|
| 1 | +# While a lot of configuration in Sentry can be changed via the UI, for all |
| 2 | +# new-style config (as of 8.0) you can also declare values here in this file |
| 3 | +# to enforce defaults or to ensure they cannot be changed via the UI. For more |
| 4 | +# information see the Sentry documentation. |
| 5 | + |
| 6 | +############### |
| 7 | +# Mail Server # |
| 8 | +############### |
| 9 | + |
| 10 | +mail.backend: '{{ salt["pillar.get"]("sentry:config:email:backend", "smtp") }}' # Use dummy if you want to disable email entirely |
| 11 | +mail.host: '{{ salt["pillar.get"]("sentry:config:email:host", "smtp") }}' |
| 12 | +mail.port: {{ salt["pillar.get"]("sentry:config:email:port", "25") }} |
| 13 | +mail.username: '{{ salt["pillar.get"]("sentry:config:email:username", "") }}' |
| 14 | +mail.password: '{{ salt["pillar.get"]("sentry:config:email:password", "") }}' |
| 15 | +# NOTE: `mail.use-tls` and `mail.use-ssl` are mutually exclusive and should not |
| 16 | +# appear at the same time. Only uncomment one of them. |
| 17 | +mail.use-tls: {{ salt["pillar.get"]("sentry:config:email:tls", "false") }} |
| 18 | +#mail.use-ssl: {{ salt["pillar.get"]("sentry:config:email:ssl", "false") }} |
| 19 | + |
| 20 | +# NOTE: The following 2 configs (mail.from and mail.list-namespace) are set |
| 21 | +# through SENTRY_MAIL_HOST in sentry.conf.py so remove those first if |
| 22 | +# you want your values in this file to be effective! |
| 23 | + |
| 24 | +# The email address to send on behalf of |
| 25 | +# mail.from: 'root@localhost' or ... |
| 26 | +mail.from: '{{ salt["pillar.get"]("sentry:config:email:from", "root@localhost") }}' |
| 27 | + |
| 28 | +# The mailing list namespace for emails sent by this Sentry server. |
| 29 | +# This should be a domain you own (often the same domain as the domain |
| 30 | +# part of the `mail.from` configuration parameter value) or `localhost`. |
| 31 | +# mail.list-namespace: 'localhost' |
| 32 | + |
| 33 | +# If you'd like to configure email replies, enable this. |
| 34 | +mail.enable-replies: {{ salt["pillar.get"]("sentry:config:email:enable_replies", False) }} |
| 35 | + |
| 36 | +# When email-replies are enabled, this value is used in the Reply-To header |
| 37 | +mail.reply-hostname: '{{ salt["pillar.get"]("sentry:config:email:reply_hostname", "") }}' |
| 38 | + |
| 39 | +# If you're using mailgun for inbound mail, set your API key and configure a |
| 40 | +# route to forward to /api/hooks/mailgun/inbound/ |
| 41 | +# Also don't forget to set `mail.enable-replies: true` above. |
| 42 | +# mail.mailgun-api-key: '' |
| 43 | + |
| 44 | +################### |
| 45 | +# System Settings # |
| 46 | +################### |
| 47 | + |
| 48 | +# This is the main URL prefix where Sentry can be accessed. |
| 49 | +# Sentry will use this to create links to its different parts of the web UI. |
| 50 | +# This is most helpful if you are using an external reverse proxy. |
| 51 | +system.url-prefix: '{{ salt["pillar.get"]("sentry:url") }}' |
| 52 | + |
| 53 | +# Most of the time, this should NOT be changed. It's used for communication |
| 54 | +# between containers. `web` is the container's name, and `9000` is the |
| 55 | +# default port opened by the Sentry backend (this is NOT the public port). |
| 56 | +# |
| 57 | +# If you want to change the publicly exposed domain or port, you should change |
| 58 | +# `system.url-prefix` above instead, along with `SENTRY_BIND` in `.env` file. |
| 59 | +# Also see https://develop.sentry.dev/self-hosted/#productionalizing. |
| 60 | +system.internal-url-prefix: 'http://web:9000' |
| 61 | + |
| 62 | +# If this file ever becomes compromised, it's important to generate a new key. |
| 63 | +# Changing this value will result in all current sessions being invalidated. |
| 64 | +# A new key can be generated with `$ sentry config generate-secret-key` |
| 65 | +# |
| 66 | +# If you are using SENTRY_SYSTEM_SECRET_KEY that is being set on your `.env` or `.env.custom` file, |
| 67 | +# you should remove this line below as it won't be used anyway. |
| 68 | +system.secret-key: '{{ salt["pillar.get"]("sentry:secret") }}' |
| 69 | + |
