1
+ #*****************************************************************
2
+ # Neo4j configuration
3
+ #
4
+ # For more details and a complete list of settings, please see
5
+ # https://neo4j.com/docs/operations-manual/current/reference/configuration-settings/
6
+ #*****************************************************************
7
+
8
+ # The name of the database to mount
9
+ #dbms.active_database=graph.db
10
+
11
+ # Paths of directories in the installation.
12
+ #dbms.directories.data=data
13
+ #dbms.directories.certificates=certificates
14
+ #dbms.directories.logs=logs
15
+ #dbms.directories.lib=lib
16
+ #dbms.directories.run=run
17
+
18
+ # This setting constrains all `LOAD CSV` import files to be under the `import` directory. Remove or comment it out to
19
+ # allow files to be loaded from anywhere in the filesystem; this introduces possible security problems. See the
20
+ # `LOAD CSV` section of the manual for details.
21
+ dbms.directories.import=import
22
+
23
+ # Whether requests to Neo4j are authenticated.
24
+ # To disable authentication, uncomment this line
25
+ #dbms.security.auth_enabled=false
26
+
27
+ # Enable this to be able to upgrade a store from an older version.
28
+ #dbms.allow_upgrade=true
29
+
30
+ # Java Heap Size: by default the Java heap size is dynamically
31
+ # calculated based on available system resources.
32
+ # Uncomment these lines to set specific initial and maximum
33
+ # heap size.
34
+
35
+ # The amount of memory to use for mapping the store files, in bytes (or
36
+ # kilobytes with the 'k' suffix, megabytes with 'm' and gigabytes with 'g').
37
+ # If Neo4j is running on a dedicated server, then it is generally recommended
38
+ # to leave about 2-4 gigabytes for the operating system, give the JVM enough
39
+ # heap to hold all your transaction state and query context, and then leave the
40
+ # rest for the page cache.
41
+ # The default page cache memory assumes the machine is dedicated to running
42
+ # Neo4j, and is heuristically set to 50% of RAM minus the max Java heap size.
43
+
44
+ #*****************************************************************
45
+ # Network connector configuration
46
+ #*****************************************************************
47
+
48
+ # With default configuration Neo4j only accepts local connections.
49
+ # To accept non-local connections, uncomment this line:
50
+
51
+ # You can also choose a specific network interface, and configure a non-default
52
+ # port for each connector, by setting their individual listen_address.
53
+
54
+ # The address at which this server can be reached by its clients. This may be the server's IP address or DNS name, or
55
+ # it may be the address of a reverse proxy which sits in front of the server. This setting may be overridden for
56
+ # individual connectors below.
57
+ #dbms.connectors.default_advertised_address=localhost
58
+
59
+ # You can also choose a specific advertised hostname or IP address, and
60
+ # configure an advertised port for each connector, by setting their
61
+ # individual advertised_address.
62
+
63
+ # Bolt connector
64
+ dbms.connector.bolt.enabled=true
65
+ #dbms.connector.bolt.tls_level=OPTIONAL
66
+
67
+ # HTTP Connector. There must be exactly one HTTP connector.
68
+ dbms.connector.http.enabled=true
69
+
70
+ # HTTPS Connector. There can be zero or one HTTPS connectors.
71
+ dbms.connector.https.enabled=true
72
+
73
+ # Number of Neo4j worker threads.
74
+ #dbms.threads.worker_count=
75
+
76
+ #*****************************************************************
77
+ # SSL system configuration
78
+ #*****************************************************************
79
+
80
+ # Names of the SSL policies to be used for the respective components.
81
+
82
+ # The legacy policy is a special policy which is not defined in
83
+ # the policy configuration section, but rather derives from
84
+ # dbms.directories.certificates and associated files
85
+ # (by default: neo4j.key and neo4j.cert). Its use will be deprecated.
86
+
87
+ # The policies to be used for connectors.
88
+ #
89
+ # N.B: Note that a connector must be configured to support/require
90
+ # SSL/TLS for the policy to actually be utilized.
91
+ #
92
+ # see: dbms.connector.*.tls_level
93
+
94
+ #bolt.ssl_policy=legacy
95
+ #https.ssl_policy=legacy
96
+
97
+ #*****************************************************************
98
+ # SSL policy configuration
99
+ #*****************************************************************
100
+
101
+ # Each policy is configured under a separate namespace, e.g.
