"""Gunicorn config""" import os import pwd from hashlib import sha512 from multiprocessing import cpu_count import structlog from kubernetes.config.incluster_config import SERVICE_HOST_ENV_NAME from authentik import get_full_version from authentik.lib.config import CONFIG from authentik.lib.utils.http import get_http_session from authentik.lib.utils.reflection import get_env bind = "127.0.0.1:8000" try: pwd.getpwnam("authentik") user = "authentik" group = "authentik" except KeyError: pass worker_class = "lifecycle.worker.DjangoUvicornWorker" # Docker containers don't have /tmp as tmpfs if os.path.exists("/dev/shm"): # nosec worker_tmp_dir = "/dev/shm" # nosec os.environ.setdefault("DJANGO_SETTINGS_MODULE", "authentik.root.settings") max_requests = 1000 max_requests_jitter = 50 logconfig_dict = { "version": 1, "disable_existing_loggers": False, "formatters": { "json_formatter": { "()": structlog.stdlib.ProcessorFormatter, "processor": structlog.processors.JSONRenderer(), "foreign_pre_chain": [ structlog.stdlib.add_log_level, structlog.stdlib.add_logger_name, structlog.processors.TimeStamper(), structlog.processors.StackInfoRenderer(), ], } }, "handlers": { "error_console": { "class": "logging.StreamHandler", "formatter": "json_formatter", }, "console": {"class": "logging.StreamHandler", "formatter": "json_formatter"}, }, "loggers": { "uvicorn": {"handlers": ["console"], "level": "WARNING", "propagate": False}, "gunicorn": {"handlers": ["console"], "level": "INFO", "propagate": False}, }, } # if we're running in kubernetes, use fixed workers because we can scale with more pods # otherwise (assume docker-compose), use as much as we can if SERVICE_HOST_ENV_NAME in os.environ: default_workers = 2 else: default_workers = max(cpu_count() * 0.25, 1) + 1 # Minimum of 2 workers workers = int(os.environ.get("WORKERS", default_workers)) threads = int(os.environ.get("THREADS", 4)) # pylint: disable=unused-argument def worker_exit(server, worker): """Remove pid dbs when worker is shutdown""" from prometheus_client import multiprocess multiprocess.mark_process_dead(worker.pid) if not CONFIG.y_bool("disable_startup_analytics", False): env = get_env() should_send = env not in ["dev", "ci"] if should_send: try: get_http_session().post( "https://goauthentik.io/api/event", json={ "domain": "authentik", "name": "pageview", "referrer": get_full_version(), "url": ( f"http://localhost/{env}?utm_source={get_full_version()}&utm_medium={env}" ), }, headers={ "User-Agent": sha512(str(CONFIG.y("secret_key")).encode("ascii")).hexdigest()[ :16 ], "Content-Type": "application/json", }, timeout=5, ) # pylint: disable=bare-except except: # nosec pass