# ----------- Enable jetty.xml config -----------
org.ops4j.pax.web.config.file = ${karaf.etc}/jetty.xml
# ----------- Jetty context configuration file applied to all web contexts
# see https://www.eclipse.org/jetty/documentation/jetty-9/index.html#using-basic-descriptor-files
#org.ops4j.pax.web.context.file = ${karaf.etc}/jetty-web.xml

# ----------- Virtimo HTTP configuration -----------
org.osgi.service.http.port = 8181
org.osgi.service.http.enabled = true

# ----------- Virtimo HTTPS / TLS / SSL configuration -----------
org.osgi.service.http.port.secure = 8282
org.osgi.service.http.secure.enabled = true

org.ops4j.pax.web.ssl.keystore = ${karaf.etc}/virtimo/ssl/virtimo_keystore.jks
org.ops4j.pax.web.ssl.keystore.password = virtimo
org.ops4j.pax.web.ssl.key.password = virtimo
org.ops4j.pax.web.ssl.keystore.type = JKS

org.ops4j.pax.web.ssl.truststore = ${karaf.etc}/virtimo/ssl/virtimo_truststore.jks
org.ops4j.pax.web.ssl.truststore.password = virtimo
org.ops4j.pax.web.ssl.truststore.type = JKS

#org.ops4j.pax.web.ssl.key.alias = server
#org.ops4j.pax.web.ssl.clientauth.needed = false
#org.ops4j.pax.web.ssl.protocols.included = TLSv1.3
#org.ops4j.pax.web.ssl.protocol = TLSv1.3
#org.ops4j.pax.web.ssl.protocols.included = TLSv1.2 TLSv1.3
#org.ops4j.pax.web.ssl.ciphersuites.included = TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384
#org.ops4j.pax.web.ssl.secureRandom.algorithm = NativePRNGNonBlocking
#org.ops4j.pax.web.ssl.renegotiationAllowed = true
#org.ops4j.pax.web.ssl.session.enabled = true

# ----------- Root directory for all the context-specific directories managed by Pax Web
javax.servlet.context.tempdir = ${karaf.data}/pax-web/tmp
org.apache.karaf.features.configKey = org.ops4j.pax.web

# ----------- Miscellaneous
org.ops4j.pax.web.server.showStacks = false

# ----------- SameSite attribute configuration for session cookie (possible values: none, lax, strict)
org.ops4j.pax.web.session.cookie.sameSite = strict