102
+ # dbms.ssl.policy.<policyname>.*
103
+ #
104
+ # The example settings below are for a new policy named 'default'.
105
+
106
+ # The base directory for cryptographic objects. Each policy will by
107
+ # default look for its associated objects (keys, certificates, ...)
108
+ # under the base directory.
109
+ #
110
+ # Every such setting can be overriden using a full path to
111
+ # the respective object, but every policy will by default look
112
+ # for cryptographic objects in its base location.
113
+ #
114
+ # Mandatory setting
115
+
116
+ #dbms.ssl.policy.default.base_directory=certificates/default
117
+
118
+ # Allows the generation of a fresh private key and a self-signed
119
+ # certificate if none are found in the expected locations. It is
120
+ # recommended to turn this off again after keys have been generated.
121
+ #
122
+ # Keys should in general be generated and distributed offline
123
+ # by a trusted certificate authority (CA) and not by utilizing
124
+ # this mode.
125
+
126
+ #dbms.ssl.policy.default.allow_key_generation=false
127
+
128
+ # Enabling this makes it so that this policy ignores the contents
129
+ # of the trusted_dir and simply resorts to trusting everything.
130
+ #
131
+ # Use of this mode is discouraged. It would offer encryption but no security.
132
+
133
+ #dbms.ssl.policy.default.trust_all=false
134
+
135
+ # The private key for the default SSL policy. By default a file
136
+ # named private.key is expected under the base directory of the policy.
137
+ # It is mandatory that a key can be found or generated.
138
+
139
+ #dbms.ssl.policy.default.private_key=
140
+
141
+ # The private key for the default SSL policy. By default a file
142
+ # named public.crt is expected under the base directory of the policy.
143
+ # It is mandatory that a certificate can be found or generated.
144
+
145
+ #dbms.ssl.policy.default.public_certificate=
146
+
147
+ # The certificates of trusted parties. By default a directory named
148
+ # 'trusted' is expected under the base directory of the policy. It is
149
+ # mandatory to create the directory so that it exists, because it cannot
150
+ # be auto-created (for security purposes).
151
+ #
152
+ # To enforce client authentication client_auth must be set to 'require'!
153
+
154
+ #dbms.ssl.policy.default.trusted_dir=
155
+
156
+ # Client authentication setting. Values: none, optional, require
157
+ # The default is to require client authentication.
158
+ #
159
+ # Servers are always authenticated unless explicitly overridden
160
+ # using the trust_all setting. In a mutual authentication setup this
161
+ # should be kept at the default of require and trusted certificates
162
+ # must be installed in the trusted_dir.
163
+
164
+ #dbms.ssl.policy.default.client_auth=require
165
+
166
+ # A comma-separated list of allowed TLS versions.
167
+ # By default only TLSv1.2 is allowed.
168
+
169
+ #dbms.ssl.policy.default.tls_versions=
170
+
171
+ # A comma-separated list of allowed ciphers.
172
+ # The default ciphers are the defaults of the JVM platform.
173
+
174
+ #dbms.ssl.policy.default.ciphers=
175
+
176
+ #*****************************************************************
177
+ # Logging configuration
178
+ #*****************************************************************
179
+
180
+ # To enable HTTP logging, uncomment this line
181
+ #dbms.logs.http.enabled=true
182
+
183
+ # Number of HTTP logs to keep.
184
+ #dbms.logs.http.rotation.keep_number=5
185
+
186
+ # Size of each HTTP log that is kept.
187
+ #dbms.logs.http.rotation.size=20m
188
+
189
+ # To enable GC Logging, uncomment this line
190
+ #dbms.logs.gc.enabled=true
191
+
192
+ # GC Logging Options
193
+ # see http://docs.oracle.com/cd/E19957-01/819-0084-10/pt_tuningjava.html#wp57013 for more information.
194
+ #dbms.logs.gc.options=-XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+PrintGCApplicationStoppedTime -XX:+PrintPromotionFailure -XX:+PrintTenuringDistribution
195
+
196
+ # Number of GC logs to keep.
197
+ #dbms.logs.gc.rotation.keep_number=5
198
+
199
+ # Size of each GC log that is kept.
200
+ #dbms.logs.gc.rotation.size=20m
201
+
202
+ # Size threshold for rotation of the debug log. If set to zero then no rotation will occur. Accepts a binary suffix "k",
203
+ # "m" or "g".
