Key

Default value

Description

endpoints.sessions.cache.time-to-live

0

Maximum time in milliseconds that a response can be cached.

endpoints.sessions.enabled

Enable the sessions endpoint.

endpoints.sessions.jmx.enabled

Expose the sessions endpoint as a JMX MBean.

endpoints.sessions.web.enabled

Expose the sessions endpoint as a Web endpoint.

spring.kafka.admin.client-id

Id to pass to the server when making requests; used for server-side logging.

spring.kafka.admin.fail-fast

false

Fail fast if the broker is not available on startup.

spring.kafka.admin.properties

Additional admin-specific properties used to configure the client.

spring.kafka.admin.ssl.key-password

Password of the private key in the key store file.

spring.kafka.admin.ssl.keystore-location

Location of the key store file.

spring.kafka.admin.ssl.keystore-password

Store password for the key store file.

spring.kafka.admin.ssl.truststore-location

Location of the trust store file.

spring.kafka.admin.ssl.truststore-password

Store password for the trust store file.

spring.messages.use-code-as-default-message

false

Set whether to use the message code as default message instead of throwing a "NoSuchMessageException".

spring.metrics.graphite.protocol

Protocol to use while shipping data to Graphite.

spring.metrics.statsd.enabled

true

Enable publishing to the backend.

spring.metrics.statsd.flavor

Variant of the StatsD line protocol to use.

spring.metrics.statsd.host

localhost

Host name of the StatsD agent.

spring.metrics.statsd.max-packet-length

1400

Total length of a single payload should be kept within your network’s MTU.

spring.metrics.statsd.polling-frequency

10

Determines how often gauges will be polled.

spring.metrics.statsd.port

8125

UDP port of the StatsD agent.

spring.metrics.statsd.queue-size

Governs the maximum size of the queue of items waiting to be sent to a StatsD agent over UDP.

spring.metrics.statsd.timer-percentiles-max

2

Used to create a bucket filter clamping the bucket domain of timer percentiles histograms to some max value.

spring.metrics.statsd.timer-percentiles-min

10

Used to create a bucket filter clamping the bucket domain of timer percentiles histograms to some min value.

spring.rabbitmq.ssl.key-store-type

PKCS12

Key store type.

spring.rabbitmq.ssl.trust-store-type

JKS

Trust store type.

spring.security.oauth2.client.provider

OAuth provider details.

spring.security.oauth2.client.registration

OAuth client registrations.

spring.session.mongodb.collection-name

sessions

Collection name used to store sessions.

spring.thymeleaf.reactive.chunked-mode-view-names

Comma-separated list of view names (patterns allowed) that should be the only ones executed in CHUNKED mode when a max chunk size is set.

spring.thymeleaf.reactive.full-mode-view-names

Comma-separated list of view names (patterns allowed) that should be executed in FULL mode even if a max chunk size is set.

spring.webservices.wsdl-locations

Comma-separated list of locations of WSDLs and accompanying XSDs to be exposed as beans.

Key

Default value

Description

endpoints.actuator.enabled

Enable the endpoint.

endpoints.actuator.path

Endpoint URL path.

endpoints.actuator.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.auditevents.path

Endpoint URL path.

endpoints.auditevents.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.autoconfig.id

Endpoint identifier.

endpoints.autoconfig.path

Endpoint URL path.

endpoints.autoconfig.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.beans.id

Endpoint identifier.

endpoints.beans.path

Endpoint URL path.

endpoints.beans.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.configprops.id

Endpoint identifier.

endpoints.configprops.path

Endpoint URL path.

endpoints.configprops.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.cors.allow-credentials

Set whether credentials are supported.

endpoints.cors.allowed-headers

Comma-separated list of headers to allow in a request. '*' allows all headers.

endpoints.cors.allowed-methods

Comma-separated list of methods to allow. '*' allows all methods.

endpoints.cors.allowed-origins

Comma-separated list of origins to allow. '*' allows all origins.

endpoints.cors.exposed-headers

Comma-separated list of headers to include in a response.

endpoints.cors.max-age

1800

How long, in seconds, the response from a pre-flight request can be cached by clients.

endpoints.docs.curies.enabled

false

Enable the curie generation.

