File: //home/arjun/projects/env/lib/python3.10/site-packages/gunicorn/__pycache__/config.cpython-310.pyc
o
%we�� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl m Z m
Z
d dlmZ d dlmZ g Ze jZd�dd�Zdd� ZG d d
� d
e�ZG d d � d e�ZG d
d� de�Zedefi �Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Z!dd � Z"d d � Z#d d � Z$d!d"� Z%d#d$� Z&d%d&� Z'd'd(� Z(d)d*� Z)d+d,� Z*d-d.� Z+d/d0� Z,d1d2� Z-G d3d4� d4e�Z.G d5d6� d6e�Z/G d7d8� d8e�Z0G d9d:� d:e�Z1G d;d<� d<e�Z2G d=d>� d>e�Z3G d?d@� d@e�Z4G dAdB� dBe�Z5G dCdD� dDe�Z6G dEdF� dFe�Z7G dGdH� dHe�Z8G dIdJ� dJe�Z9G dKdL� dLe�Z:G dMdN� dNe�Z;G dOdP� dPe�Z<G dQdR� dRe�Z=G dSdT� dTe�Z>G dUdV� dVe�Z?G dWdX� dXe�Z@G dYdZ� dZe�ZAG d[d\� d\e�ZBG d]d^� d^e�ZCG d_d`� d`e�ZDG dadb� dbe�ZEG dcdd� dde�ZFG dedf� dfe�ZGG dgdh� dhe�ZHG didj� dje�ZIG dkdl� dle�ZJG dmdn� dne�ZKG dodp� dpe�ZLG dqdr� dre�ZMG dsdt� dte�ZNG dudv� dve�ZOG dwdx� dxe�ZPG dydz� dze�ZQG d{d|� d|e�ZRG d}d~� d~e�ZSG dd�� d�e�ZTG d�d�� d�e�ZUG d�d�� d�e�ZVG d�d�� d�e�ZWG d�d�� d�e�ZXG d�d�� d�e�ZYG d�d�� d�e�ZZG d�d�� d�e�Z[G d�d�� d�e�Z\G d�d�� d�e�Z]G d�d�� d�e�Z^G d�d�� d�e�Z_G d�d�� d�e�Z`G d�d�� d�e�ZaG d�d�� d�e�ZbG d�d�� d�e�ZcG d�d�� d�e�ZdG d�d�� d�e�ZeG d�d�� d�e�ZfG d�d�� d�e�ZgG d�d�� d�e�ZhG d�d�� d�e�ZiG d�d�� d�e�ZjG d�d�� d�e�ZkG d�d�� d�e�ZlG d�d�� d�e�ZmG d�d�� d�e�ZnG d�d�� d�e�ZoG d�d�� d�e�ZpG d�d�� d�e�ZqG d�d�� d�e�ZrG d�d�� d�e�ZsG d�d�� d�e�ZtG d�d d�e�ZuG d�dĄ d�e�ZvG d�dƄ d�e�ZwG d�dȄ d�e�ZxG d�dʄ d�e�ZyG d�d̄ d�e�ZzG d�d΄ d�e�Z{G d�dЄ d�e�Z|G d�d҄ d�e�Z}G d�dԄ d�e�Z~G d�dք d�e�ZG d�d d�e�Z�G d�dڄ d�e�Z�G d�d܄ d�e�Z�G d�dބ d�e�Z�G d�d� d�e�Z�dS )�� N)� __version__�util)� ConfigError)�reloader_enginesc C s: i }| pd} t D ]}|� }|j| v rq|�� ||j< q|S )N� )�KNOWN_SETTINGS�name�copy)�ignore�settings�s�settingr r �H/home/arjun/projects/env/lib/python3.10/site-packages/gunicorn/config.py�
make_settings s
r c C s( t �d|t j�r|�ddd�}t|d�S )Nz0(\d)�0�0o� r )�re�match�
IGNORECASE�replace�int)�_�xr r r �auto_int' s
r c s� e Zd Zd*dd�Zdd� Zdd� Z� fdd �Zd
d � Zd d
� Zdd� Z e
dd� �Z e
dd� �Z e
dd� �Z
e
dd� �Ze
dd� �Ze
dd� �Ze
d d � �Ze
d d � �Ze
d d!� �Ze
d"d#� �Ze
d$d%� �Ze
d&d'� �Ze
d(d)� �Z� ZS )+�ConfigNc C s6 t � | _|| _|ptj�tjd �| _tj �
� | _ d S )Nr ) r r �usage�os�path�basename�sys�argv�prog�environr �env_orig)�selfr r" r r r �__init__0 s zConfig.__init__c C sh g }t dd� | jD ��}t| j�D ] }| j| j}t|�r#d�|j�}|�dj|||d�� qd�|�S )Nc s s � | ]}t |�V qd S �N)�len)�.0�kr r r � <genexpr>8 s � z!Config.__str__.<locals>.<genexpr>z<{}()>z{k:{kmax}} = {v})r* �v�kmax�
) �maxr �sorted�value�callable�format� __qualname__�append�join)r% �linesr- r* r, r r r �__str__6 s
zConfig.__str__c C s$ || j vr td| ��| j | �� S �Nz No configuration setting for: %s)r �AttributeError�get)r% r r r r � __getattr__@ s
zConfig.__getattr__c s, |dkr
|| j v r
td��t� �||� d S )Nr zInvalid access!)r r: �super� __setattr__�r% r r1 �� __class__r r r> E s zConfig.__setattr__c C s* || j vr td| ��| j | �|� d S r9 )r r: �setr? r r r rB J s
z
Config.setc C s d| j v r
t�| j d �S g S )N�GUNICORN_CMD_ARGS)r$ �shlex�split�r% r r r �get_cmd_args_from_envO s
z Config.get_cmd_args_from_envc C s� | j | jd�}tjd
i |��}|jdddtjdt d dd� |jd d
tjd � t| j| jj d �}|D ]
}| j| �
|� q3|S )N)r r" z-vz --version�versionz%(prog)s (version z)
z&show program's version number and exit)�action�defaultrH �help�args�*)�nargsrK )�keyr ) r r" �argparse�ArgumentParser� add_argument�SUPPRESSr r0 r � __getitem__�
add_option)r% �kwargs�parser�keysr* r r r rW T s �
�z
Config.parserc C s6 | j d �� }|�d�p|dk}|r| jdkrdS |S )N� worker_class�
SyncWorker�syncr �gthread)r r; �endswith�threads)r% �uri�is_syncr r r �worker_class_strf s
zConfig.worker_class_strc C sR | j d �� }|�d�p|dk}|r| jdkrd}t�|�}t|d�r'|�� |S )NrY rZ r[ r z%gunicorn.workers.gthread.ThreadWorker�setup)r r; r] r^ r �
load_class�hasattrrb )r% r_ r` rY r r r rY p s
