1
0
mirror of https://github.com/hasura/graphql-engine.git synced 2024-12-27 17:36:15 +03:00
graphql-engine/server/src-lib/Hasura/Server/Init/Arg/Command/Serve.hs

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

1179 lines
44 KiB
Haskell
Raw Normal View History

-- | The Arg Opt.Parser for the 'serve' subcommand.
module Hasura.Server.Init.Arg.Command.Serve
( -- * Opt.Parser
serveCommandParser,
-- * Options
servePortOption,
serveHostOption,
pgStripesOption,
pgConnsOption,
pgTimeoutOption,
pgConnLifetimeOption,
pgUsePreparedStatementsOption,
pgPoolTimeoutOption,
txIsolationOption,
adminSecretOption,
accessKeyOption,
authHookOption,
authHookModeOption,
jwtSecretOption,
unAuthRoleOption,
corsDomainOption,
disableCorsOption,
enableConsoleOption,
consoleAssetsDirOption,
enableTelemetryOption,
wsReadCookieOption,
stringifyNumOption,
dangerousBooleanCollapseOption,
enabledAPIsOption,
mxRefetchDelayOption,
mxBatchSizeOption,
streamingMxRefetchDelayOption,
streamingMxBatchSizeOption,
enableAllowlistOption,
enabledLogsOption,
logLevelOption,
graphqlDevModeOption,
graphqlAdminInternalErrorsOption,
graphqlEventsHttpPoolSizeOption,
graphqlEventsFetchIntervalOption,
asyncActionsFetchIntervalOption,
enableRemoteSchemaPermsOption,
webSocketCompressionOption,
webSocketKeepAliveOption,
inferFunctionPermsOption,
enableMaintenanceModeOption,
schemaPollIntervalOption,
experimentalFeaturesOption,
eventsFetchBatchSizeOption,
gracefulShutdownOption,
webSocketConnectionInitTimeoutOption,
enableMetadataQueryLoggingOption,
defaultNamingConventionOption,
metadataDBExtensionsSchemaOption,
-- * Pretty Printer
serveCmdFooter,
)
where
--------------------------------------------------------------------------------
import Data.HashSet qualified as HashSet
import Data.Text qualified as Text
import Data.Time qualified as Time
import Database.PG.Query qualified as Query
import Hasura.Backends.Postgres.Connection.MonadTx qualified as MonadTx
import Hasura.Cache.Bounded qualified as Bounded
import Hasura.GraphQL.Execute.Subscription.Options qualified as Subscription.Options
import Hasura.GraphQL.Schema.NamingCase (NamingCase)
import Hasura.GraphQL.Schema.Options qualified as Options
import Hasura.Logging qualified as Logging
import Hasura.Prelude
import Hasura.RQL.Types.Numeric qualified as Numeric
import Hasura.Server.Auth qualified as Auth
import Hasura.Server.Cors qualified as Cors
import Hasura.Server.Init.Arg.PrettyPrinter qualified as PP
import Hasura.Server.Init.Config qualified as Config
import Hasura.Server.Init.Env qualified as Env
import Hasura.Server.Logging qualified as Server.Logging
import Hasura.Server.Types qualified as Types
import Hasura.Session qualified as Session
import Network.Wai.Handler.Warp qualified as Warp
import Options.Applicative qualified as Opt
import Witch qualified
--------------------------------------------------------------------------------
-- Serve Command
serveCommandParser :: Logging.EnabledLogTypes impl => Opt.Parser (Config.ServeOptionsRaw impl)
serveCommandParser =
Config.ServeOptionsRaw
<$> parseServerPort
<*> parseServerHost
<*> parseConnParams
<*> parseTxIsolation
<*> (parseAdminSecret <|> parseAccessKey)
<*> parseAuthHook
<*> parseJwtSecret
<*> parseUnAuthRole
<*> parseCorsConfig
<*> parseEnableConsole
<*> parseConsoleAssetsDir
<*> parseEnableTelemetry
<*> parseWsReadCookie
<*> parseStringifyNum
<*> parseDangerousBooleanCollapse
<*> parseEnabledAPIs
<*> parseMxRefetchDelay
<*> parseMxBatchSize
<*> parseStreamingMxRefetchDelay
<*> parseStreamingMxBatchSize
<*> parseEnableAllowlist
<*> parseEnabledLogs
<*> parseLogLevel
<* parsePlanCacheSize -- parsed (for backwards compatibility reasons) but ignored
<*> parseGraphqlDevMode
<*> parseGraphqlAdminInternalErrors
<*> parseGraphqlEventsHttpPoolSize
<*> parseGraphqlEventsFetchInterval
<*> parseGraphqlAsyncActionsFetchInterval
<*> parseEnableRemoteSchemaPerms
<*> parseWebSocketCompression
<*> parseWebSocketKeepAlive
<*> parseInferFunctionPerms
<*> parseEnableMaintenanceMode
<*> parseSchemaPollInterval
<*> parseExperimentalFeatures
<*> parseEventsFetchBatchSize
<*> parseGracefulShutdownTimeout
<*> parseWebSocketConnectionInitTimeout
<*> parseEnableMetadataQueryLogging
<*> parseDefaultNamingConvention
<*> parseExtensionsSchema
--------------------------------------------------------------------------------
-- Serve Options
parseServerPort :: Opt.Parser (Maybe Config.Port)