| 70 | +# The ``redis.clusters`` setting is used, unsurprisingly, to configure Redis |
| 71 | +# clusters. These clusters can be then referred to by name when configuring |
| 72 | +# backends such as the cache, digests, or TSDB backend. |
| 73 | +# redis.clusters: |
| 74 | +# default: |
| 75 | +# hosts: |
| 76 | +# 0: |
| 77 | +# host: 127.0.0.1 |
| 78 | +# port: 6379 |
| 79 | + |
| 80 | +system.admin-email: '{{ salt["pillar.get"]("sentry:admin_email") }}' |
| 81 | + |
| 82 | +################ |
| 83 | +# File storage # |
| 84 | +################ |
| 85 | + |
| 86 | +# Uploaded media uses these `filestore` settings. The available |
| 87 | +# backends are either `filesystem` or `s3`. |
| 88 | + |
| 89 | +filestore.backend: 'filesystem' |
| 90 | +filestore.options: |
| 91 | + location: '/data/files' |
| 92 | +dsym.cache-path: '/data/dsym-cache' |
| 93 | +releasefile.cache-path: '/data/releasefile-cache' |
| 94 | + |
| 95 | +# filestore.backend: 's3' |
| 96 | +# filestore.options: |
| 97 | +# access_key: 'AKIXXXXXX' |
| 98 | +# secret_key: 'XXXXXXX' |
| 99 | +# bucket_name: 's3-bucket-name' |
| 100 | + |
| 101 | +filestore.profiles-backend: 's3' |
| 102 | +filestore.profiles-options: |
| 103 | + bucket_acl: "private" |
| 104 | + default_acl: "private" |
| 105 | + access_key: "sentry" |
| 106 | + secret_key: "sentry" |
| 107 | + bucket_name: "profiles" |
| 108 | + region_name: "us-east-1" |
| 109 | + endpoint_url: "http://seaweedfs:8333" |
| 110 | + addressing_style: "path" |
| 111 | + signature_version: "s3v4" |
| 112 | + |
| 113 | +symbolicator.enabled: true |
| 114 | +symbolicator.options: |
| 115 | + url: "http://symbolicator:3021" |
| 116 | + |
| 117 | +transaction-events.force-disable-internal-project: true |
| 118 | + |
| 119 | +###################### |
| 120 | +# GitHub Integration # |
| 121 | +###################### |
| 122 | + |
| 123 | +# Refer to https://develop.sentry.dev/integrations/github/ for setup instructions. |
| 124 | + |
| 125 | +# github-login.extended-permissions: ['repo'] |
| 126 | +# github-app.id: GITHUB_APP_ID |
| 127 | +# github-app.name: 'GITHUB_APP_NAME' |
| 128 | +# github-app.webhook-secret: 'GITHUB_WEBHOOK_SECRET' # Use only if configured in GitHub |
| 129 | +# github-app.client-id: 'GITHUB_CLIENT_ID' |
| 130 | +# github-app.client-secret: 'GITHUB_CLIENT_SECRET' |
| 131 | +# github-app.private-key: | |
| 132 | +# -----BEGIN RSA PRIVATE KEY----- |
| 133 | +# privatekeyprivatekeyprivatekeyprivatekey |
| 134 | +# privatekeyprivatekeyprivatekeyprivatekey |
| 135 | +# privatekeyprivatekeyprivatekeyprivatekey |
| 136 | +# privatekeyprivatekeyprivatekeyprivatekey |
| 137 | +# privatekeyprivatekeyprivatekeyprivatekey |
| 138 | +# -----END RSA PRIVATE KEY----- |
| 139 | + |
| 140 | +##################### |
| 141 | +# Slack Integration # |
| 142 | +##################### |
| 143 | + |
| 144 | +# Refer to https://develop.sentry.dev/integrations/slack/ for setup instructions. |
| 145 | + |
| 146 | +# slack.client-id: <'client id'> |
| 147 | +# slack.client-secret: <client secret> |
| 148 | +# slack.signing-secret: <signing secret> |
| 149 | +## If legacy-app is True use verification-token instead of signing-secret |
| 150 | +# slack.verification-token: <verification token> |
| 151 | + |
| 152 | + |
| 153 | +####################### |
| 154 | +# Discord Integration # |
| 155 | +####################### |
| 156 | + |
| 157 | +# Refer to https://develop.sentry.dev/integrations/discord/ |
| 158 | + |
| 159 | +# discord.application-id: "<application id>" |
| 160 | +# discord.public-key: "<public key>" |
| 161 | +# discord.client-secret: "<client secret>" |
| 162 | +# discord.bot-token: "<bot token>" |
| 163 | + |
| 164 | +{% if "google_auth" in pillar["sentry"]["config"] -%} |
| 165 | +############### |
| 166 | +# Google Auth # |
| 167 | +############### |
| 168 | + |
| 169 | +# Refer to https://develop.sentry.dev/self-hosted/sso/#google-auth |
| 170 | + |
| 171 | +auth-google.client-id: {{ pillar["sentry"]["config"]["google_auth"]["client_id"] }} |
| 172 | +auth-google.client-secret: {{ pillar["sentry"]["config"]["google_auth"]["client_secret"] }} |
| 173 | +{%- endif %} |
0 commit comments