zConfig.worker_classc C s | j d �� }dd� |D �S )N�bindc S s g | ]
}t �t �|���qS r )r �
parse_address� bytes_to_str)r) re r r r �
<listcomp>� s z"Config.address.<locals>.<listcomp>�r r; )r% r r r r �address~ s zConfig.addressc C � | j d �� S )N�userri rF r r r �uid� � z
Config.uidc C rk )N�groupri rF r r r �gid� rn z
Config.gidc C s( | j d �� }|d ur
|S | j d �� S )N� proc_name�default_proc_nameri )r% �pnr r r rq � s zConfig.proc_namec C sj | j d �� }|dkrtj}|tjkr"d| j v r"| j d jd ur"d}tj|ddd�}t|d�r3|�� |S ) N� logger_class�simple� statsd_hostz!gunicorn.instrument.statsd.Statsd�gunicorn.glogging.Loggerzgunicorn.loggers)rJ �section�install) r r; � LoggerClassrJ r1 r rc rd ry )r% r_ rt r r r rt � s
�
zConfig.logger_classc C s | j p| jS r' )�certfile�keyfilerF r r r �is_ssl� s z
Config.is_sslc C s2 i }| j �� D ]\}}|jdkr|�� ||< q|S )N�SSL)r �itemsrx r; )r% �optsr r1 r r r � ssl_options� s
�zConfig.ssl_optionsc C sj | j d �� }i }|s
|S |D ]#}t�|�}z
|�dd�\}}W n
ty- td| ��w |||< q|S )N�raw_env�=r � environment setting %r invalid)r r; r rg rE �
ValueError� RuntimeError)r% r� �env�er r* r, r r r r� � s
�
z
Config.envc C s: | j d �� d ur dS dtjv rtjd �� }|dv S dS )N�sendfileF�SENDFILE)�y�1�yes�trueT)r r; r r# �lower)r% r� r r r r� � s
zConfig.sendfilec C rk )N�
reuse_portri rF r r r r� � rn zConfig.reuse_portc C s� | j d �� }|d u r
d S i }|D ]0}t�|�}z t�d|d�\}}W n
ty0 td| ��w |�dd�}|�dd�}|||< q|S )N�raw_paste_global_confz(?<!\\)=r r� z\=r� ) r r; r rg r rE r� r� r )r% �raw_global_conf� global_confr� r r* r, r r r �paste_global_conf� s
�
zConfig.paste_global_conf)NN)�__name__�
__module__r4 r& r8 r< r> rB rG rW �propertyra rY rj rm rp rq rt r} r� r� r� r� r� �
__classcell__r r r@ r r . sD
r c s$ e Zd Z� fdd�Zdd� Z� ZS )� SettingMetac sr t � j}dd� |D �}|s|| |||�S tt�|d< t|d �|d< || |||�}|�|�dd�� t�|� |S )Nc S s g | ] }t |t�r|�qS r )�
isinstancer� )r) �br r r rh � s z'SettingMeta.__new__.<locals>.<listcomp>�order� validator�desc� )r= �__new__r( r � staticmethod�fmt_descr; r5 )�clsr �bases�attrs� super_new�parents� new_classr@ r r r� � s
zSettingMeta.__new__c C s2 t �|��� }t| d|� t| d|�� d � d S )Nr� �shortr )�textwrap�dedent�strip�setattr�
splitlines)r� r� r r r r� � s zSettingMeta.fmt_desc)r� r� r4 r� r� r� r r r@ r r� � s r� c @ s| e Zd ZdZdZdZdZdZdZdZ dZ
dZ dZ dZ
dZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� ZeZdd� ZdS )�SettingNc C s | j d ur
| �| j � d S d S r' )rJ rB rF r r r r& s
�zSetting.__init__c C s� | j sd S t| j �}d| j| jf }|�dd�}| j| jp d| jp"td |d�}| j d ur1| j |d< |d dkr<|�
d� | j d urF| j |d < | j d urP| j |d
< |j
|i |�� d S ) Nz%s [%s]�%z%%�store)�destrI �typerJ rK �metavarrI r� rN �const)�cli�tupler� rJ r r rI r� �str�meta�poprN r� rR )r% rW rL �help_txtrV r r r rU s(
�
zSetting.add_optionc C s
t � | �S r' )r rF r r r r 1 s
z Setting.copyc C s | j S r' )r1 rF r r r r; 4 � z Setting.getc C s( t | j�s td| j ��| �|�| _d S )NzInvalid validator: %s)r2 r� � TypeErrorr r1 )r% �valr r r rB 7 s
z Setting.setc C s | j |j ko | j|jk S r' )rx r� )r% �otherr r r �__lt__< s
�zSetting.__lt__c C s d| j j| j jt| �| jf S )Nz"<%s.%s object at %x with value %r>)rA r� r� �idr1 rF r r r �__repr__A s �zSetting.__repr__)r� r� r4 r r1 rx r� r� r� r� rI rJ r� r� rN r� r& rU r r; rB r� �__cmp__r� r r r r r� s, r� c C sd | d u rd S t | t�r
| S t | t�std| ��| �� �� dkr"dS | �� �� dkr,dS td| ��)Nz Invalid type for casting: %sr� T�falseFzInvalid boolean: %s)r� �boolr� r� r� r� r� �r� r r r �
validate_boolM s
r� c C s t | t�s td| ��| S )Nz Value is not a dictionary: %s )r� �dictr� r� r r r �
validate_dict] �
r� c C s6 t | t�s t| d�} nt| �} | dk rtd| ��| S )Nr zValue must be positive: %s)r� r r� r� r r r �validate_pos_intc s
r� c C s | t jkr tj�d� | S )NzXWarning: option `ssl_version` is deprecated and it is ignored. Use ssl_context instead.
