Configuration

# These two are equivalent to setting [http].port = 5081 and [store.meta].dsn = ...
export MS_HTTP.PORT=5081
export MS_STORE.META.DSN="postgres://user:pass@db:5432/molesignal"

[node]
# Composable roles: standalone / router / ingester / querier / compactor / alert_manager
# `standalone` enables every role in one process.
roles = ["standalone"]
# Unique node id; left empty, a KSUID is generated at startup.
id = ""

[http]
bind = "0.0.0.0"
port = 5080
gzip = true              # disable behind a reverse proxy

[grpc]
bind = "0.0.0.0"
port = 5082
max_message_size_mb = 32

[http.tls]
enabled = false              # master switch; when false, plain HTTP only
plain_port = 80              # HTTP-01 challenge + 80→443 redirect
port = 443                   # rustls serving port
acme_directory = "production" # production | staging | a custom CA URL (e.g. Pebble)
account_email = ""           # required by Let's Encrypt
key_storage_dir = "/var/lib/molesignal/acme"

[store.meta]
backend = "postgres"
dsn = "postgres://molesignal:molesignal@localhost:5432/molesignal"
max_connections = 16

[store.object]
# Columnar data landing: local | s3 | azure | gcs
backend = "local"
root = "./data/objects"
# For S3 / S3-compatible (MinIO, R2, Aliyun OSS):
# bucket = "molesignal"
# region = "us-east-1"
# endpoint = ""            # e.g. http://localhost:9000 for MinIO
# access_key = ""
# secret_key = ""
# Credentials resolve in order: env > credentials_file > inline TOML.
# credentials_file = "/etc/molesignal/object-store.toml"

[telemetry]
log_level = "info"
log_format = "text"        # text | json
otlp_endpoint = ""         # empty → no trace export
metrics_enabled = true
log_output = "console"     # console | file
# log_directory = "logs"          # only when log_output = "file"
# log_rotation = "daily"          # minutely | hourly | daily | never
# log_max_files = 7

[functions]
# Opt-in JavaScript runtime. Requires the build feature
# `--features molesignal-bootstrap/js-runtime` as well.
js_runtime_enabled = false