parseServerPort =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "server-port"
<> Opt.metavar "<PORT>"
<> Opt.help (Config._helpMessage servePortOption)
)
servePortOption :: Config.Option Config.Port
servePortOption =
Config.Option
{ _default = Config.unsafePort 8080,
_envVar = "HASURA_GRAPHQL_SERVER_PORT",
_helpMessage = "Port on which graphql-engine should be served (default: 8080)"
}
parseServerHost :: Opt.Parser (Maybe Warp.HostPreference)
parseServerHost =
Opt.optional $
Opt.strOption
( Opt.long "server-host"
<> Opt.metavar "<HOST>"
<> Opt.help (Config._helpMessage serveHostOption)
)
serveHostOption :: Config.Option Warp.HostPreference
serveHostOption =
Config.Option
{ _default = "*",
_envVar = "HASURA_GRAPHQL_SERVER_HOST",
_helpMessage = "Host on which graphql-engine will listen (default: *)"
}
parseConnParams :: Opt.Parser Config.ConnParamsRaw
parseConnParams =
Config.ConnParamsRaw <$> pgStripes <*> pgConns <*> pgIdleTimeout <*> pgConnLifetime <*> pgUsePreparedStatements <*> pgPoolTimeout
where
pgStripes :: Opt.Parser (Maybe Numeric.NonNegativeInt)
pgStripes =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "stripes"
<> Opt.short 's'
<> Opt.metavar "<NO OF STRIPES>"
<> Opt.help (Config._helpMessage pgStripesOption)
)
pgConns :: Opt.Parser (Maybe Numeric.NonNegativeInt)
pgConns =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "connections"
<> Opt.short 'c'
<> Opt.metavar "<NO OF CONNS>"
<> Opt.help (Config._helpMessage pgConnsOption)
)
pgIdleTimeout :: Opt.Parser (Maybe Numeric.NonNegativeInt)
pgIdleTimeout =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "timeout"
<> Opt.metavar "<SECONDS>"
<> Opt.help (Config._helpMessage pgTimeoutOption)
)
pgConnLifetime :: Opt.Parser (Maybe (Numeric.NonNegative Time.NominalDiffTime))
pgConnLifetime =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "conn-lifetime"
<> Opt.metavar "<SECONDS>"
<> Opt.help (Config._helpMessage pgConnLifetimeOption)
)
pgUsePreparedStatements :: Opt.Parser (Maybe Bool)
pgUsePreparedStatements =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "use-prepared-statements"
<> Opt.metavar "<true|false>"
<> Opt.help (Config._helpMessage pgUsePreparedStatementsOption)
)
pgPoolTimeout :: Opt.Parser (Maybe (Numeric.NonNegative Time.NominalDiffTime))
pgPoolTimeout =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "pool-timeout"
<> Opt.metavar "<SECONDS>"
<> Opt.help (Config._helpMessage pgPoolTimeoutOption)
)
pgStripesOption :: Config.Option Numeric.NonNegativeInt
pgStripesOption =
Config.Option
{ _default = Numeric.unsafeNonNegativeInt 1,
_envVar = "HASURA_GRAPHQL_PG_STRIPES",
_helpMessage =
"Number of stripes (distinct sub-pools) to maintain with Postgres (default: 1). "
<> "New connections will be taken from a particular stripe pseudo-randomly."
}
pgConnsOption :: Config.Option Numeric.NonNegativeInt
pgConnsOption =
Config.Option
{ _default = Numeric.unsafeNonNegativeInt 50,
_envVar = "HASURA_GRAPHQL_PG_CONNECTIONS",
_helpMessage =
"Maximum number of Postgres connections that can be opened per stripe (default: 50). "
<> "When the maximum is reached we will block until a new connection becomes available, "
<> "even if there is capacity in other stripes."
}
pgTimeoutOption :: Config.Option Numeric.NonNegativeInt
pgTimeoutOption =
Config.Option
{ _default = Numeric.unsafeNonNegativeInt 180,
_envVar = "HASURA_GRAPHQL_PG_TIMEOUT",
_helpMessage = "Each connection's idle time before it is closed (default: 180 sec)"
}
pgConnLifetimeOption :: Config.Option (Numeric.NonNegative Time.NominalDiffTime)
pgConnLifetimeOption =
Config.Option
{ _default = Numeric.unsafeNonNegative 600,
_envVar = "HASURA_GRAPHQL_PG_CONN_LIFETIME",
_helpMessage =
"Time from connection creation after which the connection should be destroyed and a new one "
<> "created. A value of 0 indicates we should never destroy an active connection. If 0 is "
<> "passed, memory from large query results may not be reclaimed. (default: 600 sec)"
}
pgUsePreparedStatementsOption :: Config.Option Bool
pgUsePreparedStatementsOption =
Config.Option
{ _default = True,
_envVar = "HASURA_GRAPHQL_USE_PREPARED_STATEMENTS",
_helpMessage = "Use prepared statements for queries (default: true)"
}
pgPoolTimeoutOption :: Config.Option ()
pgPoolTimeoutOption =
Config.Option
{ _default = (),
_envVar = "HASURA_GRAPHQL_PG_POOL_TIMEOUT",
_helpMessage = "How long to wait when acquiring a Postgres connection, in seconds (default: forever)."