)�
SSLVersionrJ r �stderr�writer� r r r �validate_ssl_versionn r� r� c C s* | d u rd S t | t�std| ��| �� S )NzNot a string: %s)r� r� r� r� r� r r r �validate_stringt s
r� c C s( | d u rd S t j�| �std| ��| S )NzFile %s does not exists.)r r �existsr� r� r r r �validate_file_exists| s
r� c C s& | sg S t | t�r | g} dd� | D �S )Nc S � g | ]}t |��qS r )r� �r) r, r r r rh � � z(validate_list_string.<locals>.<listcomp>)r� r� r� r r r �validate_list_string� s
r� c C s dd� t | �D �S )Nc S r� r )r� r� r r r rh � r� z3validate_list_of_existing_files.<locals>.<listcomp>)r� r� r r r � validate_list_of_existing_files� s r� c C s$ t | �} | sg S dd� | �d�D �S )Nc S s g | ]}|r|� � �qS r )r� r� r r r rh � s z+validate_string_to_list.<locals>.<listcomp>�,)r� rE r� r r r �validate_string_to_list� s r� c C s0 t �| �s
t �| �r
| � } t �| �r| S t| �S r' )�inspect�
isfunction�ismethod�isclassr� r� r r r �validate_class� s
r� c s � fdd�}|S )Nc
s� t | t�rLz
| �dd�\}}W n
ty td| ��w zt||gd�}t||�} W n ty= } ztt|���d }~w tyK td||f ��w t | �sVtd| ��� dkrg� t
� | �krgtd� ��| S ) N�.r zFValue '%s' is not import string. Format: module[.submodules...].object)�fromlistzCan not load '%s' from '%s'zValue is not callable: %s���z Value must have an arity of: %s) r� r� �rsplitr� r� �
__import__�getattr� ImportErrorr: r2 r � get_arity)r� �mod_name�obj_name�modr� ��arityr r �_validate_callable� s0
�� � �� z-validate_callable.<locals>._validate_callabler )r� r� r r� r �validate_callable� s r� c C �X | d u rt �� S t| t�r| S | �� rt| �S zt�| �jW S ty+ t d| ��w )NzNo such user: '%s')
r �geteuidr� r �isdigit�pwd�getpwnam�pw_uid�KeyErrorr r� r r r �
validate_user� s
�r� c C r� )NzNo such group: '%s')
r �getegidr� r r� �grp�getgrnam�gr_gidr� r r� r r r �validate_group� s
�r� c sR t d�� �� t�� �}|dkr� S |dkr� fdd�S |dkr%� fdd�S td��) Nr� � � c s � | ||�S r' r )�worker�reqr� �_rr� r r �<lambda>� s z'validate_post_request.<locals>.<lambda>� c s
� | |�S r' r )r� r� �_er� r� r r r � s
z Value must have an arity of: 4)r� r r� r� )r� �largsr r� r �validate_post_request� s
r c C sF t | �} tj�tj�tj�t�� | ���}tj�|�s!t d| ��|S )Nzcan't chdir to %r)
r� r r �abspath�normpathr6 r �getcwdr� r )r� r r r r �validate_chdir� s
" r c C sb t | �} | d u r
d S t�d| �}|rdt|�d��fS z
tj| dd�}W |S ty0 td��w )Nz ^unix:(\d+)$�unixr �8125)� default_portz1Value must be one of ('host:port', 'unix://PATH')) r� r r r ro r rf r� r� )r� �unix_hostname_regressionrj r r r �validate_statsd_address� s ��r
c C s | t vr
td| ��| S )NzInvalid reload_engine: %r)r r r� r r r �validate_reload_engine
s r c C s. t j�t j�t �� �d�} t j�| �r| S d S )Nzgunicorn.conf.py)r r r6 r r r� )� config_pathr r r �get_default_config_file s � r c @ �, e Zd ZdZdZddgZdZeZdZ dZ
dS ) �
ConfigFile�config� Config Filez-cz--config�CONFIGz./gunicorn.conf.pya :ref:`The Gunicorn config file<configuration_file>`.
A string of the form ``PATH``, ``file:PATH``, or ``python:MODULE_NAME``.
Only has an effect when specified on the command line or as part of an
application specific configuration.
By default, a file named ``gunicorn.conf.py`` will be read from the same
directory where gunicorn is being run.
.. versionchanged:: 19.4
Loading the config from a Python module requires the ``python:``
prefix.
N� r� r� r4 r rx r� r� r� r� rJ r� r r r r r � r c @ �$ e Zd ZdZdZdZeZdZdZ dS )�WSGIApp�wsgi_appr �STRINGNzz A WSGI application path in pattern ``$(MODULE_NAME):$(VARIABLE_NAME)``.
.. versionadded:: 20.1.0
�
r� r� r4 r rx r� r� r� rJ r� r r r r r 1 � r c @ sX e Zd ZdZdZdZddgZdZeZ de
j v r%d� e
j �
d��gZd
Zd S d gZd
Zd S ) �Bindre r5 �
Server Socketz-bz--bind�ADDRESS�PORTz 0.0.0.0:{0}z127.0.0.1:8000an The socket to bind.
A string of the form: ``HOST``, ``HOST:PORT``, ``unix:PATH``,
``fd://FD``. An IP is a valid ``HOST``.
.. versionchanged:: 20.0
Support for ``fd://FD`` got added.
Multiple addresses can be bound. ex.::
$ gunicorn -b 127.0.0.1:8000 -b [::1]:8000 test:app
will bind the `test:app` application on localhost both on ipv6
and ipv4 interfaces.
If the ``PORT`` environment variable is defined, the default
is ``['0.0.0.0:$PORT']``. If it is not defined, the default
is ``['127.0.0.1:8000']``.
N)r� r� r4 r rI rx r� r� r� r� r r# r3 r; rJ r� r r r r r > s
�r c @ �. e Zd ZdZdZdgZdZeZe Z
dZ dZ dS )�Backlog�backlogr z --backlog�INTi a{ The maximum number of pending connections.
This refers to the number of clients that can be waiting to be served.
Exceeding this number results in the client getting an error when
attempting to connect. It should only affect servers under significant
load.
Must be a positive integer. Generally set in the 64-2048 range.
N�
r� r� r4 r rx r� r� r� r� r r� rJ r� r r r r r# a � r# c @ s> e Zd ZdZdZddgZdZeZe Z
e e j �
dd��ZdZd S )
�Workers�workers�Worker Processesz-wz --workersr% �WEB_CONCURRENCYr a� The number of worker processes for handling requests.
A positive integer generally in the ``2-4 x $(NUM_CORES)`` range.
You'll want to vary this a bit to find the best for your particular
application's work load.
By default, the value of the ``WEB_CONCURRENCY`` environment variable,
which is set by some Platform-as-a-Service providers such as Heroku. If
it is not defined, the default is ``1``.
N)r� r� r4 r rx r� r� r� r� r r� r r# r; rJ r� r r r r r( u s r( c @ r ) � WorkerClassrY r* z-kz--worker-classr r[ a� The type of workers to use.
The default class (``sync``) should handle most "normal" types of
workloads. You'll want to read :doc:`design` for information on when
you might want to choose one of the other worker classes. Required
libraries may be installed using setuptools' ``extras_require`` feature.
A string referring to one of the following bundled classes:
* ``sync``
* ``eventlet`` - Requires eventlet >= 0.24.1 (or install it via
``pip install gunicorn[eventlet]``)
* ``gevent`` - Requires gevent >= 1.4 (or install it via
``pip install gunicorn[gevent]``)
* ``tornado`` - Requires tornado >= 0.2 (or install it via
``pip install gunicorn[tornado]``)
* ``gthread`` - Python 2 requires the futures package to be installed
(or install it via ``pip install gunicorn[gthread]``)
Optionally, you can provide your own worker by giving Gunicorn a
Python path to a subclass of ``gunicorn.workers.base.Worker``.
