umap/docs/config/settings.md
Alexis Métaireau d91c86e7fa feat(websockets): run the WS server as a django management command.
This allows to handle the loading of the settings in a consistant way,
and aditionnaly to provide a way to override the `WEBSOCKET_BACK_HOST`
and `WEBSOCKET_BACK_PORT` settings with arg commands `--host` and
`--port`.

Without this change, because of how we are currently loading our
settings, we would require the settings the be exposed by the
`umap.settings.__init__` file.

Previous implementations were exposing these settings, with the
following code:

```python
settings_as_dict = {k: v for k, v in globals().items() if k.isupper()}
  ```
2024-06-07 18:21:30 +02:00

8.6 KiB
Raw Blame History

Configuration

uMap runs with Django, so any Django setting should work, if you know what you are doing.

The Django settings reference is here: https://docs.djangoproject.com/en/4.2/ref/settings/

Here are a few relevant settings for uMap.

Usage

Those settings should either:

  • be in /etc/umap/umap.conf, which uMap will try to load by default
  • be in a random place on your server, which is then reference with the UMAP_SETTINGS env var
  • be declared as env vars directly, for simple ones (string/boolean/list)

ALLOWED_HOSTS

The hosts that uMap expects. ALLOWED_HOSTS = ['umap.mydomain.org']

Can be set through env var too: ALLOWED_HOSTS=umap.mydomain.org,u.mydomain.org

DEBUG

Set it to True for easier debugging in case of error.

EMAIL_BACKEND

Must be configured if you want uMap to send emails to anonymous users.

UMap can send the anonymous edit link by email. For this to work, you need to add email specific settings. See Django documentation.

In general, you'll need to add something like this in your local settings:

DEFAULT_FROM_EMAIL = "youradmin@email.org"
EMAIL_BACKEND = "django.core.mail.backends.smtp.EmailBackend"
EMAIL_HOST = "smtp.provider.org"
EMAIL_PORT = 456
EMAIL_HOST_USER = "username"
EMAIL_HOST_PASSWORD = "xxxx"
EMAIL_USE_TLS = True
# or
EMAIL_USE_SSL = True

ENABLE_ACCOUNT_LOGIN

Do you want users to be able to create an account directly on your uMap instance (instead of only using OAuth).

Can be set through env var: ENABLE_ACCOUNT_LOGIN=1

User accounts can be managed via the Django admin page ({SITE_URL}/admin). The required superuser must be created on the command line with this command: umap createsuperuser.

DEFAULT_FROM_EMAIL

See EMAIL_BACKEND.

LANGUAGE_CODE

Set it to the default language you want. LANGUAGE_CODE = "it"

Default map center

LEAFLET_LONGITUDE, LEAFLET_LATITUDE, LEAFLET_ZOOM

Default longitude, latitude and zoom for the map

MEDIA_ROOT

Where uMap should store your datalayers and icons, must be consistent with your Nginx configuration.

See Django documentation for MEDIA_ROOT

SECRET_KEY

Must be defined to something unique and secret.

Running uMap / Django with a known SECRET_KEY defeats many of Djangos security protections, and can lead to privilege escalation and remote code execution vulnerabilities.

See Django documentation for SECRET_KEY

SITE_URL

The final URL of you instance, including the protocol:

SITE_URL=http://umap.org

SHORT_SITE_URL

If you have a short domain for sharing links.

Eg.: SHORT_SITE_URL=https://u.umap.org

SITE_NAME

The name of the site, to be used in header and HTML title.

STATIC_ROOT

Where uMap should store static files (CSS, JS…), must be consistent with your Nginx configuration.

See Django documentation for STATIC_ROOT

USE_I18N

Default is True. Set it to False if you don't want uMap to localize the app.

USER_AUTOCOMPLETE_FIELDS

Which fields to search when autocompleting users (in permissions). Eg.: USER_AUTOCOMPLETE_FIELDS = ["^username", "email"]

USER_DISPLAY_NAME

Advanced setting for controling which user fields will be used for displaying their name on the application, depending on which fields you collect with your OAuth configuration. For example: USER_DISPLAY_NAME = "{username}"

USER_URL_FIELD

Which field to be used in URL for user. Must be a unique field.

Eg.: USER_URL_FIELD = "pk"

UMAP_ALLOW_ANONYMOUS

Should uMap allows user without an account to create maps (default is False).

Can be set through env var: UMAP_ALLOW_ANONYMOUS=1

UMAP_CUSTOM_TEMPLATES

To be used when you want to override some HTML templates:

UMAP_CUSTOM_TEMPLATES = "/path/to/custom/templates"

See customization for details.

