Archived docs. ESS 2.0 has reached end of life.

Service Configurations Summary#

The following combines ESS’ configuration options and their default value (if any) in a single table.

For details of the configuration options, see the individual services pages.

Service

Configuration

Default

Access Grant

INRUPT_VC_ISSUER

https://vc.<ESS DOMAIN>

Access Grant

QUARKUS_MONGODB_CONNECTION_STRING

Access Grant

QUARKUS_DATASOURCE_JDBC_URL

Access Grant

QUARKUS_DATASOURCE_USERNAME

Access Grant

QUARKUS_DATASOURCE_PASSWORD

Access Grant

QUARKUS_LOG_LEVEL

INFO

Access Grant

INRUPT_JSONLD_CACHE_HOURS

6

Access Grant

INRUPT_JSONLD_CACHE_SIZE

100

Access Grant

INRUPT_JSONLD_CONTEXT_ALLOW_LIST

Access Grant

INRUPT_JSONLD_CONTEXT_DENY_LIST

Access Grant

INRUPT_JSONLD_HTTP_MAX_REDIRECTS

10

Access Grant

INRUPT_JSONLD_HTTP_TIMEOUT

10

Access Grant

INRUPT_VC_CLIENT_ID_ALLOW_LIST

Access Grant

INRUPT_VC_ISSUER_NAME

Access Grant

INRUPT_VC_ISSUER_DESCRIPTION

Access Grant

INRUPT_VC_ISSUER_TOS

Access Grant

INRUPT_VC_MONGODB_DATABASE

vc

Access Grant

INRUPT_JWT_ISSUER_ALLOW_LIST

Access Grant

INRUPT_JWT_ISSUER_DENY_LIST

Access Grant

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256

Access Grant

INRUPT_VC_MAX_DURATION

Access Grant

INRUPT_VC_STATUS_LIST_ID_LENGTH

4

Access Grant

INRUPT_VC_QUERY_AGENT_PATHS

/credentialSubject/providedConsent/isProvidedTo,/credentialSubject/providedConsent/isProvidedToPerson,/credentialSubject/providedConsent/isProvidedToController