endpoints.docs.enabled

Enable the endpoint.

endpoints.docs.path

Endpoint URL path.

endpoints.docs.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.dump.enabled

Enable the endpoint.

endpoints.dump.id

Endpoint identifier.

endpoints.dump.path

Endpoint URL path.

endpoints.dump.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.enabled

true

Enable endpoints.

endpoints.env.id

Endpoint identifier.

endpoints.env.path

Endpoint URL path.

endpoints.env.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.flyway.id

Endpoint identifier.

endpoints.flyway.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.health.id

Endpoint identifier.

endpoints.health.mapping

Mapping of health statuses to HttpStatus codes.

endpoints.health.path

Endpoint URL path.

endpoints.health.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.health.time-to-live

1000

Time to live for cached result, in milliseconds.

endpoints.heapdump.path

Endpoint URL path.

endpoints.heapdump.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.hypermedia.enabled

false

Enable hypermedia support for endpoints.

endpoints.info.id

Endpoint identifier.

endpoints.info.path

Endpoint URL path.

endpoints.info.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.jmx.domain

JMX domain name.

endpoints.jmx.enabled

true

Enable JMX export of all endpoints.

endpoints.jmx.static-names

Additional static properties to append to all ObjectNames of MBeans representing Endpoints.

endpoints.jmx.unique-names

false

Ensure that ObjectNames are modified in case of conflict.

endpoints.jolokia.enabled

Enable the endpoint.

endpoints.jolokia.path

Endpoint URL path.

endpoints.jolokia.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.liquibase.id

Endpoint identifier.

endpoints.liquibase.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.logfile.path

Endpoint URL path.

endpoints.logfile.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.loggers.id

Endpoint identifier.

endpoints.loggers.path

Endpoint URL path.

endpoints.loggers.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.mappings.id

Endpoint identifier.

endpoints.mappings.path

Endpoint URL path.

endpoints.mappings.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.metrics.filter.counter-submissions

Submissions that should be made to the counter.

endpoints.metrics.filter.enabled

true

Enable the metrics servlet filter.

endpoints.metrics.filter.gauge-submissions

Submissions that should be made to the gauge.

endpoints.metrics.id

Endpoint identifier.

endpoints.metrics.path

Endpoint URL path.

endpoints.metrics.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.sensitive

Default endpoint sensitive setting.

endpoints.shutdown.id

Endpoint identifier.

endpoints.shutdown.path

Endpoint URL path.

endpoints.shutdown.sensitive

Mark if the endpoint exposes sensitive information.

endpoints.trace.filter.enabled

true

Enable the trace servlet filter.

endpoints.trace.id

Endpoint identifier.

endpoints.trace.path

Endpoint URL path.

endpoints.trace.sensitive

Mark if the endpoint exposes sensitive information.

flyway.baseline-description

flyway.baseline-on-migrate

flyway.baseline-version

flyway.check-location

false

Check that migration scripts location exists.

flyway.clean-on-validation-error

flyway.enabled

true

Enable flyway.

flyway.encoding

flyway.ignore-failed-future-migration

flyway.init-description

flyway.init-on-migrate

flyway.init-sqls

SQL statements to execute to initialize a connection immediately after obtaining it.

flyway.init-version

flyway.locations

Locations of migrations scripts.

flyway.out-of-order

flyway.password

Login password of the database to migrate.

flyway.placeholder-prefix

flyway.placeholder-replacement

flyway.placeholder-suffix

flyway.placeholders

flyway.schemas

flyway.sql-migration-prefix

flyway.sql-migration-separator

flyway.sql-migration-suffix

flyway.table

flyway.target

flyway.url

JDBC url of the database to migrate.

flyway.user

Login user of the database to migrate.

flyway.validate-on-migrate

jolokia.config

Jolokia settings.

liquibase.change-log

classpath:/db/changelog/db.changelog-master.yaml

Change log configuration path.

liquibase.check-change-log-location

true

Check the change log location exists.

liquibase.contexts

Comma-separated list of runtime contexts to use.

liquibase.default-schema

Default database schema.

liquibase.drop-first

false

Drop the database schema first.

liquibase.enabled

true

Enable liquibase support.

liquibase.labels

Comma-separated list of runtime labels to use.