}
parseTxIsolation :: Opt.Parser (Maybe Query.TxIsolation)
parseTxIsolation =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "tx-iso"
<> Opt.short 'i'
<> Opt.metavar "<TXISO>"
<> Opt.help (Config._helpMessage txIsolationOption)
)
txIsolationOption :: Config.Option Query.TxIsolation
txIsolationOption =
Config.Option
{ Config._default = Query.ReadCommitted,
Config._envVar = "HASURA_GRAPHQL_TX_ISOLATION",
Config._helpMessage = "transaction isolation. read-committed / repeatable-read / serializable (default: read-commited)"
}
parseAdminSecret :: Opt.Parser (Maybe Auth.AdminSecretHash)
parseAdminSecret =
Opt.optional $
Auth.hashAdminSecret
<$> Opt.strOption
( Opt.long "admin-secret"
<> Opt.metavar "ADMIN SECRET KEY"
<> Opt.help (Config._helpMessage adminSecretOption)
)
adminSecretOption :: Config.Option ()
adminSecretOption =
Config.Option
{ Config._default = (),
Config._envVar = "HASURA_GRAPHQL_ADMIN_SECRET",
Config._helpMessage = "Admin Secret key, required to access this instance"
}
parseAccessKey :: Opt.Parser (Maybe Auth.AdminSecretHash)
parseAccessKey =
Opt.optional $
Auth.hashAdminSecret
<$> Opt.strOption
( Opt.long "access-key"
<> Opt.metavar "ADMIN SECRET KEY (DEPRECATED: USE --admin-secret)"
<> Opt.help (Config._helpMessage accessKeyOption)
)
accessKeyOption :: Config.Option ()
accessKeyOption =
Config.Option
{ Config._default = (),
Config._envVar = "HASURA_GRAPHQL_ACCESS_KEY",
Config._helpMessage = "Admin secret key, required to access this instance (deprecated: use HASURA_GRAPHQL_ADMIN_SECRET instead)"
}
parseAuthHook :: Opt.Parser Config.AuthHookRaw
parseAuthHook =
Config.AuthHookRaw <$> url <*> urlType
where
url =
Opt.optional $
Opt.strOption
( Opt.long "auth-hook"
<> Opt.metavar "<WEB HOOK URL>"
<> Opt.help (Config._helpMessage authHookOption)
)
urlType =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "auth-hook-mode"
<> Opt.metavar "<GET|POST>"
<> Opt.help (Config._helpMessage authHookModeOption)
)
authHookOption :: Config.Option ()
authHookOption =
Config.Option
{ Config._default = (),
Config._envVar = "HASURA_GRAPHQL_AUTH_HOOK",
Config._helpMessage = "URL of the authorization webhook required to authorize requests"
}
authHookModeOption :: Config.Option Auth.AuthHookType
authHookModeOption =
Config.Option
{ Config._default = Auth.AHTGet,
Config._envVar = "HASURA_GRAPHQL_AUTH_HOOK_MODE",
Config._helpMessage = "HTTP method to use for authorization webhook (default: GET)"
}
parseJwtSecret :: Opt.Parser (Maybe Auth.JWTConfig)
parseJwtSecret =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "jwt-secret"
<> Opt.metavar "<JSON CONFIG>"
<> Opt.help (Config._helpMessage jwtSecretOption)
)
jwtSecretOption :: Config.Option ()
jwtSecretOption =
Config.Option
{ Config._default = (),
Config._envVar = "HASURA_GRAPHQL_JWT_SECRET",
Config._helpMessage =
"The JSON containing type and the JWK used for verifying. e.g: "
<> "`{\"type\": \"HS256\", \"key\": \"<your-hmac-shared-secret>\", \"claims_namespace\": \"<optional-custom-claims-key-name>\"}`,"
<> "`{\"type\": \"RS256\", \"key\": \"<your-PEM-RSA-public-key>\", \"claims_namespace\": \"<optional-custom-claims-key-name>\"}`"
}
parseUnAuthRole :: Opt.Parser (Maybe Session.RoleName)
parseUnAuthRole =
fmap mkRoleName $
Opt.optional $
Opt.strOption
( Opt.long "unauthorized-role"
<> Opt.metavar "<ROLE>"
<> Opt.help (Config._helpMessage unAuthRoleOption)
)
where
mkRoleName mText = mText >>= Session.mkRoleName
unAuthRoleOption :: Config.Option ()
unAuthRoleOption =
Config.Option
{ Config._default = (),
Config._envVar = "HASURA_GRAPHQL_UNAUTHORIZED_ROLE",
Config._helpMessage =
"Unauthorized role, used when admin-secret is not sent in admin-secret only mode "
++ "or \"Authorization\" header is absent in JWT mode"
}
parseCorsConfig :: Opt.Parser (Maybe Cors.CorsConfig)
parseCorsConfig = mapCC <$> disableCors <*> corsDomain
where
corsDomain =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "cors-domain"
<> Opt.metavar "<DOMAINS>"
<> Opt.help (Config._helpMessage corsDomainOption)
)
disableCors =
Opt.switch
( Opt.long "disable-cors"
<> Opt.help (Config._helpMessage disableCorsOption)
)
mapCC isDisabled domains =
bool domains (Just $ Cors.CCDisabled False) isDisabled
corsDomainOption :: Config.Option Cors.CorsConfig
corsDomainOption =
Config.Option
{ Config._default = Cors.CCAllowAll,
Config._envVar = "HASURA_GRAPHQL_CORS_DOMAIN",
Config._helpMessage =
"CSV of list of domains, excluding scheme (http/https) and including port, "
++ "to allow CORS for. Wildcard domains are allowed. See docs for details."
}
disableCorsOption :: Config.Option Bool
disableCorsOption =
Config.Option
{ Config._default = False,
Config._envVar = "HASURA_GRAPHQL_DISABLE_CORS",
Config._helpMessage = "Disable CORS. Do not send any CORS headers on any request"
}
parseEnableConsole :: Opt.Parser Bool
parseEnableConsole =
Opt.switch
( Opt.long "enable-console"
<> Opt.help (Config._helpMessage enableConsoleOption)
)
enableConsoleOption :: Config.Option Bool
enableConsoleOption =
Config.Option
{ Config._default = False,
Config._envVar = "HASURA_GRAPHQL_ENABLE_CONSOLE",
Config._helpMessage = "Enable API Console (default: false)"
}
parseConsoleAssetsDir :: Opt.Parser (Maybe Text)
parseConsoleAssetsDir =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "console-assets-dir"
<> Opt.help (Config._helpMessage consoleAssetsDirOption)
)
consoleAssetsDirOption :: Config.Option ()
consoleAssetsDirOption =
Config.Option
{ Config._default = (),
Config._envVar = "HASURA_GRAPHQL_CONSOLE_ASSETS_DIR",
Config._helpMessage =
"A directory from which static assets required for console is served at"
++ "'/console/assets' path. Can be set to '/srv/console-assets' on the"
++ " default docker image to disable loading assets from CDN."