This alternative syntax will load the gevent class:
``gunicorn.workers.ggevent.GeventWorker``.
N� r� r� r4 r rx r� r� r� r� rJ r� r r r r r, � r r, c @ r" )�
WorkerThreadsr^ r* z --threadsr% r am The number of worker threads for handling requests.
Run each worker with the specified number of threads.
A positive integer generally in the ``2-4 x $(NUM_CORES)`` range.
You'll want to vary this a bit to find the best for your particular
application's work load.
If it is not defined, the default is ``1``.
This setting only affects the Gthread worker type.
.. note::
If you try to use the ``sync`` worker type and set the ``threads``
setting to more than 1, the ``gthread`` worker type will be used
instead.
Nr& r r r r r. � r' r. c @ r" )�WorkerConnections�worker_connectionsr* z--worker-connectionsr% i� z� The maximum number of simultaneous clients.
This setting only affects the ``gthread``, ``eventlet`` and ``gevent`` worker types.
Nr& r r r r r/ � r' r/ c @ r" )� MaxRequests� max_requestsr* z--max-requestsr% r a� The maximum number of requests a worker will process before restarting.
Any value greater than zero will limit the number of requests a worker
will process before automatically restarting. This is a simple method
to help limit the damage of memory leaks.
If this is set to zero (the default) then the automatic worker
restarts are disabled.
Nr& r r r r r1 � r' r1 c @ r" )�MaxRequestsJitter�max_requests_jitterr* z--max-requests-jitterr% r aB The maximum jitter to add to the *max_requests* setting.
The jitter causes the restart per worker to be randomized by
``randint(0, max_requests_jitter)``. This is intended to stagger worker
restarts to avoid all workers restarting at the same time.
.. versionadded:: 19.2
Nr& r r r r r3 � r' r3 c @ �0 e Zd ZdZdZddgZdZeZe Z
dZ dZ dS ) �Timeout�timeoutr* z-tz --timeoutr% � aH Workers silent for more than this many seconds are killed and restarted.
Value is a positive number or 0. Setting it to 0 has the effect of
infinite timeouts by disabling timeouts for all workers entirely.
Generally, the default of thirty seconds should suffice. Only set this
noticeably higher if you're sure of the repercussions for sync workers.
For the non sync workers it just means that the worker process is still
communicating and is not tied to the length of time required to handle a
single request.
Nr& r r r r r6 � � r6 c @ r" )�GracefulTimeout�graceful_timeoutr* z--graceful-timeoutr% r8 a Timeout for graceful workers restart.
After receiving a restart signal, workers have this much time to finish
serving requests. Workers still alive after the timeout (starting from
the receipt of the restart signal) are force killed.
Nr& r r r r r: r' r: c @ r" )� Keepalive� keepaliver* z --keep-aliver% r a� The number of seconds to wait for requests on a Keep-Alive connection.
Generally set in the 1-5 seconds range for servers with direct connection
to the client (e.g. when you don't have separate load balancer). When
Gunicorn is deployed behind a load balancer, it often makes sense to
set this to a higher value.
.. note::
``sync`` worker does not support persistent connections and will
ignore this option.
Nr& r r r r r< % r' r< c @ r" )�LimitRequestLine�limit_request_line�Securityz--limit-request-liner% i� a� The maximum size of HTTP request line in bytes.
This parameter is used to limit the allowed size of a client's
HTTP request-line. Since the request-line consists of the HTTP
method, URI, and protocol version, this directive places a
restriction on the length of a request-URI allowed for a request
on the server. A server needs this value to be large enough to
hold any of its resource names, including any information that
might be passed in the query part of a GET request. Value is a number
from 0 (unlimited) to 8190.
This parameter can be used to prevent any DDOS attack.
Nr& r r r r r> ; r' r> c @ r" )�LimitRequestFields�limit_request_fieldsr@ z--limit-request-fieldsr% �d a? Limit the number of HTTP headers fields in a request.
This parameter is used to limit the number of headers in a request to
prevent DDOS attack. Used with the *limit_request_field_size* it allows
more safety. By default this value is 100 and can't be larger than
32768.
Nr& r r r r rA S r' rA c @ r" )�LimitRequestFieldSize�limit_request_field_sizer@ z--limit-request-field_sizer% i� a6 Limit the allowed size of an HTTP request header field.
Value is a positive number or 0. Setting it to 0 will allow unlimited
header field sizes.
.. warning::
Setting this parameter to a very high or unlimited value can open
up for DDOS attacks.
Nr& r r r r rD e r' rD c @ �* e Zd ZdZdZdgZeZdZdZ dZ
dS )�Reload�reload� Debuggingz--reload�
store_trueFa� Restart workers when code changes.
This setting is intended for development. It will cause workers to be
restarted whenever application code changes.
The reloader is incompatible with application preloading. When using a
paste configuration be sure that the server block does not import any
application code or the reload will not work as designed.
The default behavior is to attempt inotify with a fallback to file
system polling. Generally, inotify should be preferred if available
because it consumes less system resources.
.. note::
In order to use the inotify reloader, you must have the ``inotify``
package installed.
N� r� r� r4 r rx r� r� r� rI rJ r� r r r r rG y � rG c @ �* e Zd ZdZdZdgZdZeZdZ dZ
dS )� ReloadEngine�
reload_enginerI z--reload-enginer �autoz� The implementation that should be used to power :ref:`reload`.
Valid engines are:
* ``'auto'``
* ``'poll'``
* ``'inotify'`` (requires inotify)
.. versionadded:: 19.7
N) r� r� r4 r rx r� r� r r� rJ r� r r r r rN � � rN c @ �. e Zd ZdZdZdZdgZdZeZ g Z
dZ dS )�ReloadExtraFiles�reload_extra_filesr5 rI z--reload-extra-file�FILESz� Extends :ref:`reload` option to also watch and reload on additional files
(e.g., templates, configurations, specifications, etc.).
.. versionadded:: 19.8
N) r� r� r4 r rI rx r� r� r� r� rJ r� r r r r rS � s rS c @ rF )�Spew�spewrI z--spewrJ Fz| Install a trace function that spews every line executed by the server.
This is the nuclear option.
NrK r r r r rV � rQ rV c @ rF )� ConfigCheck� check_configrI z--check-configrJ Fz� Check the configuration and exit. The exit status is 0 if the
configuration is correct, and 1 if the configuration is incorrect.
NrK r r r r rX � rQ rX c @ rF )� PrintConfig� print_configrI z--print-configrJ Fza Print the configuration settings as fully resolved. Implies :ref:`check-config`.
NrK r r r r rZ � rQ rZ c @ rF )�
PreloadApp� preload_app�Server Mechanicsz --preloadrJ FaY Load application code before the worker processes are forked.
By preloading an application you can save some RAM resources as well as
speed up server boot times. Although, if you defer application loading
to each worker process, you can reload your application code easily by
restarting workers.