liquibase.parameters

Change log parameters.

liquibase.password

Login password of the database to migrate.

liquibase.rollback-file

File to which rollback SQL will be written when an update is performed.

liquibase.url

JDBC url of the database to migrate.

liquibase.user

Login user of the database to migrate.

management.security.enabled

true

Enable security.

management.security.roles

Comma-separated list of roles that can access the management endpoint.

management.security.sessions

stateless

Session creating policy for security use (always, never, if_required, stateless).

management.shell.auth.jaas.domain

my-domain

JAAS domain.

management.shell.auth.key.path

Path to the authentication key.

management.shell.auth.simple.user.name

user

Login user.

management.shell.auth.simple.user.password

Login password.

management.shell.auth.spring.roles

ACTUATOR

Comma-separated list of required roles to login to the CRaSH console.

management.shell.auth.type

simple

Authentication type.

management.shell.command-path-patterns

classpath*:/commands/,classpath*:/crash/commands/

Patterns to use to look for commands.

management.shell.command-refresh-interval

-1

Scan for changes and update the command if necessary (in seconds).

management.shell.config-path-patterns

classpath*:/crash/*

Patterns to use to look for configurations.

management.shell.disabled-commands

jpa*,jdbc*,jndi*

Comma-separated list of commands to disable.

management.shell.disabled-plugins

``

Comma-separated list of plugins to disable.

management.shell.ssh.auth-timeout

600000

Number of milliseconds after user will be prompted to login again.

management.shell.ssh.enabled

true

Enable CRaSH SSH support.

management.shell.ssh.idle-timeout

600000

Number of milliseconds after which unused connections are closed.

management.shell.ssh.key-path

Path to the SSH server key.

management.shell.ssh.port

2000

SSH port.

management.shell.telnet.enabled

false

Enable CRaSH telnet support.

management.shell.telnet.port

5000

Telnet port.

security.basic.authorize-mode

role

Security authorize mode to apply.

security.basic.enabled

true

Enable basic authentication.

security.basic.path

/**

Comma-separated list of paths to secure.

security.basic.realm

Spring

HTTP basic realm name.

security.enable-csrf

false

Enable Cross Site Request Forgery support.

security.filter-dispatcher-types

Security filter chain dispatcher types.

security.filter-order

0

Security filter chain order.

security.headers.cache

true

Enable cache control HTTP headers.

security.headers.content-security-policy

Value for content security policy header.

security.headers.content-security-policy-mode

default

Content security policy mode.

security.headers.content-type

true

Enable "X-Content-Type-Options" header.

security.headers.frame

true

Enable "X-Frame-Options" header.

security.headers.hsts

all

HTTP Strict Transport Security (HSTS) mode (none, domain, all).

security.headers.xss

true

Enable cross site scripting (XSS) protection.

security.ignored

Comma-separated list of paths to exclude from the default secured paths.

security.oauth2.authorization.check-token-access

Spring Security access rule for the check token endpoint (e.g. a SpEL expression like "isAuthenticated()") .

security.oauth2.authorization.realm

Realm name for client authentication.

security.oauth2.authorization.token-key-access

Spring Security access rule for the token key endpoint (e.g. a SpEL expression like "isAuthenticated()").

security.oauth2.client.access-token-uri

security.oauth2.client.access-token-validity-seconds

security.oauth2.client.additional-information

security.oauth2.client.authentication-scheme

security.oauth2.client.authorities

security.oauth2.client.authorized-grant-types

security.oauth2.client.auto-approve-scopes

security.oauth2.client.client-authentication-scheme

security.oauth2.client.client-id

security.oauth2.client.client-secret

security.oauth2.client.grant-type

security.oauth2.client.id

security.oauth2.client.pre-established-redirect-uri

security.oauth2.client.refresh-token-validity-seconds

security.oauth2.client.registered-redirect-uri

security.oauth2.client.resource-ids

security.oauth2.client.scope

security.oauth2.client.token-name

security.oauth2.client.use-current-uri

security.oauth2.client.user-authorization-uri

security.oauth2.resource.filter-order

0

The order of the filter chain used to authenticate tokens.

security.oauth2.resource.id

Identifier of the resource.

