More security compliance modifications
[ta/infra-ansible.git] / roles / redisconfigure / templates / redis.conf.j2
1 bind 0.0.0.0
2 protected-mode yes
3 port 6379
4 tcp-backlog 511
5 timeout 0
6 tcp-keepalive 300
7 daemonize no
8 supervised no
9 pidfile /var/run/redis_6379.pid
10 loglevel notice
11 logfile /var/log/redis/redis.log
12 databases 16
13 save 900 1
14 save 300 10
15 save 60 10000
16 stop-writes-on-bgsave-error yes
17 rdbcompression yes
18 rdbchecksum yes
19 dbfilename dump.rdb
20 dir /var/lib/redis
21 {% if hostname != installation_controller %}
22 slaveof {{ internal_lb_vip_address }} 6379
23 {% endif %}
24 slave-serve-stale-data yes
25 slave-read-only yes
26 repl-diskless-sync no
27 repl-diskless-sync-delay 5
28 repl-disable-tcp-nodelay no
29 slave-priority 100
30 appendonly no
31 appendfilename "appendonly.aof"
32 appendfsync everysec
33 no-appendfsync-on-rewrite no
34 auto-aof-rewrite-percentage 100
35 auto-aof-rewrite-min-size 64mb
36 aof-load-truncated yes
37 lua-time-limit 5000
38 slowlog-log-slower-than 10000
39 slowlog-max-len 128
40 latency-monitor-threshold 0
41 notify-keyspace-events ""
42 hash-max-ziplist-entries 512
43 hash-max-ziplist-value 64
44 list-max-ziplist-size -2
45 list-compress-depth 0
46 set-max-intset-entries 512
47 zset-max-ziplist-entries 128
48 zset-max-ziplist-value 64
49 hll-sparse-max-bytes 3000
50 activerehashing yes
51 client-output-buffer-limit normal 0 0 0
52 client-output-buffer-limit slave 256mb 64mb 60
53 client-output-buffer-limit pubsub 32mb 8mb 60
54 hz 10
55 aof-rewrite-incremental-fsync yes
56 requirepass {{ redis_password }}
57 masterauth {{ redis_password }}