default.conf

[TabPy]
# TABPY_QUERY_OBJECT_PATH = /tmp/query_objects
# TABPY_PORT = 9004
# TABPY_STATE_PATH = ./tabpy/tabpy_server

# Where static pages live
# TABPY_STATIC_PATH = ./tabpy/tabpy_server/static

# For how to configure TabPy authentication read
# Authentication section in docs/server-config.md.
# TABPY_PWD_FILE = /path/to/password/file.txt

# To set up secure TabPy uncomment and modify the following lines.
# Note only PEM-encoded x509 certificates are supported.
# TABPY_TRANSFER_PROTOCOL = https
# TABPY_CERTIFICATE_FILE = /path/to/certificate/file.crt
# TABPY_KEY_FILE = /path/to/key/file.key
# TABPY_MINIMUM_TLS_VERSION = TLSv1_2

# Log additional request details including caller IP, full URL, client
# end user info if provided.
# TABPY_LOG_DETAILS = true

# Limit request size (in Mb) - any request which size exceeds
# specified amount will be rejected by TabPy.
# Default value is 100 Mb.
# TABPY_MAX_REQUEST_SIZE_MB = 100

# Enable evaluate api to execute ad-hoc Python scripts
# Enabled by default. Disabling it will result in 404 error.
# TABPY_EVALUATE_ENABLE = true

# Configure how long a custom script provided to the /evaluate method
# will run before throwing a TimeoutError.
# The value should be a float representing the timeout time in seconds.
# TABPY_EVALUATE_TIMEOUT = 30

# Enable Gzip compression for requests and responses.
# TABPY_GZIP_ENABLE = true

# Enable OAuth/JWT Bearer-token authentication. When enabled,
# TABPY_OAUTH_ISSUER, TABPY_OAUTH_JWKS_URI, and TABPY_OAUTH_AUDIENCE are
# all required.
# TABPY_OAUTH_ENABLED = true

# Expected `iss` claim on incoming JWTs.
# TABPY_OAUTH_ISSUER = https://idp.example.com/

# JWKS endpoint used to fetch and cache the IdP's signing keys.
# TABPY_OAUTH_JWKS_URI = https://idp.example.com/.well-known/jwks.json

# Expected `aud` claim on incoming JWTs.
# TABPY_OAUTH_AUDIENCE = tabpy

# Comma-separated list of scopes that must all be present in the JWT's
# `scope` claim on every request (including /info). Leave unset to skip
# this global check. Do not put the configured endpoint scope names here
# if you want them bound only to their specific paths; use
# TABPY_OAUTH_ENFORCE_ENDPOINT_SCOPES for that.
# TABPY_OAUTH_REQUIRED_SCOPES = tabpy

# When true, /query requires tabpy:query, /evaluate requires
# tabpy:evaluate, and mutating /endpoints plus the upload-destination
# path require tabpy:deploy. Default false. Independent of
# TABPY_OAUTH_REQUIRED_SCOPES. GET /endpoints stays readable. A SCRIPT_*
# that calls tabpy.query() needs both query and evaluate. Arrow Flight is
# not per-endpoint scoped; it still uses TABPY_OAUTH_REQUIRED_SCOPES only.
# TABPY_OAUTH_ENFORCE_ENDPOINT_SCOPES = true

# Scope names advertised by /info and required when endpoint enforcement is
# enabled. Override these when the IdP uses a different naming convention.
# Amazon Cognito custom scopes commonly use names such as tabpy/query.
# TABPY_OAUTH_QUERY_SCOPE = tabpy:query
# TABPY_OAUTH_EVALUATE_SCOPE = tabpy:evaluate
# TABPY_OAUTH_DEPLOY_SCOPE = tabpy:deploy

# Log the JWT subject as the authenticated user for OAuth requests.
# TABPY_OAUTH_LOG_USER = true

[loggers]
keys=root

[handlers]
keys=rootHandler,rotatingFileHandler

[formatters]
keys=rootFormatter

[logger_root]
level=DEBUG
handlers=rootHandler,rotatingFileHandler
qualname=root
propagete=0

[handler_rootHandler]
class=StreamHandler
level=INFO
formatter=rootFormatter
args=(sys.stdout,)

[handler_rotatingFileHandler]
class=handlers.RotatingFileHandler
level=DEBUG
formatter=rootFormatter
args=('tabpy_log.log', 'a', 1000000, 5)

[formatter_rootFormatter]
format=%(asctime)s [%(levelname)s] (%(filename)s:%(module)s:%(lineno)d): %(message)s
datefmt=%Y-%m-%d,%H:%M:%S