NrK r r r r r\ � rQ r\ c @ rF )�Sendfiler� r^ z
--no-sendfile� store_constFa� Disables the use of ``sendfile()``.
If not set, the value of the ``SENDFILE`` environment variable is used
to enable or disable its usage.
.. versionadded:: 19.2
.. versionchanged:: 19.4
Swapped ``--sendfile`` with ``--no-sendfile`` to actually allow
disabling.
.. versionchanged:: 19.6
added support for the ``SENDFILE`` environment variable
N) r� r� r4 r rx r� r� r� rI r� r� r r r r r_ � rL r_ c @ rF )� ReusePortr� r^ z --reuse-portrJ Fzg Set the ``SO_REUSEPORT`` flag on the listening socket.
.. versionadded:: 19.8
NrK r r r r ra rL ra c @ s. e Zd ZdZdZdgZeZe� � Z
dZ dZ dS )�Chdir�chdirr^ z--chdirz``'.'``zM Change directory to specified directory before loading apps.
N)
r� r� r4 r rx r� r r� r r rJ � default_docr� r r r r rb s rb c @ �, e Zd ZdZdZddgZeZdZdZ dZ
dS ) �Daemon�daemonr^ z-Dz--daemonrJ Fz� Daemonize the Gunicorn process.
Detaches the server from the controlling terminal and enters the
background.
NrK r r r r rf # r rf c @ s0 e Zd ZdZdZdZddgZdZeZ g Z
dZ dS ) �Envr� r5 r^ z-ez--env�ENVa| Set environment variables in the execution environment.
Should be a list of strings in the ``key=value`` format.
For example on the command line:
.. code-block:: console
$ gunicorn -b 127.0.0.1:8000 --env FOO=1 test:app
Or in the configuration file:
.. code-block:: python
raw_env = ["FOO=1"]
N� r� r� r4 r rI rx r� r� r� r� rJ r� r r r r rh 2 s rh c @ �, e Zd ZdZdZddgZdZeZdZ dZ
dS )�Pidfile�pidfiler^ z-pz--pid�FILENzf A filename to use for the PID file.
If not set, no PID file will be written.
r r r r r rl N r rl c @ �* e Zd ZdZdZdgZdZeZdZ dZ
dS )� WorkerTmpDir�worker_tmp_dirr^ z--worker-tmp-dir�DIRNa� A directory to use for the worker heartbeat temporary file.
If not set, the default temporary directory will be used.
.. note::
The current heartbeat system involves calling ``os.fchmod`` on
temporary file handlers and may block a worker for arbitrary time
if the directory is on a disk-backed filesystem.
See :ref:`blocking-os-fchmod` for more detailed information
and a solution for avoiding this problem.
r r r r r rp \ rQ rp c @ �4 e Zd ZdZdZddgZdZeZe �
� Z dZ dZ
dS ) �Userrl r^ z-uz--user�USERz``os.geteuid()``z� Switch worker processes to run as this user.
A valid user id (as an integer) or the name of a user that can be
retrieved with a call to ``pwd.getpwnam(value)`` or ``None`` to not
change the worker process user.
N)r� r� r4 r rx r� r� r� r� r r� rJ rd r� r r r r rt r � rt c @ rs ) �Groupro r^ z-gz--group�GROUPz``os.getegid()``z� Switch worker process to run as this group.
A valid group id (as an integer) or the name of a user that can be
retrieved with a call to ``pwd.getgrnam(value)`` or ``None`` to not
change the worker processes group.
N)r� r� r4 r rx r� r� r� r� r r� rJ rd r� r r r r rw � rv rw c @ r5 ) �Umask�umaskr^ z-mz--umaskr% r a� A bit mask for the file mode on files written by Gunicorn.
Note that this affects unix socket permissions.
A valid value for the ``os.umask(mode)`` call or a string compatible
with ``int(value, 0)`` (``0`` means Python guesses the base, so values
like ``0``, ``0xFF``, ``0022`` are valid for decimal, hex, and octal
representations)
N)
r� r� r4 r rx r� r� r� r� r r� rJ r� r r r r ry � r9 ry c @ rF )�
Initgroups�
initgroupsr^ z --initgroupsrJ Fz� If true, set the worker process's group access list with all of the
groups of which the specified username is a member, plus the specified
group id.
.. versionadded:: 19.7
NrK r r r r r{ � rL r{ c @ r )� TmpUploadDir�tmp_upload_dirr^ rr Na6 Directory to store temporary request data as they are read.
This may disappear in the near future.
This path should be writable by the process permissions set for Gunicorn
workers. If not specified, Gunicorn will choose a system generated
temporary directory.
r r r r r r} � r r} c @ s( e Zd ZdZdZeZdddd�ZdZdS ) �SecureSchemeHeader�secure_scheme_headersr^ �ssl�https�on)zX-FORWARDED-PROTOCOLzX-FORWARDED-PROTOzX-FORWARDED-SSLa{
A dictionary containing headers and values that the front-end proxy
uses to indicate HTTPS requests. If the source IP is permitted by
``forwarded-allow-ips`` (below), *and* at least one request header matches
a key-value pair listed in this dictionary, then Gunicorn will set
``wsgi.url_scheme`` to ``https``, so your application can tell that the
request is secure.
If the other headers listed in this dictionary are not present in the request, they will be ignored,
but if the other headers are present and do not match the provided values, then
the request will fail to parse. See the note below for more detailed examples of this behaviour.
The dictionary should map upper-case header names to exact string
values. The value comparisons are case-sensitive, unlike the header
names, so make sure they're exactly what your front-end proxy sends
when handling HTTPS requests.
It is important that your front-end proxy configuration ensures that
the headers defined here can not be passed directly from the client.
N� r� r� r4 r rx r� r� rJ r� r r r r r � s �r c @ s4 e Zd ZdZdZdgZdZeZe j
� dd�Z dZ
dS ) �ForwardedAllowIPS�forwarded_allow_ipsr^ z--forwarded-allow-ipsr �FORWARDED_ALLOW_IPS� 127.0.0.1a� Front-end's IPs from which allowed to handle set secure headers.
(comma separate).
Set to ``*`` to disable checking of Front-end IPs (useful for setups
where you don't know in advance the IP address of Front-end, but
you still trust the environment).
By default, the value of the ``FORWARDED_ALLOW_IPS`` environment
variable. If it is not defined, the default is ``"127.0.0.1"``.
.. note::
The interplay between the request headers, the value of ``forwarded_allow_ips``, and the value of
``secure_scheme_headers`` is complex. Various scenarios are documented below to further elaborate.