UMAP_CUSTOM_STATICS

To be used when you want to override some CSS or images:

UMAP_CUSTOM_STATICS = "/path/to/custom/static"

See customization for details.

UMAP_EXTRA_URLS

By default:

UMAP_EXTRA_URLS = {
    'routing': 'http://www.openstreetmap.org/directions?engine=osrm_car&route={lat},{lng}&locale={locale}#map={zoom}/{lat}/{lng}',
    'ajax_proxy': '/ajax-proxy/?url={url}&ttl={ttl}',
    'search': 'https://photon.komoot.io/api/?',
}

UMAP_KEEP_VERSIONS

How many datalayer versions to keep. 10 by default.

UMAP_DEFAULT_EDIT_STATUS

Define the map default edit status. Possible values:

  • 1 (Everyone)
  • 2 (Editors only)
  • 3 (Owner only)

UMAP_DEFAULT_SHARE_STATUS

Define the map default share status. Possible values:

  • 1 (Everyone (public))
  • 2 (Anyone with link)
  • 3 (Editors only)

UMAP_DEMO_SITE

Set to True if you want to display a message saying that your instance is not ready for production use (no backup, etc.)

Link to show on the header under the "Feedback and help" label.

UMAP_HOME_FEED

Which feed to display on the home page. Three valid values:

  • "latest", which shows the latest maps (default)
  • "highlighted", which shows the maps that have been starred by a staff member
  • None, which does not show any map on the home page

UMAP_MAPS_PER_PAGE

How many maps to show in maps list, like search or home page.

How many total maps to return in the search.

UMAP_MAPS_PER_PAGE_OWNER

How many maps to show in the user "my maps" page.

UMAP_SEARCH_CONFIGURATION

Use it if you take control over the search configuration.

UMap uses PostgreSQL tsvector for searching. In case your database is big, you may want to add an index. For that, here are the SQL commands to run:

# Create a basic search configuration
CREATE TEXT SEARCH CONFIGURATION umapdict (COPY=simple);

# If you also want to deal with accents and case, add this before creating the index
CREATE EXTENSION unaccent;
CREATE EXTENSION btree_gin;
ALTER TEXT SEARCH CONFIGURATION umapdict ALTER MAPPING FOR hword, hword_part, word WITH unaccent, simple;

# Now create the index
CREATE INDEX IF NOT EXISTS search_idx ON umap_map USING GIN(to_tsvector('umapdict', COALESCE(name, ''::character varying)::text), share_status);

Then set:

UMAP_SEARCH_CONFIGURATION = "umapdict"

UMAP_READONLY

Is your instance readonly? Useful for server maintenance.

UMAP_GZIP

Should uMap gzip datalayers geojson.

UMAP_XSENDFILE_HEADER

Can be set to X-Accel-Redirect to enable the NGINX X-Accel feature.

See the NGINX documentation in addition.

SOCIAL_AUTH_OPENSTREETMAP_OAUTH2_KEY, SOCIAL_AUTH_OPENSTREETMAP_OAUTH2_SECRET

If you use OpenStreetMap as OAuth 2 provider, you can use those settings.

Otherwise, use any valid python-social-auth configuration.

WEBSOCKET_ENABLED

A WebSocket server is packaged with uMap, and can be turned-on to activate "real-time collaboration". In practice, in order to enable it, a few settings are exposed.

Setting WEBSOCKET_ENABLED to True will not enable real-time collaboration on all the maps served by the server. Instead, a switch will be available in the "advanced properties" of the map.

The websocket server can be started with the following command:

umap run_websocket_server

And can take optional settings --host and --port (default values are defined in the settings).

Configuration example:

WEBSOCKET_ENABLED = True
WEBSOCKET_BACK_HOST = "localhost"
WEBSOCKET_BACK_PORT = 8002
WEBSOCKET_FRONT_URI = "ws://localhost:8002"

These settings can also be set with the (same names) environment variables.

WEBSOCKET_BACK_HOST

WEBSOCKET_BACK_PORT

The internal host and port the websocket server will connect to.

WEBSOCKET_FRONT_URI

The connection string that will be used by the client to connect to the websocket server. In practice, as it's useful to put the WebSocket server behind TLS encryption, the values defined by WEBSOCKET_FRONT_URI are different than the values defined by WEBSOCKET_BACK_PORT and WEBSOCKET_BACK_HOST.

This value is comprised of three parts:

protocol://host:port
  • protocol: can either be ws for plain unencrypted WebSockets, or wss when using TLS encryption.
  • host: is the address where the connection will be sent. It should be public facing.
  • port: is the port that is open on the host.