204
+ #dbms.logs.debug.rotation.size=20m
205
+
206
+ # Maximum number of history files for the internal log.
207
+ #dbms.logs.debug.rotation.keep_number=7
208
+
209
+ #*****************************************************************
210
+ # Miscellaneous configuration
211
+ #*****************************************************************
212
+
213
+ # Enable this to specify a parser other than the default one.
214
+ #cypher.default_language_version=3.0
215
+
216
+ # Determines if Cypher will allow using file URLs when loading data using
217
+ # `LOAD CSV`. Setting this value to `false` will cause Neo4j to fail `LOAD CSV`
218
+ # clauses that load data from the file system.
219
+ #dbms.security.allow_csv_import_from_file_urls=true
220
+
221
+
222
+ # Value of the Access-Control-Allow-Origin header sent over any HTTP or HTTPS
223
+ # connector. This defaults to '*', which allows broadest compatibility. Note
224
+ # that any URI provided here limits HTTP/HTTPS access to that URI only.
225
+ #dbms.security.http_access_control_allow_origin=*
226
+
227
+ # Value of the HTTP Strict-Transport-Security (HSTS) response header. This header
228
+ # tells browsers that a webpage should only be accessed using HTTPS instead of HTTP.
229
+ # It is attached to every HTTPS response. Setting is not set by default so
230
+ # 'Strict-Transport-Security' header is not sent. Value is expected to contain
231
+ # dirictives like 'max-age', 'includeSubDomains' and 'preload'.
232
+ #dbms.security.http_strict_transport_security=
233
+
234
+ # Retention policy for transaction logs needed to perform recovery and backups.
235
+
236
+ # Enable a remote shell server which Neo4j Shell clients can log in to.
237
+ #dbms.shell.enabled=true
238
+ # The network interface IP the shell will listen on (use 0.0.0.0 for all interfaces).
239
+ #dbms.shell.host=127.0.0.1
240
+ # The port the shell will listen on, default is 1337.
241
+ #dbms.shell.port=1337
242
+
243
+ # Only allow read operations from this Neo4j instance. This mode still requires
244
+ # write access to the directory for lock purposes.
245
+ #dbms.read_only=false
246
+
247
+ # Comma separated list of JAX-RS packages containing JAX-RS resources, one
248
+ # package name for each mountpoint. The listed package names will be loaded
249
+ # under the mountpoints specified. Uncomment this line to mount the
250
+ # org.neo4j.examples.server.unmanaged.HelloWorldResource.java from
251
+ # neo4j-server-examples under /examples/unmanaged, resulting in a final URL of
252
+ # http://localhost:7474/examples/unmanaged/helloworld/{nodeId}
253
+ #dbms.unmanaged_extension_classes=org.neo4j.examples.server.unmanaged=/examples/unmanaged
254
+
255
+ #********************************************************************
256
+ # JVM Parameters
257
+ #********************************************************************
258
+
259
+ # G1GC generally strikes a good balance between throughput and tail
260
+ # latency, without too much tuning.
261
+ dbms.jvm.additional=-XX:+UseG1GC
262
+
263
+ # Have common exceptions keep producing stack traces, so they can be
264
+ # debugged regardless of how often logs are rotated.
265
+ dbms.jvm.additional=-XX:-OmitStackTraceInFastThrow
266
+
267
+ # Make sure that `initmemory` is not only allocated, but committed to
268
+ # the process, before starting the database. This reduces memory
269
+ # fragmentation, increasing the effectiveness of transparent huge
270
+ # pages. It also reduces the possibility of seeing performance drop
271
+ # due to heap-growing GC events, where a decrease in available page
272
+ # cache leads to an increase in mean IO response time.
273
+ # Try reducing the heap memory, if this flag degrades performance.
274
+ dbms.jvm.additional=-XX:+AlwaysPreTouch
275
+
276
+ # Trust that non-static final fields are really final.
277
+ # This allows more optimizations and improves overall performance.
278
+ # NOTE: Disable this if you use embedded mode, or have extensions or dependencies that may use reflection or
279
+ # serialization to change the value of final fields!
280
+ dbms.jvm.additional=-XX:+UnlockExperimentalVMOptions
281
+ dbms.jvm.additional=-XX:+TrustFinalNonStaticFields
282
+
283
+ # Disable explicit garbage collection, which is occasionally invoked by the JDK itself.
