.yaml and is completely optional.
We want to be able to ship new things without affecting production environments. This flag allows us to add new features and get feedback from the community who decides to use them.
The features under this flag might not be stable or might be removed in future releases.
Here is one example:
experiments:
token: false
To disable the experiments warning in the console, you must comment out the whole
experimentssection.