In each case, we have a request from the remote address 134.213.44.18, and the default value of
``secure_scheme_headers``:
.. code::
secure_scheme_headers = {
'X-FORWARDED-PROTOCOL': 'ssl',
'X-FORWARDED-PROTO': 'https',
'X-FORWARDED-SSL': 'on'
}
.. list-table::
:header-rows: 1
:align: center
:widths: auto
* - ``forwarded-allow-ips``
- Secure Request Headers
- Result
- Explanation
* - .. code::
["127.0.0.1"]
- .. code::
X-Forwarded-Proto: https
- .. code::
wsgi.url_scheme = "http"
- IP address was not allowed
* - .. code::
"*"
- <none>
- .. code::
wsgi.url_scheme = "http"
- IP address allowed, but no secure headers provided
* - .. code::
"*"
- .. code::
X-Forwarded-Proto: https
- .. code::
wsgi.url_scheme = "https"
- IP address allowed, one request header matched
* - .. code::
["134.213.44.18"]
- .. code::
X-Forwarded-Ssl: on
X-Forwarded-Proto: http
- ``InvalidSchemeHeaders()`` raised
- IP address allowed, but the two secure headers disagreed on if HTTPS was used
N)r� r� r4 r rx r� r� r� r� r r# r; rJ r� r r r r r� � s r� c @ ro )� AccessLog� accesslog�Loggingz--access-logfilern NzW The Access log file to write to.
``'-'`` means log to stdout.
r r r r r r� ? rQ r� c @ rF )� DisableRedirectAccessToSyslog�!disable_redirect_access_to_syslogr� z#--disable-redirect-access-to-syslogrJ FzL Disable redirect access logs to syslog.
.. versionadded:: 19.8
NrK r r r r r� M rQ r� c @ rM )�AccessLogFormat�access_log_formatr� z--access-logformatr z;%(h)s %(l)s %(u)s %(t)s "%(r)s" %(s)s %(b)s "%(f)s" "%(a)s"a� The access log format.
=========== ===========
Identifier Description
=========== ===========
h remote address
l ``'-'``
u user name
t date of the request
r status line (e.g. ``GET / HTTP/1.1``)
m request method
U URL path without query string
q query string
H protocol
s status
B response length
b response length or ``'-'`` (CLF format)
f referer
a user agent
T request time in seconds
M request time in milliseconds
D request time in microseconds
L request time in decimal seconds
p process ID
{header}i request header
{header}o response header
{variable}e environment variable
=========== ===========
Use lowercase for header and environment variable names, and put
``{...}x`` names inside ``%(...)s``. For example::
%({x-forwarded-for}i)s
Nr r r r r r� [ rQ r� c @ r ) �ErrorLog�errorlogr� z--error-logfilez
--log-filern �-z� The Error log file to write to.
Using ``'-'`` for FILE makes gunicorn log to stderr.
.. versionchanged:: 19.2
Log to stderr by default.
Nr r r r r r� � r r� c @ rM )�Loglevel�loglevelr� z --log-level�LEVEL�infoz� The granularity of Error log outputs.
Valid level names are:
* ``'debug'``
* ``'info'``
* ``'warning'``
* ``'error'``
* ``'critical'``
Nr r r r r r� � rQ r� c @ rF )�
CaptureOutput�capture_outputr� z--capture-outputrJ Fzm Redirect stdout/stderr to specified file in :ref:`errorlog`.
.. versionadded:: 19.6
NrK r r r r r� � rQ r� c @ rM )rz rt r� z--logger-classr rw aa The logger you want to use to log events in Gunicorn.
The default class (``gunicorn.glogging.Logger``) handles most
normal usages in logging. It provides error and access logging.
You can provide your own logger by giving Gunicorn a Python path to a
class that quacks like ``gunicorn.glogging.Logger``.
Nr- r r r r rz � rQ rz c @ ro )� LogConfig� logconfigr� z --log-configrn Nzz The log config file to use.
Gunicorn uses the standard Python logging module's Configuration
file format.
r r r r r r� � rQ r� c @ s e Zd ZdZdZeZi ZdZdS )�
LogConfigDict�logconfig_dictr� a7 The log config dictionary to use, using the standard Python
logging module's dictionary configuration format. This option
takes precedence over the :ref:`logconfig` and :ref:`logConfigJson` options,
which uses the older file configuration format and JSON
respectively.
Format: https://docs.python.org/3/library/logging.config.html#logging.config.dictConfig
For more context you can look at the default configuration dictionary for logging,
which can be found at ``gunicorn.glogging.CONFIG_DEFAULTS``.
.. versionadded:: 19.8
Nr� r r r r r� � � r� c @ ro )�
LogConfigJson�logconfig_jsonr� z--log-config-jsonrn Nz� The log config to read config from a JSON file
Format: https://docs.python.org/3/library/logging.config.html#logging.config.jsonConfig
.. versionadded:: 20.0
r r r r r r� � rQ r� c @ sf e Zd ZdZdZdgZdZeZe dkrdZ
d Z d
S e dv r#dZ
d Z d
S e d kr-d
Z
d Z d
S d Z
d Z d
S )�SyslogTo� syslog_addrr� z--log-syslog-to� SYSLOG_ADDR�darwinzunix:///var/run/syslog)�freebsd� dragonflyzunix:///var/run/log�openbsdzunix:///dev/logzudp://localhost:514aY Address to send syslog messages.
Address is a string of the form:
* ``unix://PATH#TYPE`` : for unix domain socket. ``TYPE`` can be ``stream``
for the stream driver or ``dgram`` for the dgram driver.
``stream`` is the default.
* ``udp://HOST:PORT`` : for UDP sockets
* ``tcp://HOST:PORT`` : for TCP sockets
N) r� r� r4 r rx r� r� r� r� �PLATFORMrJ r� r r r r r� s" ���r� c @ rF )�Syslog�syslogr� z --log-syslogrJ Fz� Send *Gunicorn* logs to syslog.
.. versionchanged:: 19.8
You can now disable sending access logs by using the
:ref:`disable-redirect-access-to-syslog` setting.
NrK r r r r r� rQ r� c @ ro )� SyslogPrefix�
syslog_prefixr� z--log-syslog-prefix�
SYSLOG_PREFIXNz� Makes Gunicorn use the parameter as program-name in the syslog entries.
All entries will be prefixed by ``gunicorn.<prefix>``. By default the
program name is the name of the process.
r r r r r r� . rQ r� c @ rM )�SyslogFacility�syslog_facilityr� z--log-syslog-facility�SYSLOG_FACILITYrl z Syslog facility name
Nr r r r r r� = rQ r� c @ re ) �EnableStdioInheritance�enable_stdio_inheritancer� z-Rz--enable-stdio-inheritanceFrJ z� Enable stdio inheritance.
Enable inheritance for stdio file descriptors in daemon mode.
Note: To disable the Python stdout buffering, you can to set the user
environment variable ``PYTHONUNBUFFERED`` .