}
-- NOTE: Should this be an 'Opt.flag'?
parseEnableTelemetry :: Opt.Parser (Maybe Bool)
parseEnableTelemetry =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "enable-telemetry"
<> Opt.help (Config._helpMessage enableTelemetryOption)
)
enableTelemetryOption :: Config.Option Bool
enableTelemetryOption =
Config.Option
{ _default = True,
_envVar = "HASURA_GRAPHQL_ENABLE_TELEMETRY",
_helpMessage = "Enable anonymous telemetry on the server and console. For more information, see: https://hasura.io/docs/latest/guides/telemetry (default: true)"
}
parseWsReadCookie :: Opt.Parser Bool
parseWsReadCookie =
Opt.switch
( Opt.long "ws-read-cookie"
<> Opt.help (Config._helpMessage wsReadCookieOption)
)
wsReadCookieOption :: Config.Option Bool
wsReadCookieOption =
Config.Option
{ Config._default = False,
Config._envVar = "HASURA_GRAPHQL_WS_READ_COOKIE",
Config._helpMessage =
"Read cookie on WebSocket initial handshake, even when CORS is disabled."
++ " This can be a potential security flaw! Please make sure you know "
++ "what you're doing."
++ " This configuration is only applicable when CORS is disabled."
}
parseStringifyNum :: Opt.Parser Options.StringifyNumbers
parseStringifyNum =
fmap (bool Options.Don'tStringifyNumbers Options.StringifyNumbers) $
Opt.switch
( Opt.long "stringify-numeric-types"
<> Opt.help (Config._helpMessage stringifyNumOption)
)
stringifyNumOption :: Config.Option Options.StringifyNumbers
stringifyNumOption =
Config.Option
{ Config._default = Options.Don'tStringifyNumbers,
Config._envVar = "HASURA_GRAPHQL_STRINGIFY_NUMERIC_TYPES",
Config._helpMessage = "Stringify numeric types (default: false)"
}
parseDangerousBooleanCollapse :: Opt.Parser (Maybe Bool)
parseDangerousBooleanCollapse =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "v1-boolean-null-collapse"
<> Opt.help (Config._helpMessage dangerousBooleanCollapseOption)
)
dangerousBooleanCollapseOption :: Config.Option Bool
dangerousBooleanCollapseOption =
Config.Option
{ Config._default = False,
Config._envVar = "HASURA_GRAPHQL_V1_BOOLEAN_NULL_COLLAPSE",
Config._helpMessage =
"Emulate V1's behaviour re. boolean expression, where an explicit 'null'"
<> " value will be interpreted to mean that the field should be ignored"
<> " [DEPRECATED, WILL BE REMOVED SOON] (default: false)"
}
parseEnabledAPIs :: Opt.Parser (Maybe (HashSet Config.API))
parseEnabledAPIs =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "enabled-apis"
<> Opt.help (Config._helpMessage enabledAPIsOption)
)
enabledAPIsOption :: Config.Option (HashSet Config.API)
enabledAPIsOption =
Config.Option
{ Config._default = HashSet.fromList [Config.METADATA, Config.GRAPHQL, Config.PGDUMP, Config.CONFIG],
Config._envVar = "HASURA_GRAPHQL_ENABLED_APIS",
Config._helpMessage = "Comma separated list of enabled APIs. (default: metadata,graphql,pgdump,config)"
}
parseMxRefetchDelay :: Opt.Parser (Maybe Subscription.Options.RefetchInterval)
parseMxRefetchDelay =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "live-queries-multiplexed-refetch-interval"
<> Opt.metavar "<INTERVAL(ms)>"
<> Opt.help (Config._envVar mxRefetchDelayOption)
)
mxRefetchDelayOption :: Config.Option Subscription.Options.RefetchInterval
mxRefetchDelayOption =
Config.Option
{ Config._default = Subscription.Options.RefetchInterval 1,
Config._envVar = "HASURA_GRAPHQL_LIVE_QUERIES_MULTIPLEXED_REFETCH_INTERVAL",
Config._helpMessage =
"results will only be sent once in this interval (in milliseconds) for "
<> "live queries which can be multiplexed. Default: 1000 (1sec)"
}
parseMxBatchSize :: Opt.Parser (Maybe Subscription.Options.BatchSize)
parseMxBatchSize =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "live-queries-multiplexed-batch-size"
<> Opt.metavar "BATCH_SIZE"
<> Opt.help (Config._helpMessage mxBatchSizeOption)
)
mxBatchSizeOption :: Config.Option Subscription.Options.BatchSize
mxBatchSizeOption =
Config.Option
{ _default = Subscription.Options.BatchSize $ Numeric.unsafeNonNegativeInt 100,
_envVar = "HASURA_GRAPHQL_LIVE_QUERIES_MULTIPLEXED_BATCH_SIZE",
_helpMessage =
"multiplexed live queries are split into batches of the specified "
<> "size. Default 100. "
}
parseStreamingMxRefetchDelay :: Opt.Parser (Maybe Subscription.Options.RefetchInterval)
parseStreamingMxRefetchDelay =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "streaming-queries-multiplexed-refetch-interval"
<> Opt.metavar "<INTERVAL(ms)>"
<> Opt.help (Config._helpMessage streamingMxRefetchDelayOption)
)
streamingMxRefetchDelayOption :: Config.Option Subscription.Options.RefetchInterval
streamingMxRefetchDelayOption =
Config.Option
{ Config._default = Subscription.Options.RefetchInterval 1,
Config._envVar = "HASURA_GRAPHQL_STREAMING_QUERIES_MULTIPLEXED_REFETCH_INTERVAL",
Config._helpMessage =
"results will only be sent once in this interval (in milliseconds) for "
<> "streaming queries which can be multiplexed. Default: 1000 (1sec)"
}
parseStreamingMxBatchSize :: Opt.Parser (Maybe Subscription.Options.BatchSize)
parseStreamingMxBatchSize =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "streaming-queries-multiplexed-batch-size"
