Created
November 18, 2022 17:25
-
-
Save liweinan/be2f9ad32e1f8806ebe4f4eee1051eee to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- standalone.xml 2022-11-19 01:25:16.000000000 +0800 | |
+++ standalone.xml.orig 2022-11-19 01:09:23.000000000 +0800 | |
@@ -6,17 +6,36 @@ | |
<extension module="org.jboss.as.connector"/> | |
<extension module="org.jboss.as.deployment-scanner"/> | |
<extension module="org.jboss.as.ee"/> | |
+ <extension module="org.jboss.as.ejb3"/> | |
<extension module="org.jboss.as.jaxrs"/> | |
+ <extension module="org.jboss.as.jdr"/> | |
<extension module="org.jboss.as.jmx"/> | |
<extension module="org.jboss.as.jpa"/> | |
+ <extension module="org.jboss.as.jsf"/> | |
<extension module="org.jboss.as.logging"/> | |
+ <extension module="org.jboss.as.mail"/> | |
<extension module="org.jboss.as.naming"/> | |
+ <extension module="org.jboss.as.pojo"/> | |
+ <extension module="org.jboss.as.remoting"/> | |
+ <extension module="org.jboss.as.sar"/> | |
<extension module="org.jboss.as.transactions"/> | |
+ <extension module="org.jboss.as.webservices"/> | |
<extension module="org.jboss.as.weld"/> | |
+ <extension module="org.wildfly.extension.batch.jberet"/> | |
<extension module="org.wildfly.extension.bean-validation"/> | |
+ <extension module="org.wildfly.extension.clustering.ejb"/> | |
+ <extension module="org.wildfly.extension.clustering.web"/> | |
<extension module="org.wildfly.extension.core-management"/> | |
+ <extension module="org.wildfly.extension.discovery"/> | |
+ <extension module="org.wildfly.extension.ee-security"/> | |
<extension module="org.wildfly.extension.elytron"/> | |
+ <extension module="org.wildfly.extension.elytron-oidc-client"/> | |
+ <extension module="org.wildfly.extension.health"/> | |
<extension module="org.wildfly.extension.io"/> | |
+ <extension module="org.wildfly.extension.metrics"/> | |
+ <extension module="org.wildfly.extension.microprofile.config-smallrye"/> | |
+ <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/> | |
+ <extension module="org.wildfly.extension.microprofile.opentracing-smallrye"/> | |
<extension module="org.wildfly.extension.request-controller"/> | |
<extension module="org.wildfly.extension.security.manager"/> | |
<extension module="org.wildfly.extension.undertow"/> | |
@@ -93,14 +112,53 @@ | |
<pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/> | |
</formatter> | |
</subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0"> | |
+ <default-job-repository name="in-memory"/> | |
+ <default-thread-pool name="batch"/> | |
+ <job-repository name="in-memory"> | |
+ <in-memory/> | |
+ </job-repository> | |
+ <thread-pool name="batch"> | |
+ <max-threads count="10"/> | |
+ <keepalive-time time="30" unit="seconds"/> | |
+ </thread-pool> | |
+ </subsystem> | |
<subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/> | |
<subsystem xmlns="urn:jboss:domain:core-management:1.0"/> | |
<subsystem xmlns="urn:jboss:domain:datasources:7.0"> | |
- <datasources/> | |
+ <datasources> | |
+ <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"> | |
+ <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url> | |
+ <driver>h2</driver> | |
+ <security> | |
+ <user-name>sa</user-name> | |
+ <password>sa</password> | |
+ </security> | |
+ </datasource> | |
+ <drivers> | |
+ <driver name="h2" module="com.h2database.h2"> | |
+ <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class> | |
+ </driver> | |
+ </drivers> | |
+ </datasources> | |
</subsystem> | |
<subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0"> | |
<deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/> | |
</subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:discovery:1.0"/> | |
+ <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default"> | |
+ <infinispan-bean-management name="default" cache-container="ejb" cache="passivation" max-active-beans="10000"/> | |
+ <local-client-mappings-registry/> | |
+ <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/> | |
+ <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/> | |
+ </subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:distributable-web:3.0" default-session-management="default" default-single-sign-on-management="default"> | |
+ <infinispan-session-management name="default" cache-container="web" granularity="SESSION"> | |
+ <local-affinity/> | |
+ </infinispan-session-management> | |
+ <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/> | |
+ <local-routing/> | |
+ </subsystem> | |
<subsystem xmlns="urn:jboss:domain:ee:6.0"> | |
<spec-descriptor-property-replacement>false</spec-descriptor-property-replacement> | |
<concurrent> | |
@@ -117,7 +175,51 @@ | |
<managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/> | |
</managed-scheduled-executor-services> | |
</concurrent> | |
- <default-bindings context-service="java:jboss/ee/concurrency/context/default" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/> | |
+ <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/> | |
+ </subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/> | |
+ <subsystem xmlns="urn:jboss:domain:ejb3:10.0"> | |
+ <session-bean> | |
+ <stateless> | |