N� r� r� r4 r rx r� r� r� rJ rI r� r r r r r� I r r� c @ s* e Zd ZdZdZdgZdZdZeZ dZ
dS )�
StatsdHostrv r� z
--statsd-host� STATSD_ADDRNz� The address of the StatsD server to log to.
Address is a string of the form:
* ``unix://PATH`` : for a unix domain socket.
* ``HOST:PORT`` : for a network address
.. versionadded:: 19.1
) r� r� r4 r rx r� r� rJ r
r� r� r r r r r� [ rQ r� c @ �* e Zd ZdZdZdgZdZdZeZ dZ
dS )�
DogstatsdTags�dogstatsd_tagsr� z--dogstatsd-tags�DOGSTATSD_TAGSr� z} A comma-delimited list of datadog statsd (dogstatsd) tags to append to
statsd metrics.
.. versionadded:: 20
N� r� r� r4 r rx r� r� rJ r� r� r� r r r r r� o rQ r� c @ r� )� StatsdPrefix�
statsd_prefixr� z--statsd-prefix�
STATSD_PREFIXr� z� Prefix to use when emitting statsd metrics (a trailing ``.`` is added,
if not provided).
.. versionadded:: 19.2
Nr� r r r r r� ~ rQ r� c @ rk )�Procnamerq �Process Namingz-nz--namer Na� A base to use with setproctitle for process naming.
This affects things like ``ps`` and ``top``. If you're going to be
running more than one instance of Gunicorn you'll probably want to set a
name to tell them apart. This requires that you install the setproctitle
module.
If not set, the *default_proc_name* setting will be used.
r r r r r r� � r r� c @ s e Zd ZdZdZeZdZdZdS )�DefaultProcNamerr r� �gunicornzP Internal setting that is adjusted for each type of application.
N) r� r� r4 r rx r� r� rJ r� r r r r r� � r� r� c @ ro )�
PythonPath�
pythonpathr^ z --pythonpathr Nz� A comma-separated list of directories to add to the Python path.
e.g.
``'/home/djangoprojects/myproject,/home/python/mylibrary'``.
r r r r r r� � rQ r� c @ rk )�Paste�paster^ z--pastez--pasterr Na[ Load a PasteDeploy config file. The argument may contain a ``#``
symbol followed by the name of an app section from the config file,
e.g. ``production.ini#admin``.
At this time, using alternate server blocks is not supported. Use the
command line arguments to control server configuration instead.
r r r r r r� � r r� c @ �4 e Zd ZdZdZed�ZeZdd� Z e
e �Z dZ dS )�
OnStarting� on_starting� Server Hooksr c C � d S r' r ��serverr r r r� � � zOnStarting.on_startingz� Called just before the master process is initialized.
The callable needs to accept a single instance variable for the Arbiter.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � � r� c @ r� )�OnReload� on_reloadr� r c C r� r' r r� r r r r� � r� zOnReload.on_reloadz� Called to recycle workers during a reload via SIGHUP.
The callable needs to accept a single instance variable for the Arbiter.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� r� c @ r� )� WhenReady�
when_readyr� r c C r� r' r r� r r r r� � r� zWhenReady.when_readyz� Called just after the server is started.
The callable needs to accept a single instance variable for the Arbiter.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� r� c @ r� )�Prefork�pre_forkr� r c C r� r' r �r� r� r r r r� r� zPrefork.pre_forkz� Called just before a worker is forked.
The callable needs to accept two instance variables for the Arbiter and
new Worker.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� r� c @ r� )�Postfork� post_forkr� r c C r� r' r r� r r r r� r� zPostfork.post_forkz� Called just after a worker has been forked.
The callable needs to accept two instance variables for the Arbiter and
new Worker.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� r� r� c @ r� )�PostWorkerInit�post_worker_initr� r c C r� r' r �r� r r r r� " r� z PostWorkerInit.post_worker_initz� Called just after a worker has initialized the application.
The callable needs to accept one instance variable for the initialized
Worker.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� c @ r� )� WorkerInt�
worker_intr� r c C r� r' r r� r r r r� 4 r� zWorkerInt.worker_intz� Called just after a worker exited on SIGINT or SIGQUIT.
The callable needs to accept one instance variable for the initialized
Worker.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� . r� r� c @ r� )� WorkerAbort� worker_abortr� r c C r� r' r r� r r r r� F r� zWorkerAbort.worker_abortz� Called when a worker received the SIGABRT signal.
This call generally happens on timeout.
The callable needs to accept one instance variable for the initialized
Worker.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� @ r� r� c @ r� )�PreExec�pre_execr� r c C r� r' r r� r r r r� Z r� zPreExec.pre_execz� Called just before a new master process is forked.
The callable needs to accept a single instance variable for the Arbiter.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� T r� r� c @ r� )�
PreRequest� pre_requestr� r c C s | j �d|j|j� d S )Nz%s %s)�log�debug�methodr )r� r� r r r r� j s zPreRequest.pre_requestz� Called just before a worker processes the request.
The callable needs to accept two instance variables for the Worker and
the Request.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� d r� r� c @ s0 e Zd ZdZdZeZeZdd� Z e
e �Z dZ dS )� PostRequest� post_requestr� c C r� r' r )r� r� r# �respr r r r� { r� zPostRequest.post_requestz� Called after a worker processes the request.
The callable needs to accept two instance variables for the Worker and
the Request.
N)
r� r� r4 r rx r r� r2 r� r� r� rJ r� r r r r r� u s r� c @ r� )� ChildExit�
child_exitr� r c C r� r' r r� r r r r� � r� zChildExit.child_exitz� Called just after a worker has been exited, in the master process.
The callable needs to accept two instance variables for the Arbiter and
the just-exited Worker.
.. versionadded:: 19.7
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� r� c @ r� )�
WorkerExit� worker_exitr� r c C r� r' r r� r r r r� � r� zWorkerExit.worker_exitz� Called just after a worker has been exited, in the worker process.
The callable needs to accept two instance variables for the Arbiter and
the just-exited Worker.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� r� c @ r� )�NumWorkersChanged�nworkers_changedr� r� c C r� r' r )r� � new_value� old_valuer r r r� � r� z"NumWorkersChanged.nworkers_changeda7 Called just after *num_workers* has been changed.
The callable needs to accept an instance variable of the Arbiter and
two integers of number of workers after and before change.
If the number of workers is set for the first time, *old_value* would
be ``None``.
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� r� c @ s0 e Zd ZdZdZed�Zdd� Zee�Z dZ
dS )�OnExit�on_exitr� r c C r� r' r r� r r r r� � r� zOnExit.on_exitz� Called just before exiting Gunicorn.
The callable needs to accept a single instance variable for the Arbiter.
N) r� r� r4 r rx r� r� r� r� rJ r� r r r r r� � s r� c @ r� )�
NewSSLContext� ssl_contextr� r c C s |� S r' r )r �default_ssl_context_factoryr r r r� � r� zNewSSLContext.ssl_contextaO Called when SSLContext is needed.