Access Grant

INRUPT_VC_QUERY_PROPERTY_LIMIT

16

Access Grant

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

Access Grant

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

Auditing

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

Auditing

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

Auditing

QUARKUS_HTTP_PORT

8080

Auditing

QUARKUS_LOG_LEVEL

INFO

Auditing

INRUPT_AUDIT_SYSLOG_HOST

localhost

Auditing

INRUPT_AUDIT_SYSLOG_PORT

514

Auditing

INRUPT_AUDIT_SYSLOG_PROTOCOL

TCP

Auditing

INRUPT_AUDIT_SENTINEL_WORKSPACE_ID

Auditing

INRUPT_AUDIT_SENTINEL_SHARED_KEY

Auditing

INRUPT_AUDIT_SENTINEL_API_VERSION

Auditing

INRUPT_AUDIT_SENTINEL_LOG_TYPE

Audit

Auditing

QUARKUS_REST_CLIENT_SENTINEL_API_URL

Authorization

INRUPT_AUTHORIZATION_BASE_URL

Authorization

INRUPT_AUTHORIZATION_CLIENT_ID_ALLOW_LIST

https://permissions.{ESS_DOMAIN}/app/id,https://podbrowser.inrupt.com/api/app

Authorization

INRUPT_AUTHORIZATION_MAX_POD_COUNT

10

Authorization

INRUPT_JWT_ISSUER_ALLOW_LIST

Authorization

INRUPT_JWT_ISSUER_DENY_LIST

Authorization

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256

Authorization

QUARKUS_LOG_LEVEL

INFO

Authorization

QUARKUS_GRPC_SERVER_PORT

Authorization

QUARKUS_GRPC_SERVER_SSL_CERTIFICATE

Authorization

QUARKUS_GRPC_SERVER_SSL_KEY

Authorization

QUARKUS_GRPC_SERVER_SSL_TRUST_STORE

Authorization

QUARKUS_GRPC_SERVER_SSL_TRUST_STORE_PASSWORD

Authorization

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

Authorization

MP_MESSAGING_OUTGOING_SOLIDACCESSCONTROLRESOURCE_VALUE_SERIALIZER

org.apache.kafka.common.serialization.StringSerializer

Authorization

INRUPT_KAFKA_SOLIDACCESSCONTROLRESOURCE_CIPHER_PASSWORD

Authorization

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

Notification Gateway

INRUPT_NOTIFICATION_WS_ENDPOINT

Notification Gateway

INRUPT_JWT_ISSUER_ALLOW_LIST

Notification Gateway

INRUPT_JWT_ISSUER_DENY_LIST

Notification Gateway

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256

OpenID Provider

INRUPT_OPENID_ISSUER

OpenID Provider

INRUPT_OPENID_WEBID_HOST

OpenID Provider

INRUPT_OPENID_WEBID_PATH

OpenID Provider

INRUPT_OPENID_WEBID_FRAGMENT

OpenID Provider

QUARKUS_OIDC_AUTH_SERVER_URL

OpenID Provider

QUARKUS_OIDC_CLIENT_ID

OpenID Provider

QUARKUS_OIDC_CREDENTIALS_SECRET

OpenID Provider

SMALLRYE_JWT_SIGN_KEY_LOCATION

OpenID Provider

COM_INRUPT_OPENID_CDI_DEFAULTCLIENTRESOLVERSERVICE_FETCHREMOTECLIENT_TIMEOUT_VALUE

10

OpenID Provider

COM_INRUPT_OPENID_CDI_DEFAULTCLIENTRESOLVERSERVICE_FETCHREMOTECLIENT_TIMEOUT_UNIT

SECONDS

OpenID Provider

QUARKUS_LOG_LEVEL

INFO

OpenID Provider

INRUPT_OPENID_ACCESS_TOKEN_SUB

false

OpenID Provider

INRUPT_OPENID_APPROVAL_TEMPLATE_LOCATION

OpenID Provider

INRUPT_OPENID_CATALOG_DISABLED

OpenID Provider

INRUPT_OPENID_CLIENT_DOMAIN_ALLOWLIST

OpenID Provider

INRUPT_OPENID_CLIENT_DOMAIN_DENYLIST

OpenID Provider

INRUPT_OPENID_CUSTOM_CLAIMS

OpenID Provider

INRUPT_OPENID_JWT_ALTERNATIVE_PUBLIC_KEY_LOCATIONS

OpenID Provider

INRUPT_OPENID_LOGOUT_URL

OpenID Provider

INRUPT_OPENID_SCHEDULED_TASKS

300s (every 300 seconds)