+ <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/> | |
+ </stateless> | |
+ <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/> | |
+ <singleton default-access-timeout="5000"/> | |
+ </session-bean> | |
+ <pools> | |
+ <bean-instance-pools> | |
+ <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | |
+ <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/> | |
+ </bean-instance-pools> | |
+ </pools> | |
+ <caches> | |
+ <simple-cache name="simple"/> | |
+ <distributable-cache name="distributable"/> | |
+ </caches> | |
+ <async thread-pool-name="default"/> | |
+ <timer-service thread-pool-name="default" default-data-store="default-file-store"> | |
+ <data-stores> | |
+ <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/> | |
+ </data-stores> | |
+ </timer-service> | |
+ <remote cluster="ejb" connectors="http-remoting-connector" thread-pool-name="default"> | |
+ <channel-creation-options> | |
+ <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/> | |
+ </channel-creation-options> | |
+ </remote> | |
+ <thread-pools> | |
+ <thread-pool name="default"> | |
+ <max-threads count="10"/> | |
+ <keepalive-time time="60" unit="seconds"/> | |
+ </thread-pool> | |
+ </thread-pools> | |
+ <default-security-domain value="other"/> | |
+ <application-security-domains> | |
+ <application-security-domain name="other" security-domain="ApplicationDomain"/> | |
+ </application-security-domains> | |
+ <default-missing-method-permissions-deny-access value="true"/> | |
+ <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/> | |
+ <log-system-exceptions value="true"/> | |
</subsystem> | |
<subsystem xmlns="urn:wildfly:elytron:16.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto"> | |
<providers> | |
@@ -132,14 +234,14 @@ | |
<file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/> | |
</audit-logging> | |
<security-domains> | |
- <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper"> | |
- <realm name="ApplicationRealm" role-decoder="groups-to-roles"/> | |
- <realm name="local"/> | |
- </security-domain> | |
<security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper"> | |
<realm name="ManagementRealm" role-decoder="groups-to-roles"/> | |
<realm name="local" role-mapper="super-user-mapper"/> | |
</security-domain> | |
+ <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper"> | |
+ <realm name="ApplicationRealm" role-decoder="groups-to-roles"/> | |
+ <realm name="local"/> | |
+ </security-domain> | |
</security-domains> | |
<security-realms> | |
<identity-realm name="local" identity="$local"/> | |
@@ -174,7 +276,9 @@ | |
<permission class-name="org.wildfly.security.auth.permission.LoginPermission"/> | |
</permission-set> | |
<permission-set name="default-permissions"> | |
+ <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/> | |
<permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/> | |
+ <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/> | |
</permission-set> | |
</permission-sets> | |
<http> | |
@@ -185,22 +289,29 @@ | |
</mechanism> | |
</mechanism-configuration> | |
</http-authentication-factory> | |
+ <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global"> | |
+ <mechanism-configuration> | |
+ <mechanism mechanism-name="BASIC"> | |
+ <mechanism-realm realm-name="ApplicationRealm"/> | |
+ </mechanism> | |
+ </mechanism-configuration> | |
+ </http-authentication-factory> | |
<provider-http-server-mechanism-factory name="global"/> | |
</http> | |
<sasl> | |
- <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain"> | |
+ <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain"> | |
<mechanism-configuration> | |
<mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | |
<mechanism mechanism-name="DIGEST-MD5"> | |
- <mechanism-realm realm-name="ApplicationRealm"/> | |
+ <mechanism-realm realm-name="ManagementRealm"/> | |
</mechanism> | |
</mechanism-configuration> | |
</sasl-authentication-factory> | |
- <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain"> | |
+ <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain"> | |
<mechanism-configuration> | |
<mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/> | |
<mechanism mechanism-name="DIGEST-MD5"> | |
- <mechanism-realm realm-name="ManagementRealm"/> | |
+ <mechanism-realm realm-name="ApplicationRealm"/> | |
</mechanism> | |
</mechanism-configuration> | |
</sasl-authentication-factory> | |
@@ -235,7 +346,41 @@ | |
</server-ssl-contexts> | |
</tls> | |
</subsystem> | |
+ <subsystem xmlns="urn:wildfly:elytron-oidc-client:1.0"/> | |
+ <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/> | |
<subsystem xmlns="urn:jboss:domain:infinispan:14.0"> | |
+ <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan"> | |
+ <local-cache name="passivation"> | |
+ <expiration interval="0"/> | |
+ <file-store passivation="true"/> | |
+ </local-cache> | |
+ <local-cache name="persistent"> | |
+ <locking isolation="REPEATABLE_READ"/> | |
+ <transaction mode="BATCH"/> | |
+ <expiration interval="0"/> | |
+ <file-store preload="true"/> | |
+ </local-cache> | |
+ <local-cache name="transient"> | |
+ <locking isolation="REPEATABLE_READ"/> | |