284
+ dbms.jvm.additional=-XX:+DisableExplicitGC
285
+
286
+ # Remote JMX monitoring, uncomment and adjust the following lines as needed. Absolute paths to jmx.access and
287
+ # jmx.password files are required.
288
+ # Also make sure to update the jmx.access and jmx.password files with appropriate permission roles and passwords,
289
+ # the shipped configuration contains only a read only role called 'monitor' with password 'Neo4j'.
290
+ # For more details, see: http://download.oracle.com/javase/8/docs/technotes/guides/management/agent.html
291
+ # On Unix based systems the jmx.password file needs to be owned by the user that will run the server,
292
+ # and have permissions set to 0600.
293
+ # For details on setting these file permissions on Windows see:
294
+ # http://docs.oracle.com/javase/8/docs/technotes/guides/management/security-windows.html
295
+ #dbms.jvm.additional=-Dcom.sun.management.jmxremote.port=3637
296
+ #dbms.jvm.additional=-Dcom.sun.management.jmxremote.authenticate=true
297
+ #dbms.jvm.additional=-Dcom.sun.management.jmxremote.ssl=false
298
+ #dbms.jvm.additional=-Dcom.sun.management.jmxremote.password.file=/absolute/path/to/conf/jmx.password
299
+ #dbms.jvm.additional=-Dcom.sun.management.jmxremote.access.file=/absolute/path/to/conf/jmx.access
300
+
301
+ # Some systems cannot discover host name automatically, and need this line configured:
302
+ #dbms.jvm.additional=-Djava.rmi.server.hostname=$THE_NEO4J_SERVER_HOSTNAME
303
+
304
+ # Expand Diffie Hellman (DH) key size from default 1024 to 2048 for DH-RSA cipher suites used in server TLS handshakes.
305
+ # This is to protect the server from any potential passive eavesdropping.
306
+ dbms.jvm.additional=-Djdk.tls.ephemeralDHKeySize=2048
307
+
308
+ # This mitigates a DDoS vector.
309
+ dbms.jvm.additional=-Djdk.tls.rejectClientInitiatedRenegotiation=true
310
+
311
+ #********************************************************************
312
+ # Wrapper Windows NT/2000/XP Service Properties
313
+ #********************************************************************
314
+ # WARNING - Do not modify any of these properties when an application
315
+ # using this configuration file has been installed as a service.
316
+ # Please uninstall the service before modifying this section. The
317
+ # service can then be reinstalled.
318
+
319
+ # Name of the service
320
+ dbms.windows_service_name=neo4j
321
+
322
+ #********************************************************************
323
+ # Other Neo4j system properties
324
+ #********************************************************************
325
+ apoc.jobs.scheduled.num_threads=1000
326
+ apoc.jobs.pool.num_threads=1000
327
+
328
+ dbms.connector.bolt.thread_pool_min_size=10
329
+ dbms.connector.bolt.thread_pool_max_size=2000
330
+ dbms.connector.bolt.thread_pool_keep_alive=10m
331
+
332
+ dbms.jvm.additional=-Dunsupported.dbms.udc.source=tarball
333
+ wrapper.java.additional=-Dneo4j.ext.udc.source=docker
334
+ #ha.host.data=8d63555a8da3:6001
335
+ #ha.host.coordination=8d63555a8da3:5001
336
+ dbms.tx_log.rotation.retention_policy=100M size
337
+ dbms.memory.pagecache.size=2G
338
+ dbms.memory.heap.max_size=4G
339
+ dbms.memory.heap.initial_size=4G
340
+ dbms.directories.plugins=/plugins
341
+ dbms.connectors.default_listen_address=0.0.0.0
342
+ dbms.connector.https.listen_address=0.0.0.0:7473
343
+ dbms.connector.http.listen_address=0.0.0.0:7474
344
+ dbms.connector.bolt.listen_address=0.0.0.0:7687
345
+ #causal_clustering.transaction_listen_address=0.0.0.0:6000
346
+ #causal_clustering.transaction_advertised_address=8d63555a8da3:6000
347
+ #causal_clustering.raft_listen_address=0.0.0.0:7000
348
+ #causal_clustering.raft_advertised_address=8d63555a8da3:7000
349
+ #causal_clustering.discovery_listen_address=0.0.0.0:5000
350
+ #causal_clustering.discovery_advertised_address=8d63555a8da3:5000
351
+ EDITION=community
0 commit comments