OpenID Provider

INRUPT_OPENID_SCOPES

OpenID Provider

INRUPT_OPENID_USER_CLAIM_NAME

OpenID Provider

INRUPT_OPENID_WEBHOOK_POST_CONSENT_URL

OpenID Provider

INRUPT_OPENID_WEBHOOK_POST_CONSENT_AUTH

OpenID Provider

INRUPT_OPENID_WEBID_SUBJECT_PREFIX

OpenID Provider

INRUPT_OPENID_WEBID_REENCODE_BASE64

false

OpenID Provider

INRUPT_OPENID_WEBID_TRIM_BASE64_PADDING

false

OpenID Provider

QUARKUS_OIDC_AUTHENTICATION_SCOPES

OpenID Provider

QUARKUS_DATASOURCE_JDBC_URL

OpenID Provider

QUARKUS_DATASOURCE_USERNAME

OpenID Provider

QUARKUS_DATASOURCE_PASSWORD

OpenID Provider

QUARKUS_OIDC_LOGOUT_PATH

OpenID Provider

QUARKUS_OIDC_LOGOUT_POST_LOGOUT_PATH

OpenID Provider

SMALLRYE_JWT_NEW_TOKEN_LIFESPAN

300

OpenID Provider

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

OpenID Provider

MP_MESSAGING_OUTGOING_AUDITV1OUT_BOOTSTRAP_SERVERS

localhost:9092

OpenID Provider

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

Pod

INRUPT_STORAGE_MAX_PODS_PER_OWNER

10

Pod

INRUPT_STORAGE_HTTP_BASE_URL

Pod

INRUPT_STORAGE_HTTP_CACHE_CONTROL_MAX_AGE

0

Pod

INRUPT_AUTHORIZATION_CLIENT_ID_ALLOW_LIST

https://permissions.{ESS_DOMAIN}/app/id,https://podbrowser.inrupt.com/api/app

Pod

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

Pod

MP_MESSAGING_OUTGOING_SOLIDRESOURCE_BOOTSTRAP_SERVERS

localhost:9092

Pod

MP_MESSAGING_OUTGOING_SOLIDRESOURCE_VALUE_SERIALIZER

org.apache.kafka.common.serialization.StringSerializer

Pod

INRUPT_KAFKA_SOLIDRESOURCE_CIPHER_PASSWORD

Pod

MP_MESSAGING_OUTGOING_AUDITV1OUT_BOOTSTRAP_SERVERS

localhost:9092

Pod

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

Pod

INRUPT_JWT_ISSUER_ALLOW_LIST

Pod

INRUPT_JWT_ISSUER_DENY_LIST

Pod

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256

Pod

QUARKUS_LOG_LEVEL

INFO

Pod

INRUPT_AUTHZ_AS_URI

Pod

INRUPT_AUTHZ_UMA_ANONYMOUS_ENABLED

false

Pod

INRUPT_AUTHZ_UMA_OIDC_ENABLED

false

Pod

SMALLRYE_JWT_ENCRYPT_KEY_LOCATION

Pod

SMALLRYE_JWT_ENCRYPT_KEY_ID

Pod

INRUPT_STORAGE_S3_BUCKET_NAME

inrupt.ess.storage

Pod

QUARKUS_S3_ENDPOINT_OVERRIDE

Pod

QUARKUS_S3_AWS_REGION

Pod

QUARKUS_S3_AWS_CREDENTIALS_STATIC_PROVIDER_ACCESS_KEY_ID

Pod

QUARKUS_S3_AWS_CREDENTIALS_STATIC_PROVIDER_SECRET_ACCESS_KEY

Pod

QUARKUS_OPENTELEMETRY_TRACER_EXPORTER_OTLP_ENABLED

false

Pod

QUARKUS_OPENTELEMETRY_TRACER_EXPORTER_OTLP_ENDPOINT

Query

INRUPT_AUTHZ_AS_URI

Query

INRUPT_FRAGMENTS_PAGE_SIZE

10

Query

QUARKUS_LOG_LEVEL

INFO

Query

INRUPT_JWT_ISSUER_ALLOW_LIST

Query

INRUPT_JWT_ISSUER_DENY_LIST

Query

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256

Query

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

Query

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

Query

INRUPT_AUTHZ_AS_URI

Query

INRUPT_FRAGMENTS_INGEST_IGNORE_ERRORS

false

Start

INRUPT_PROVISION_HTTP_BASE_URL

Start

INRUPT_WEBID_HTTP_BASE_URL

Start

QUARKUS_LOG_LEVEL

INFO

Start

QUARKUS_OIDC_AUTH_SERVER_URL

Start

QUARKUS_OIDC_CLIENT_ID

https://start.{ESS DOMAIN}/app/id

Start

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

UMA

INRUPT_UMA_ISSUER

UMA

INRUPT_UMA_VC_VERIFIER

UMA

SMALLRYE_JWT_SIGN_KEY_LOCATION

UMA

QUARKUS_GRPC_CLIENTS_AUTHZ_HOST

UMA

QUARKUS_GRPC_CLIENTS_AUTHZ_PORT

UMA

QUARKUS_LOG_LEVEL

INFO

UMA

INRUPT_UMA_DPOP_ALGORITHMS

ES256, RS256

UMA

SMALLRYE_JWT_NEW_TOKEN_LIFESPAN

300

UMA

INRUPT_VC_ISSUER

UMA

INRUPT_JWT_ISSUER_ALLOW_LIST

UMA

INRUPT_JWT_ISSUER_DENY_LIST

UMA

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256

UMA

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

UMA

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

WebID

INRUPT_PROVISION_HTTP_BASE_URL

WebID

INRUPT_START_CLIENT_ID

https://start.{ESS_DOMAIN}/app/id

WebID

INRUPT_WEBID_CLIENT_ID

https://id.{ESS_DOMAIN}/app/id

WebID

INRUPT_WEBID_ALLOWED_CLIENT_IDS

INRUPT_START_CLIENT_ID, INRUPT_WEBID_CLIENT_ID

WebID

INRUPT_WEBID_ISSUER

https://openid.{ESS DOMAIN}

WebID

INRUPT_JWT_ISSUER_ALLOW_LIST

WebID

QUARKUS_DATASOURCE_JDBC_URL

WebID

QUARKUS_DATASOURCE_USERNAME

WebID

QUARKUS_DATASOURCE_PASSWORD

WebID

QUARKUS_LOG_LEVEL

INFO

WebID

INRUPT_WEBID_CLIENT_NAME

Inrupt WebID Manager

WebID

INRUPT_WEBID_CLIENT_LOGO_URI

https://{ESS DOMAIN}/logo.png

WebID

INRUPT_WEBID_CLIENT_TOS_URI

WebID

INRUPT_WEBID_CLIENT_CONTACTS

WebID

INRUPT_JWT_ISSUER_DENY_LIST

WebID

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256

WebID

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

WebID

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

WebSocket

INRUPT_WEBSOCKET_BASE_URI

WebSocket

SMALLRYE_JWT_SIGN_KEY_LOCATION

WebSocket

QUARKUS_GRPC_CLIENTS_AUTHZ_HOST

WebSocket

KAFKA_BOOTSTRAP_SERVERS

localhost:9092

WebSocket

MP_MESSAGING_INCOMING_SOLIDRESOURCE_SSL_TRUSTSTORE_LOCATION

WebSocket

MP_MESSAGING_INCOMING_SOLIDRESOURCE_SSL_TRUSTSTORE_PASSWORD

WebSocket

MP_MESSAGING_INCOMING_SOLIDRESOURCE_VALUE_DESERIALIZER

org.apache.kafka.common.serialization.StringDeserializer

WebSocket

INRUPT_KAFKA_SOLIDRESOURCE_CIPHER_PASSWORD

WebSocket

INRUPT_KAFKA_AUDITV1EVENTSENCRYPTED_CIPHER_PASSWORD

WebSocket

MP_MESSAGING_OUTGOING_AUDITV1OUT_BOOTSTRAP_SERVERS

localhost:9092

WebSocket

QUARKUS_LOG_LEVEL

INFO

WebSocket

INRUPT_JWT_ISSUER_ALLOW_LIST

WebSocket

INRUPT_JWT_ISSUER_DENY_LIST

WebSocket

INRUPT_JWT_ALLOWED_SIGNATURE_ALGORITHMS

ES256, RS256