<> Opt.metavar "BATCH_SIZE"
<> Opt.help (Config._helpMessage streamingMxBatchSizeOption)
)
streamingMxBatchSizeOption :: Config.Option Subscription.Options.BatchSize
streamingMxBatchSizeOption =
Config.Option
{ Config._default = Subscription.Options.BatchSize $ Numeric.unsafeNonNegativeInt 100,
Config._envVar = "HASURA_GRAPHQL_STREAMING_QUERIES_MULTIPLEXED_BATCH_SIZE",
Config._helpMessage =
"multiplexed live queries are split into batches of the specified "
<> "size. Default 100. "
}
parseEnableAllowlist :: Opt.Parser Bool
parseEnableAllowlist =
Opt.switch
( Opt.long "enable-allowlist"
<> Opt.help (Config._helpMessage enableAllowlistOption)
)
enableAllowlistOption :: Config.Option Bool
enableAllowlistOption =
Config.Option
{ Config._default = False,
Config._envVar = "HASURA_GRAPHQL_ENABLE_ALLOWLIST",
Config._helpMessage = "Only accept allowed GraphQL queries"
}
parseEnabledLogs :: forall impl. Logging.EnabledLogTypes impl => Opt.Parser (Maybe (HashSet (Logging.EngineLogType impl)))
parseEnabledLogs =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "enabled-log-types"
<> Opt.help (Config._helpMessage (enabledLogsOption @impl))
)
enabledLogsOption :: Logging.EnabledLogTypes impl => Config.Option (HashSet (Logging.EngineLogType impl))
enabledLogsOption =
Config.Option
{ Config._default = Logging.defaultEnabledLogTypes,
Config._envVar = "HASURA_GRAPHQL_ENABLED_LOG_TYPES",
Config._helpMessage =
"Comma separated list of enabled log types "
<> "(default: "
<> defaultLogTypes
<> ")"
<> "(all: "
<> allAllowedLogTypes
<> ")"
}
where
defaultLogTypes = Text.unpack . Text.intercalate "," $ Witch.into @Text <$> HashSet.toList Logging.defaultEnabledEngineLogTypes
allAllowedLogTypes = Text.unpack . Text.intercalate "," $ Witch.into @Text <$> Logging.userAllowedLogTypes
parseLogLevel :: Opt.Parser (Maybe Logging.LogLevel)
parseLogLevel =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "log-level"
<> Opt.help (Config._helpMessage logLevelOption)
)
logLevelOption :: Config.Option Logging.LogLevel
logLevelOption =
Config.Option
{ Config._default = Logging.LevelInfo,
Config._envVar = "HASURA_GRAPHQL_LOG_LEVEL",
Config._helpMessage = "Server log level (default: info) (all: error, warn, info, debug)"
}
parsePlanCacheSize :: Opt.Parser (Maybe Bounded.CacheSize)
parsePlanCacheSize =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "query-plan-cache-size"
<> Opt.help
( "[DEPRECATED: value ignored.] The maximum number of query plans "
<> "that can be cached, allowed values: 0-65535, "
<> "0 disables the cache. Default 4000"
)
)
parseGraphqlDevMode :: Opt.Parser Bool
parseGraphqlDevMode =
Opt.switch
( Opt.long "dev-mode"
<> Opt.help (Config._helpMessage graphqlDevModeOption)
)
graphqlDevModeOption :: Config.Option Bool
graphqlDevModeOption =
Config.Option
{ Config._default = False,
Config._envVar = "HASURA_GRAPHQL_DEV_MODE",
Config._helpMessage = "Set dev mode for GraphQL requests; include 'internal' key in the errors extensions (if required) of the response"
}
parseGraphqlAdminInternalErrors :: Opt.Parser (Maybe Bool)
parseGraphqlAdminInternalErrors =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "admin-internal-errors"
<> Opt.help (Config._helpMessage graphqlAdminInternalErrorsOption)
)
graphqlAdminInternalErrorsOption :: Config.Option Bool
graphqlAdminInternalErrorsOption =
Config.Option
{ -- Default to `true` to enable backwards compatibility
Config._default = True,
Config._envVar = "HASURA_GRAPHQL_ADMIN_INTERNAL_ERRORS",
Config._helpMessage = "Enables including 'internal' information in an error response for requests made by an 'admin' (default: true)"
}
parseGraphqlEventsHttpPoolSize :: Opt.Parser (Maybe Numeric.PositiveInt)
parseGraphqlEventsHttpPoolSize =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "events-http-pool-size"
<> Opt.metavar (Config._envVar graphqlEventsHttpPoolSizeOption)
<> Opt.help (Config._helpMessage graphqlEventsHttpPoolSizeOption)
)
graphqlEventsHttpPoolSizeOption :: Config.Option Numeric.PositiveInt
graphqlEventsHttpPoolSizeOption =
Config.Option
{ Config._default = Numeric.unsafePositiveInt 100,
Config._envVar = "HASURA_GRAPHQL_EVENTS_HTTP_POOL_SIZE",
Config._helpMessage = "Max event processing threads (default: 100)"
}
parseGraphqlEventsFetchInterval :: Opt.Parser (Maybe (Numeric.NonNegative Milliseconds))
parseGraphqlEventsFetchInterval =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "events-fetch-interval"
<> Opt.metavar (Config._envVar graphqlEventsFetchIntervalOption)
<> Opt.help (Config._helpMessage graphqlEventsFetchIntervalOption)
)
graphqlEventsFetchIntervalOption :: Config.Option (Numeric.NonNegative Milliseconds)
graphqlEventsFetchIntervalOption =
Config.Option
{ Config._default = Numeric.unsafeNonNegative (1000 :: Milliseconds),
Config._envVar = "HASURA_GRAPHQL_EVENTS_FETCH_INTERVAL",
Config._helpMessage = "Interval in milliseconds to sleep before trying to fetch events again after a fetch returned no events from postgres (default: 1 second)."