security.oauth2.resource.jwk.key-set-uri

The URI to get verification keys to verify the JWT token.

security.oauth2.resource.jwt.key-uri

The URI of the JWT token.

security.oauth2.resource.jwt.key-value

The verification key of the JWT token.

security.oauth2.resource.prefer-token-info

true

Use the token info, can be set to false to use the user info.

security.oauth2.resource.service-id

resource

security.oauth2.resource.token-info-uri

URI of the token decoding endpoint.

security.oauth2.resource.token-type

The token type to send when using the userInfoUri.

security.oauth2.resource.user-info-uri

URI of the user endpoint.

security.oauth2.sso.filter-order

Filter order to apply if not providing an explicit WebSecurityConfigurerAdapter (in which case the order can be provided there instead).

security.oauth2.sso.login-path

/login

Path to the login page, i.e. the one that triggers the redirect to the OAuth2 Authorization Server.

security.require-ssl

false

Enable secure channel for all requests.

security.sessions

stateless

Session creation policy (always, never, if_required, stateless).

security.user.name

user

Default user name.

security.user.password

Password for the default user name.

security.user.role

Granted roles for the default user name.

server.context-parameters

ServletContext parameters.

server.context-path

Context path of the application.

server.jsp-servlet.class-name

server.jsp-servlet.init-parameters

server.jsp-servlet.registered

server.max-http-post-size

0

Maximum size in bytes of the HTTP post content.

server.servlet-path

/

Path of the main dispatcher servlet.

server.undertow.buffers-per-region

Number of buffer per region.

spring.batch.initializer.enabled

Create the required batch tables on startup if necessary.

spring.data.neo4j.compiler

Compiler to use.

spring.devtools.remote.debug.enabled

true

Enable remote debug support.

spring.devtools.remote.debug.local-port

8000

Local remote debug server port.

spring.http.multipart.enabled

true

Enable support of multipart uploads.

spring.http.multipart.file-size-threshold

0

Threshold after which files will be written to disk.

spring.http.multipart.location

Intermediate location of uploaded files.

spring.http.multipart.max-file-size

1MB

Max file size.

spring.http.multipart.max-request-size

10MB

Max request size.

spring.http.multipart.resolve-lazily

false

Whether to resolve the multipart request lazily at the time of file or parameter access.

spring.jpa.hibernate.naming.strategy

Hibernate 4 naming strategy fully qualified name.

spring.metrics.export.aggregate.key-pattern

``

Pattern that tells the aggregator what to do with the keys from the source repository.

spring.metrics.export.aggregate.prefix

``

Prefix for global repository if active.

spring.metrics.export.delay-millis

Delay in milliseconds between export ticks.

spring.metrics.export.enabled

true

Flag to enable metric export (assuming a MetricWriter is available).

spring.metrics.export.excludes

List of patterns for metric names to exclude.

spring.metrics.export.includes

List of patterns for metric names to include.

spring.metrics.export.redis.key

keys.spring.metrics

Key for redis repository export (if active).

spring.metrics.export.redis.prefix

spring.metrics

Prefix for redis repository if active.

spring.metrics.export.send-latest

Flag to switch off any available optimizations based on not exporting unchanged metric values.

spring.metrics.export.statsd.host

Host of a statsd server to receive exported metrics.

spring.metrics.export.statsd.port

8125

Port of a statsd server to receive exported metrics.

spring.metrics.export.statsd.prefix

Prefix for statsd exported metrics.

spring.metrics.export.triggers

Specific trigger properties per MetricWriter bean name.

spring.redis.pool.max-active

8

Max number of connections that can be allocated by the pool at a given time.

spring.redis.pool.max-idle

8

Max number of "idle" connections in the pool.

spring.redis.pool.max-wait

-1

Maximum amount of time (in milliseconds) a connection allocation should block before throwing an exception when the pool is exhausted.

spring.redis.pool.min-idle

0

Target for the minimum number of idle connections to maintain in the pool.

spring.sendgrid.password

SendGrid password.

spring.sendgrid.username

SendGrid username.

spring.session.jdbc.initializer.enabled

Create the required session tables on startup if necessary.

spring.thymeleaf.content-type

text/html

Content-Type value.