Allows customizing SSL context.
The callable needs to accept an instance variable for the Config and
a factory function that returns default SSLContext which is initialized
with certificates, private key, cert_reqs, and ciphers according to
config and can be further customized by the callable.
The callable needs to return SSLContext object.
Following example shows a configuration file that sets the minimum TLS version to 1.3:
.. code-block:: python
def ssl_context(conf, default_ssl_context_factory):
import ssl
context = default_ssl_context_factory()
context.minimum_version = ssl.TLSVersion.TLSv1_3
return context
.. versionadded:: 20.2
N)
r� r� r4 r rx r� r� r2 r� r� r� rJ r� r r r r r� � r� r� c @ rF )�
ProxyProtocol�proxy_protocolr^ z--proxy-protocolFrJ a Enable detect PROXY protocol (PROXY mode).
Allow using HTTP and Proxy together. It may be useful for work with
stunnel as HTTPS frontend and Gunicorn as HTTP server.
PROXY protocol: http://haproxy.1wt.eu/download/1.5/doc/proxy-protocol.txt
Example for stunnel config::
[https]
protocol = proxy
accept = 443
connect = 80
cert = /etc/ssl/certs/stunnel.pem
key = /etc/ssl/certs/stunnel.key
Nr� r r r r r� � rQ r� c @ s& e Zd ZdZdZdgZeZdZdZ dS )�ProxyAllowFrom�proxy_allow_ipsr^ z--proxy-allow-fromr� a Front-end's IPs from which allowed accept proxy requests (comma separate).
Set to ``*`` to disable checking of Front-end IPs (useful for setups
where you don't know in advance the IP address of Front-end, but
you still trust the environment)
N)
r� r� r4 r rx r� r� r� rJ r� r r r r r� � r� c @ ro )�KeyFiler| r~ z --keyfilern Nz SSL key file
r r r r r r� rQ r� c @ ro )�CertFiler{ r~ z
--certfilern Nz SSL certificate file
r r r r r r� & rQ r� c @ s@ e Zd ZdZdZdgZeZee d�re j
Z ne j Z e j Z dZ
dS )r� � ssl_versionr~ z
--ssl-version� PROTOCOL_TLSa� SSL version to use (see stdlib ssl module's).
.. deprecated:: 20.2
The option is deprecated and it is currently ignored. Use :ref:`ssl-context` instead.
============= ============
--ssl-version Description
============= ============
SSLv3 SSLv3 is not-secure and is strongly discouraged.
SSLv23 Alias for TLS. Deprecated in Python 3.6, use TLS.
TLS Negotiate highest possible version between client/server.
Can yield SSL. (Python 3.6+)
TLSv1 TLS 1.0
TLSv1_1 TLS 1.1 (Python 3.4+)
TLSv1_2 TLS 1.2 (Python 3.4+)
TLS_SERVER Auto-negotiate the highest protocol version like TLS,
but only support server-side SSLSocket connections.
(Python 3.6+)
============= ============
.. versionchanged:: 19.7
The default value has been changed from ``ssl.PROTOCOL_TLSv1`` to
``ssl.PROTOCOL_SSLv23``.
.. versionchanged:: 20.0
This setting now accepts string names based on ``ssl.PROTOCOL_``
constants.
.. versionchanged:: 20.0.1
The default value has been changed from ``ssl.PROTOCOL_SSLv23`` to
``ssl.PROTOCOL_TLS`` when Python >= 3.6 .
N)r� r� r4 r rx r� r� r� rd r� r� rJ �PROTOCOL_SSLv23r� r r r r r� 2 s
r� c @ s( e Zd ZdZdZdgZeZej Z
dZ dS )�CertReqs� cert_reqsr~ z --cert-reqsa` Whether client certificate is required (see stdlib ssl module's)
=========== ===========================
--cert-reqs Description
=========== ===========================
`0` no client veirifcation
`1` ssl.CERT_OPTIONAL
`2` ssl.CERT_REQUIRED
=========== ===========================
N) r� r� r4 r rx r� r� r� r� � CERT_NONErJ r� r r r r r _ s r c @ ro )�CACerts�ca_certsr~ z
--ca-certsrn Nz CA certificates file
r r r r r r r rQ r c @ r� )�SuppressRaggedEOFs�suppress_ragged_eofsr~ z--suppress-ragged-eofsrJ Tz7 Suppress ragged EOFs (see stdlib ssl module's)
N) r� r� r4 r rx r� rI rJ r� r� r� r r r r r ~ rQ r c @ rF )�DoHandshakeOnConnect�do_handshake_on_connectr~ z--do-handshake-on-connectrJ FzU Whether to perform SSL handshake on socket connect (see stdlib ssl module's)
NrK r r r r r � rQ r c @ s& e Zd ZdZdZdgZeZdZdZ dS )�Ciphers�ciphersr~ z --ciphersNa� SSL Cipher suite to use, in the format of an OpenSSL cipher list.
By default we use the default cipher list from Python's ``ssl`` module,
which contains ciphers considered strong at the time of each Python
release.
As a recommended alternative, the Open Web App Security Project (OWASP)
offers `a vetted set of strong cipher strings rated A+ to C-
<https://www.owasp.org/index.php/TLS_Cipher_String_Cheat_Sheet>`_.
OWASP provides details on user-agent compatibility at each security level.
See the `OpenSSL Cipher List Format Documentation
<https://www.openssl.org/docs/manmaster/man1/ciphers.html#CIPHER-LIST-FORMAT>`_
for details on the format of an OpenSSL cipher list.
)
r� r� r4 r rx r� r� r� rJ r� r r r r r � r� r c @ rR )�PasteGlobalConfr� r5 r^ z--paste-global�CONFa` Set a PasteDeploy global config variable in ``key=value`` form.
The option can be specified multiple times.
The variables are passed to the the PasteDeploy entrypoint. Example::
$ gunicorn -b 127.0.0.1:8000 --paste development.ini --paste-global FOO=1 --paste-global BAR=2
.. versionadded:: 19.7
Nrj r r r r r � s r c @ rF )�StripHeaderSpaces�strip_header_spacesr^ z--strip-header-spacesrJ Fa; Strip spaces present between the header name and the the ``:``.
This is known to induce vulnerabilities and is not compliant with the HTTP/1.1 standard.
See https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn.
Use with care and only if necessary.
NrK r r r r r
� rQ r
r' )�rP r r� r� r r� r rD r� r r� r� r r �gunicorn.errorsr �gunicorn.reloaderr r �platformr� r r �objectr r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r
r r r r r r# r( r, r. r/ r1 r3 r6 r: r< r> rA rD rG rN rS rV rX rZ r\ r_ ra rb rf rh rl rp rt rw ry r{ r} r r� r� r� r� r� r� r� rz r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r
r r r r �<module> s
>J
#"
U,
# -