}
parseGraphqlAsyncActionsFetchInterval :: Opt.Parser (Maybe Config.OptionalInterval)
parseGraphqlAsyncActionsFetchInterval =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "async-actions-fetch-interval"
<> Opt.metavar (Config._envVar asyncActionsFetchIntervalOption)
<> Opt.help (Config._helpMessage asyncActionsFetchIntervalOption)
)
asyncActionsFetchIntervalOption :: Config.Option Config.OptionalInterval
asyncActionsFetchIntervalOption =
Config.Option
{ Config._default = Config.Interval $ Numeric.unsafeNonNegative (1000 :: Milliseconds),
Config._envVar = "HASURA_GRAPHQL_ASYNC_ACTIONS_FETCH_INTERVAL",
Config._helpMessage =
"Interval in milliseconds to sleep before trying to fetch new async actions. "
++ "Value \"0\" implies completely disable fetching async actions from storage. "
++ "Default 1000 milliseconds"
}
parseEnableRemoteSchemaPerms :: Opt.Parser Options.RemoteSchemaPermissions
parseEnableRemoteSchemaPerms =
fmap (bool Options.DisableRemoteSchemaPermissions Options.EnableRemoteSchemaPermissions) $
Opt.switch
( Opt.long "enable-remote-schema-permissions"
<> Opt.help (Config._helpMessage enableRemoteSchemaPermsOption)
)
enableRemoteSchemaPermsOption :: Config.Option Options.RemoteSchemaPermissions
enableRemoteSchemaPermsOption =
Config.Option
{ Config._default = Options.DisableRemoteSchemaPermissions,
Config._envVar = "HASURA_GRAPHQL_ENABLE_REMOTE_SCHEMA_PERMISSIONS",
Config._helpMessage = "Enables remote schema permissions (default: false)"
}
parseWebSocketCompression :: Opt.Parser Bool
parseWebSocketCompression =
Opt.switch
( Opt.long "websocket-compression"
<> Opt.help (Config._helpMessage webSocketCompressionOption)
)
webSocketCompressionOption :: Config.Option Bool
webSocketCompressionOption =
Config.Option
{ Config._default = False,
Config._envVar = "HASURA_GRAPHQL_CONNECTION_COMPRESSION",
Config._helpMessage = "Enable WebSocket permessage-deflate compression (default: false)"
}
parseWebSocketKeepAlive :: Opt.Parser (Maybe Config.KeepAliveDelay)
parseWebSocketKeepAlive =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "websocket-keepalive"
<> Opt.help (Config._helpMessage webSocketKeepAliveOption)
)
-- NOTE: this is purely used by Apollo-Subscription-Transport-WS
webSocketKeepAliveOption :: Config.Option Config.KeepAliveDelay
webSocketKeepAliveOption =
Config.Option
{ Config._default = Config.KeepAliveDelay $ Numeric.unsafeNonNegative (5 :: Seconds),
Config._envVar = "HASURA_GRAPHQL_WEBSOCKET_KEEPALIVE",
Config._helpMessage = "Control websocket keep-alive timeout (default 5 seconds)"
}
parseInferFunctionPerms :: Opt.Parser (Maybe Options.InferFunctionPermissions)
parseInferFunctionPerms =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "infer-function-permissions"
<> Opt.help (Config._helpMessage inferFunctionPermsOption)
)
inferFunctionPermsOption :: Config.Option Options.InferFunctionPermissions
inferFunctionPermsOption =
Config.Option
{ Config._default = Options.InferFunctionPermissions,
Config._envVar = "HASURA_GRAPHQL_INFER_FUNCTION_PERMISSIONS",
Config._helpMessage = "Infers function permissions (default: true)"
}
parseEnableMaintenanceMode :: Opt.Parser (Types.MaintenanceMode ())
parseEnableMaintenanceMode =
fmap (bool Types.MaintenanceModeDisabled (Types.MaintenanceModeEnabled ())) $
Opt.switch
( Opt.long "enable-maintenance-mode"
<> Opt.help (Config._helpMessage enableMaintenanceModeOption)
)
enableMaintenanceModeOption :: Config.Option (Types.MaintenanceMode ())
enableMaintenanceModeOption =
Config.Option
{ Config._default = Types.MaintenanceModeDisabled,
Config._envVar = "HASURA_GRAPHQL_ENABLE_MAINTENANCE_MODE",
Config._helpMessage = "Flag to enable maintenance mode in the graphql-engine"
}
parseSchemaPollInterval :: Opt.Parser (Maybe Config.OptionalInterval)
parseSchemaPollInterval =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "schema-sync-poll-interval"
<> Opt.metavar (Config._envVar schemaPollIntervalOption)
<> Opt.help (Config._helpMessage schemaPollIntervalOption)
)
schemaPollIntervalOption :: Config.Option Config.OptionalInterval
schemaPollIntervalOption =
Config.Option
{ -- 1000 Milliseconds or 1 Second
Config._default = Config.Interval $ Numeric.unsafeNonNegative (1000 :: Milliseconds),
Config._envVar = "HASURA_GRAPHQL_SCHEMA_SYNC_POLL_INTERVAL",
Config._helpMessage = "Interval to poll metadata storage for updates in milliseconds - Default 1000 (1s) - Set to 0 to disable"
}
parseExperimentalFeatures :: Opt.Parser (Maybe (HashSet Types.ExperimentalFeature))
parseExperimentalFeatures =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "experimental-features"
<> Opt.help (Config._helpMessage experimentalFeaturesOption)
)
experimentalFeaturesOption :: Config.Option (HashSet Types.ExperimentalFeature)
experimentalFeaturesOption =
Config.Option
{ Config._default = HashSet.empty,
Config._envVar = "HASURA_GRAPHQL_EXPERIMENTAL_FEATURES",
Config._helpMessage =
"Comma separated list of experimental features. (all: inherited_roles,optimize_permission_filters and naming_convention, streaming_subscriptions, apollo_federation). "
<> "optimize_permission_filters: Use experimental SQL optimization"
<> "transformations for permission filters. "
<> "inherited_roles: ignored; inherited roles cannot be switched off"
<> "naming_convention: apply naming convention (graphql-default/hasura-default) based on source customization"
<> "apollo_federation: use hasura as a subgraph in an Apollo gateway"
<> "streaming_subscriptions: A streaming subscription streams the response according to the cursor provided by the user"
}
parseEventsFetchBatchSize :: Opt.Parser (Maybe Numeric.NonNegativeInt)
parseEventsFetchBatchSize =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "events-fetch-batch-size"
<> Opt.metavar (Config._envVar eventsFetchBatchSizeOption)
<> Opt.help (Config._helpMessage eventsFetchBatchSizeOption)
)
eventsFetchBatchSizeOption :: Config.Option Numeric.NonNegativeInt
eventsFetchBatchSizeOption =
Config.Option
{ Config._default = Numeric.unsafeNonNegativeInt 100,
Config._envVar = "HASURA_GRAPHQL_EVENTS_FETCH_BATCH_SIZE",
Config._helpMessage =
"The maximum number of events to be fetched from the events table in a single batch. Default 100"
++ "Value \"0\" implies completely disable fetching events from events table. "
}
parseGracefulShutdownTimeout :: Opt.Parser (Maybe (Numeric.NonNegative Seconds))
parseGracefulShutdownTimeout =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "graceful-shutdown-timeout"
<> Opt.metavar "<INTERVAL (seconds)>"
<> Opt.help (Config._helpMessage gracefulShutdownOption)
)
gracefulShutdownOption :: Config.Option (Numeric.NonNegative Seconds)
gracefulShutdownOption =
Config.Option
{ Config._default = Numeric.unsafeNonNegative (60 :: Seconds),
Config._envVar = "HASURA_GRAPHQL_GRACEFUL_SHUTDOWN_TIMEOUT",
Config._helpMessage =
"Timeout for graceful shutdown before which in-flight scheduled events, "
<> " cron events and async actions to complete (default: 60 seconds)"
}
parseWebSocketConnectionInitTimeout :: Opt.Parser (Maybe Config.WSConnectionInitTimeout)
parseWebSocketConnectionInitTimeout =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "websocket-connection-init-timeout"
<> Opt.help (Config._helpMessage webSocketConnectionInitTimeoutOption)
)
-- NOTE: this is purely used by GraphQL-WS
webSocketConnectionInitTimeoutOption :: Config.Option Config.WSConnectionInitTimeout
webSocketConnectionInitTimeoutOption =
Config.Option
{ Config._default = Config.WSConnectionInitTimeout $ Numeric.unsafeNonNegative 3,
Config._envVar = "HASURA_GRAPHQL_WEBSOCKET_CONNECTION_INIT_TIMEOUT", -- FIXME?: maybe a better name
Config._helpMessage = "Control websocket connection_init timeout (default 3 seconds)"
}
parseEnableMetadataQueryLogging :: Opt.Parser Server.Logging.MetadataQueryLoggingMode
parseEnableMetadataQueryLogging =
fmap (bool Server.Logging.MetadataQueryLoggingDisabled Server.Logging.MetadataQueryLoggingEnabled) $
Opt.switch
( Opt.long "enable-metadata-query-logging"
<> Opt.help (Config._helpMessage enableMetadataQueryLoggingOption)
)
enableMetadataQueryLoggingOption :: Config.Option Server.Logging.MetadataQueryLoggingMode
enableMetadataQueryLoggingOption =
Config.Option
{ Config._default = Server.Logging.MetadataQueryLoggingDisabled,
Config._envVar = "HASURA_GRAPHQL_ENABLE_METADATA_QUERY_LOGGING",
Config._helpMessage = "Enables the query field in http-logs for metadata queries (default: false)"
}
-- TODO(SOLOMON): The defaulting behavior for this occurs inside the Engine. In
-- an isolated PR we should move that defaulting in the parsing stage.
parseDefaultNamingConvention :: Opt.Parser (Maybe NamingCase)
parseDefaultNamingConvention =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "default-naming-convention"
<> Opt.help (Config._helpMessage defaultNamingConventionOption)
)
-- NOTE: This should be 'Config.Option NC.NamingCase' with a default
--of 'NC.HasuraCase' but 'ServeOptions' expects a 'Maybe
--NC.NamingCase' and HGE handles the defaulting explicitly. This
--should be changed in a subsequent PR.
defaultNamingConventionOption :: Config.Option ()
defaultNamingConventionOption =
Config.Option
{ Config._default = (),
Config._envVar = "HASURA_GRAPHQL_DEFAULT_NAMING_CONVENTION",
Config._helpMessage =
"Default naming convention for the auto generated graphql names. Possible values are"
<> "hasura-default: Use snake_case for all names."
<> "graphql-default: Use camelCase for field names and PascalCase for type names."
}
parseExtensionsSchema :: Opt.Parser (Maybe MonadTx.ExtensionsSchema)
parseExtensionsSchema =
Opt.optional $
Opt.option
(Opt.eitherReader Env.fromEnv)
( Opt.long "metadata-database-extensions-schema"
<> Opt.help (Config._helpMessage metadataDBExtensionsSchemaOption)
)
metadataDBExtensionsSchemaOption :: Config.Option MonadTx.ExtensionsSchema
metadataDBExtensionsSchemaOption =
Config.Option
{ Config._default = MonadTx.ExtensionsSchema "public",
Config._envVar = "HASURA_GRAPHQL_METADATA_DATABASE_EXTENSIONS_SCHEMA",
Config._helpMessage =
"Name of the schema where Hasura can install database extensions. Default: public"
}
--------------------------------------------------------------------------------
-- Pretty Printer
serveCmdFooter :: PP.Doc
serveCmdFooter =
examplesDoc PP.<$> PP.text "" PP.<$> envVarDoc
where
examplesDoc = PP.mkExamplesDoc examples
examples =
[ [ "# Start GraphQL Engine on default port (8080) with console enabled",
"graphql-engine --database-url <database-url> serve --enable-console"
],
[ "# Start GraphQL Engine on default port (8080) with console disabled",
"graphql-engine --database-url <database-url> serve"
],
[ "# Start GraphQL Engine on a different port (say 9090) with console disabled",
"graphql-engine --database-url <database-url> serve --server-port 9090"
],
[ "# Start GraphQL Engine with admin secret key",
"graphql-engine --database-url <database-url> serve --admin-secret <adminsecretkey>"
],
[ "# Start GraphQL Engine with restrictive CORS policy (only allow https://example.com:8080)",
"graphql-engine --database-url <database-url> serve --cors-domain https://example.com:8080"
],
[ "# Start GraphQL Engine with multiple domains for CORS (https://example.com, http://localhost:3000 and https://*.foo.bar.com)",
"graphql-engine --database-url <database-url> serve --cors-domain \"https://example.com, https://*.foo.bar.com, http://localhost:3000\""
],
[ "# Start GraphQL Engine with Authentication Webhook (GET)",
"graphql-engine --database-url <database-url> serve --admin-secret <adminsecretkey>"
<> " --auth-hook https://mywebhook.com/get"
],
[ "# Start GraphQL Engine with Authentication Webhook (POST)",
"graphql-engine --database-url <database-url> serve --admin-secret <adminsecretkey>"
<> " --auth-hook https://mywebhook.com/post --auth-hook-mode POST"
],
[ "# Start GraphQL Engine with telemetry enabled/disabled",
"graphql-engine --database-url <database-url> serve --enable-telemetry true|false"
],
[ "# Start GraphQL Engine with HTTP compression enabled for '/v1/query' and '/v1/graphql' endpoints",
"graphql-engine --database-url <database-url> serve --enable-compression"
],
[ "# Start GraphQL Engine with enable/disable including 'internal' information in an error response for the request made by an 'admin'",
"graphql-engine --database-url <database-url> serve --admin-internal-errors true|false"
]
]
envVarDoc = PP.mkEnvVarDoc $ envVars <> eventEnvs
envVars =
[ Config.optionPP servePortOption,
Config.optionPP serveHostOption,
Config.optionPP pgStripesOption,
Config.optionPP pgConnsOption,
Config.optionPP pgTimeoutOption,
Config.optionPP pgConnLifetimeOption,
Config.optionPP pgUsePreparedStatementsOption,
Config.optionPP pgPoolTimeoutOption,
Config.optionPP txIsolationOption,
Config.optionPP adminSecretOption,
Config.optionPP accessKeyOption,
Config.optionPP authHookOption,
Config.optionPP authHookModeOption,
Config.optionPP jwtSecretOption,
Config.optionPP unAuthRoleOption,
Config.optionPP corsDomainOption,
Config.optionPP disableCorsOption,
Config.optionPP enableConsoleOption,
Config.optionPP consoleAssetsDirOption,
Config.optionPP enableTelemetryOption,
Config.optionPP wsReadCookieOption,
Config.optionPP stringifyNumOption,
Config.optionPP dangerousBooleanCollapseOption,
Config.optionPP enabledAPIsOption,
Config.optionPP mxRefetchDelayOption,
Config.optionPP mxBatchSizeOption,
Config.optionPP streamingMxRefetchDelayOption,
Config.optionPP streamingMxBatchSizeOption,
Config.optionPP enableAllowlistOption,
Config.optionPP (enabledLogsOption @Logging.Hasura),
Config.optionPP logLevelOption,
Config.optionPP graphqlDevModeOption,
Config.optionPP graphqlAdminInternalErrorsOption,
Config.optionPP graphqlEventsHttpPoolSizeOption,
Config.optionPP graphqlEventsFetchIntervalOption,
Config.optionPP asyncActionsFetchIntervalOption,
Config.optionPP enableRemoteSchemaPermsOption,
Config.optionPP webSocketCompressionOption,
Config.optionPP webSocketKeepAliveOption,
Config.optionPP inferFunctionPermsOption,
Config.optionPP enableMaintenanceModeOption,
Config.optionPP schemaPollIntervalOption,
Config.optionPP experimentalFeaturesOption,
Config.optionPP eventsFetchBatchSizeOption,
Config.optionPP gracefulShutdownOption,
Config.optionPP webSocketConnectionInitTimeoutOption,
Config.optionPP enableMetadataQueryLoggingOption,
Config.optionPP defaultNamingConventionOption,
Config.optionPP metadataDBExtensionsSchemaOption
]
eventEnvs = [Config.optionPP graphqlEventsHttpPoolSizeOption, Config.optionPP graphqlEventsFetchIntervalOption]