+ <transaction mode="BATCH"/> | |
+ <expiration interval="0"/> | |
+ <file-store passivation="true" purge="true"/> | |
+ </local-cache> | |
+ </cache-container> | |
+ <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan"> | |
+ <local-cache name="passivation"> | |
+ <expiration interval="0"/> | |
+ <file-store passivation="true"/> | |
+ </local-cache> | |
+ <local-cache name="sso"> | |
+ <expiration interval="0"/> | |
+ </local-cache> | |
+ </cache-container> | |
+ <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.singleton.server"> | |
+ <local-cache name="default"> | |
+ <expiration interval="0"/> | |
+ </local-cache> | |
+ </cache-container> | |
<cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache"> | |
<local-cache name="entity"> | |
<heap-memory size="10000"/> | |
@@ -276,6 +421,7 @@ | |
</default-workmanager> | |
<cached-connection-manager/> | |
</subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:jdr:1.0"/> | |
<subsystem xmlns="urn:jboss:domain:jmx:1.3"> | |
<expose-resolved-model/> | |
<expose-expression-model/> | |
@@ -284,8 +430,30 @@ | |
<subsystem xmlns="urn:jboss:domain:jpa:1.1"> | |
<jpa default-extended-persistence-inheritance="DEEP"/> | |
</subsystem> | |
- <subsystem xmlns="urn:jboss:domain:naming:2.0"/> | |
+ <subsystem xmlns="urn:jboss:domain:jsf:1.1"/> | |
+ <subsystem xmlns="urn:jboss:domain:mail:4.0"> | |
+ <mail-session name="default" jndi-name="java:jboss/mail/Default"> | |
+ <smtp-server outbound-socket-binding-ref="mail-smtp"/> | |
+ </mail-session> | |
+ </subsystem> | |
+ <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/> | |
+ <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/> | |
+ <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/> | |
+ <subsystem xmlns="urn:wildfly:microprofile-opentracing-smallrye:3.0" default-tracer="jaeger"> | |
+ <jaeger-tracer name="jaeger"> | |
+ <sampler-configuration sampler-type="const" sampler-param="1.0"/> | |
+ </jaeger-tracer> | |
+ </subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:naming:2.0"> | |
+ <remote-naming/> | |
+ </subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:pojo:1.0"/> | |
+ <subsystem xmlns="urn:jboss:domain:remoting:5.0"> | |
+ <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/> | |
+ </subsystem> | |
<subsystem xmlns="urn:jboss:domain:request-controller:1.0"/> | |
+ <subsystem xmlns="urn:jboss:domain:resource-adapters:6.1"/> | |
+ <subsystem xmlns="urn:jboss:domain:sar:1.0"/> | |
<subsystem xmlns="urn:jboss:domain:security-manager:1.0"> | |
<deployment-permissions> | |
<maximum-set> | |
@@ -303,23 +471,38 @@ | |
<coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/> | |
<object-store path="tx-object-store" relative-to="jboss.server.data.dir"/> | |
</subsystem> | |
- <subsystem xmlns="urn:jboss:domain:undertow:13.0" default-server="default-server" default-virtual-host="default-host" default-servlet-container="default" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"> | |
+ <subsystem xmlns="urn:jboss:domain:undertow:13.0" default-server="default-server" default-virtual-host="default-host" default-servlet-container="default" default-security-domain="other" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"> | |
<byte-buffer-pool name="default"/> | |
<buffer-cache name="default"/> | |
<server name="default-server"> | |
<http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/> | |
+ <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/> | |
<host name="default-host" alias="localhost"> | |
- <http-invoker/> | |
+ <location name="/" handler="welcome-content"/> | |
+ <http-invoker http-authentication-factory="application-http-authentication"/> | |
</host> | |
</server> | |
<servlet-container name="default"> | |
<jsp-config/> | |
<websockets/> | |
</servlet-container> | |
+ <handlers> | |
+ <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/> | |
+ </handlers> | |
<application-security-domains> | |
<application-security-domain name="other" security-domain="ApplicationDomain"/> | |
</application-security-domains> | |
</subsystem> | |
+ <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"> | |
+ <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host> | |
+ <endpoint-config name="Standard-Endpoint-Config"/> | |
+ <endpoint-config name="Recording-Endpoint-Config"> | |
+ <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"> | |
+ <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/> | |
+ </pre-handler-chain> | |
+ </endpoint-config> | |
+ <client-config name="Standard-Client-Config"/> | |
+ </subsystem> | |
<subsystem xmlns="urn:jboss:domain:weld:5.0"/> | |
</profile> | |
<interfaces> | |
@@ -338,5 +521,8 @@ | |
<socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/> | |
<socket-binding name="txn-recovery-environment" port="4712"/> | |
<socket-binding name="txn-status-manager" port="4713"/> | |
+ <outbound-socket-binding name="mail-smtp"> | |
+ <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/> | |
+ </outbound-socket-binding> | |
</socket-binding-group> | |
</server> | |
\ No newline at end of file |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment