The datasource URL

The datasource password

The datasource username

If access logging is enabled. By default this will log via the standard logging facility

HTTP headers allowed for CORS Comma separated list of valid headers. ex: X-Custom,Content-Disposition The filter allows any header if this is not set. default: returns any requested header as valid

HTTP methods allowed for CORS Comma separated list of valid methods. ex: GET,PUT,POST The filter allows any method if this is not set. default: returns any requested method as valid

Origins allowed for CORS Comma separated list of valid URLs, e.g.: http://www.quarkus.io,http://localhost:3000 In case an entry of the list is surrounded by forward slashes, it is interpreted as a regular expression. The filter allows any origin if this is not set. default: returns any requested origin as valid

The HTTP host In dev/test mode this defaults to localhost, in prod mode this defaults to 0.0.0.0 Defaulting to 0.0.0.0 makes it easier to deploy Quarkus to container, however it is not suitable for dev/test mode as other people on the network can connect to your development machine.

The HTTP port

If this is true then the address, scheme etc. will be set from headers forwarded by the proxy server, such as X-Forwarded-For. This should only be set if you are behind a proxy that sets these headers.

Whether the banner will be displayed

What should happen if the application is started with a different build time configuration than it was compiled against. This may be useful to prevent misconfiguration.

If this is set to warn the application will warn at start up.

If this is set to fail the application will fail at start up.

Native tests leveraging@io.quarkus.test.junit.TestProfile are always run with quarkus.configuration.build-time-mismatch-at-runtime = fail.

The interval at which we validate idle connections in the background.

Set to 0 to disable background validation.

When enabled Agroal will be able to produce a warning when a connection is returned to the pool without the application having closed all open statements. This is unrelated with tracking of open connections. Disable for peak performance, but only when there's high confidence that no leaks are happening.

Collect and display extra troubleshooting info on leaked connections.

Allows connections to be flushed upon return to the pool. It's not enabled by default.

The interval at which we try to remove idle connections.

The datasource pool maximum size

The datasource pool minimum size

Disable pooling to prevent reuse of Connections. Use this with when an external pool manages the life-cycle of Connections.

Trace calls with active Spans only

The interval at which we validate idle connections in the background.

Set to 0 to disable background validation.

When enabled Agroal will be able to produce a warning when a connection is returned to the pool without the application having closed all open statements. This is unrelated with tracking of open connections. Disable for peak performance, but only when there's high confidence that no leaks are happening.

Collect and display extra troubleshooting info on leaked connections.

Allows connections to be flushed upon return to the pool. It's not enabled by default.

The interval at which we try to remove idle connections.

The datasource pool maximum size

The datasource pool minimum size

Disable pooling to prevent reuse of Connections. Use this with when an external pool manages the life-cycle of Connections.

Trace calls with active Spans only

If Hibernate ORM should create the schemas automatically (for databases supporting them).

Whether we should stop on the first error when applying the schema.

Format the SQL logs if SQL log is enabled

The accept backlog, this is how many connections can be waiting to be accepted before connections start being rejected

The access log file base name, defaults to 'quarkus' which will give a log file name of 'quarkus.log'.

The log category to use if logging is being done via the standard log mechanism (i.e. if base-file-name is empty).

The log file suffix

If logging should be done to a separate file.

The access log pattern.

If this is the string `common`, `combined` or `long` then this will use one of the specified named formats:

- common: `%h %l %u %t "%r" %s %b`
- combined: `%h %l %u %t "%r" %s %b "%{i,Referer}" "%{i,User-Agent}"`
- long: `%r\n%{ALL_REQUEST_HEADERS}`

Otherwise, consult the Quarkus documentation for the full list of variables that can be used.

If the log should be rotated daily

Whether the uploaded files should be removed after serving the request.

If true the uploaded files stored in quarkus.http.body-handler.uploads-directory will be removed after handling the request. Otherwise, the files will be left there forever.

Whether the files sent using multipart/form-data will be stored locally.

If true, they will be stored in quarkus.http.body-handler.uploads-directory and will be made available via io.vertx.ext.web.RoutingContext.fileUploads(). Otherwise, the files sent using multipart/form-data will not be stored locally, and io.vertx.ext.web.RoutingContext.fileUploads() will always return an empty collection. Note that even with this option being set to false, the multipart/form-data requests will be accepted.

Whether the form attributes should be added to the request parameters.

If true, the form attributes will be added to the request parameters; otherwise the form parameters will not be added to the request parameters

Whether the body buffer should pre-allocated based on the Content-Length header value.

If true the body buffer is pre-allocated according to the size read from the Content-Length header. Otherwise, the body buffer is pre-allocated to 1KB, and is resized dynamically

The directory where the files sent using multipart/form-data should be stored.

Either an absolute path or a path relative to the current directory of the application process.

Path to a unix domain socket

Enable listening to host:port

When set to true, the HTTP server automatically sends `100 CONTINUE` response when the request expects it (with the `Expect: 100-Continue` header).

Enable listening to host:port

If this is true (the default) then HTTP/2 will be enabled. Note that for browsers to be able to use it HTTPS must be enabled, and you must be running on JDK11 or above, as JDK8 does not support ALPN.

Http connection idle timeout

If insecure (i.e. http rather than https) requests are allowed. If this is enabled then http works as normal. redirect will still open the http port, but all requests will be redirected to the HTTPS port. disabled will prevent the HTTP port from opening at all.

The max HTTP chunk size

The maximum length of a form attribute.

The maximum length of all headers.

The maximum length of the initial line (e.g. "GET / HTTP/1.0").

If this is true and proxy address forwarding is enabled then the standard Forwarded header will be used. In case the not standard X-Forwarded-For header is enabled and detected on HTTP requests, the standard header has the precedence. Activating this together with quarkus.http.proxy.allow-x-forwarded has security implications as clients can forge requests with a forwarded header that is not overwritten by the proxy. Therefore, proxies should strip unexpected `X-Forwarded` or `X-Forwarded-*` headers from the client.

Enable override the received request's host through a forwarded host header.

Enable prefix the received request's path with a forwarded prefix header.

Configure the forwarded host header to be used if override enabled.

Configure the forwarded prefix header to be used if prefixing enabled.

Http connection read timeout for blocking IO. This is the maximum amount of time a thread will wait for data, before an IOException will be thrown and the connection closed.

If this is true then the request start time will be recorded to enable logging of total request time. This has a small performance penalty, so is disabled by default.

Enable socket reuse port (linux/macOs native transport only)

The list of protocols to explicitly enable.

Enables Server Name Indication (SNI), an TLS extension allowing the server to use multiple certificates. The client indicate the server name during the TLS handshake, allowing the server to select the right certificate.

Enable tcp cork (linux native transport only)

Enable tcp fast open (linux native transport only)

Enable tcp quick ack (linux native transport only)

Determine whether to block the publisher (rather than drop the message) when the queue is full

The queue length to use before flushing writing

If console logging should go to System#err instead of System#out.

Determine whether to block the publisher (rather than drop the message) when the queue is full

The queue length to use before flushing writing

If file logging should be enabled

The log format

The level of logs to be written into the file.

The name of the file in which logs will be written.

The maximum number of backups to keep.

The maximum file size of the log file after which a rotation is executed.

Indicates whether to rotate log files on server initialization.

You need to either set a max-file-size or configure a file-suffix for it to work.

The log level of the root category, which is used as the default log level for all categories.

JBoss Logging supports Apache style log levels:

* org.jboss.logmanager.Level#FATAL
* org.jboss.logmanager.Level#ERROR
* org.jboss.logmanager.Level#WARN
* org.jboss.logmanager.Level#INFO
* org.jboss.logmanager.Level#DEBUG
* org.jboss.logmanager.Level#TRACE

In addition, it also supports the standard JDK log levels.

Determine whether to block the publisher (rather than drop the message) when the queue is full

The queue length to use before flushing writing

Enables or disables blocking when attempting to reconnect a org.jboss.logmanager.handlers.SyslogHandler.Protocol#TCP TCP or org.jboss.logmanager.handlers.SyslogHandler.Protocol#SSL_TCP SSL TCP protocol

If syslog logging should be enabled

The IP address and port of the syslog server

Sets the facility used when calculating the priority of the message as defined by RFC-5424 and RFC-3164

The log message format

The log level specifying, which message levels will be logged by syslog logger

Sets the protocol used to connect to the syslog server

Set the SyslogType syslog type this handler should use to format the message sent

Set to true if the message should be truncated

Set to true if the message being sent should be prefixed with the size of the message

Default charset.

If schedulers are enabled.

Scheduled task will be flagged as overdue if next execution time is exceeded by this period.

Enable this property if fetching the remote keys can be a time-consuming operation. Do not enable it if you use the local keys.

Enable the openapi endpoint. By default it's enabled.

If Swagger UI is included, it should be enabled/disabled. By default, Swagger UI is enabled if it is included (see always-include).

The core thread pool size. This number of threads will always be kept alive.

The executor growth resistance. A resistance factor applied after the core pool is full; values applied here will cause that fraction of submissions to create new threads when no idle thread is available. A value of 0.0f implies that threads beyond the core size should be created as aggressively as threads within it; a value of 1.0f implies that threads beyond the core size should never be created.

The amount of time a thread will stay alive with no work.

Prefill core thread pool. The core thread pool will be initialised with the core number of threads at startup

The frequency at which the status of the thread pool should be checked during shutdown. Information about waiting tasks and threads will be checked and possibly logged at this interval. Setting this key to an empty value disables the shutdown check interval.

The amount of time to wait for thread pool shutdown before tasks should be interrupted. If this value is greater than or equal to the value for #shutdownTimeout, then tasks will not be interrupted before the shutdown timeout occurs.

The shutdown timeout. If all pending work has not been completed by this time then additional threads will be spawned to attempt to finish any pending tasks, and the shutdown process will continue

The default transaction timeout

Start the recovery service on startup.

The list of expiry scanners

The node name used by the transaction manager

The directory name of location of the transaction logs. If the value is not absolute then the directory is relative to the user.dir system property.

The list of recovery modules

The list of orphan filters

Enables or disables the Vert.x cache.

Enables or disabled the Vert.x classpath resource resolver.

Enables or disables the clustering.

The host name.

The ping interval.

The ping reply interval.

The client authentication.

The connect timeout.

The number of reconnection attempts.

The reconnection interval in milliseconds.

Whether to reuse the address.

Whether to reuse the port.

Enables or Disabled SSL.

Whether to keep the TCP connection opened (keep-alive).

Configure the TCP no delay.

Enables or disables the trust all parameter.

The executor growth resistance. A resistance factor applied after the core pool is full; values applied here will cause that fraction of submissions to create new threads when no idle thread is available. A value of 0.0f implies that threads beyond the core size should be created as aggressively as threads within it; a value of 1.0f implies that threads beyond the core size should never be created.

The size of the internal thread pool (used for the file system).

The amount of time a thread will stay alive with no work.

The maximum amount of time the event loop can be blocked.

The maximum amount of time the worker thread can be blocked.

Enable or disable native transport

Prefill thread pool when creating a new Executor. When {
@see io.vertx.core.spi.ExecutorServiceFactory.createExecutor} is called, initialise with the number of defined threads at startup

The maximum amount of time in seconds that a successfully resolved address will be cached.

If not set explicitly, resolved addresses may be cached forever.

The minimum amount of time in seconds that a successfully resolved address will be cached.

The amount of time in seconds that an unsuccessful attempt to resolve an address will be cached.

The maximum number of queries to be sent during a resolution.

The duration after which a DNS query is considered to be failed.

Enables the async DNS resolver.

The amount of time before a warning is displayed if the event loop is blocked.

The size of the worker thread pool.

The name of the application. If not set, defaults to the name of the project (except for tests where it is not set at all).

The header to use for UI Screen (Swagger UI, GraphQL UI etc).

The version of the application. If not set, defaults to the version of the project (except for tests where it is not set at all).

The kind of database we will connect to (e.g. h2, postgresql...).

Whether this particular data source should be excluded from the health check if the general health check for data sources is enabled.

By default, the health check includes all configured data sources (if it is enabled).

Whether or not an health check is published in case the smallrye-health extension is present.

This is a global setting and is not specific to a datasource.

Enable JDBC tracing. Disabled by default.

Whether we want to use regular JDBC transactions, XA, or disable all transactional capabilities.

When enabling XA you will need a driver implementing javax.sql.XADataSource.

Whether or not datasource metrics are published in case a metrics extension is present.

This is a global setting and is not specific to a datasource.

NOTE: This is different from the "jdbc.enable-metrics" property that needs to be set on the JDBC datasource level to enable collection of metrics for that datasource.

The kind of database we will connect to (e.g. h2, postgresql...).

Whether this particular data source should be excluded from the health check if the general health check for data sources is enabled.

By default, the health check includes all configured data sources (if it is enabled).

Enable JDBC tracing. Disabled by default.

Whether we want to use regular JDBC transactions, XA, or disable all transactional capabilities.

When enabling XA you will need a driver implementing javax.sql.XADataSource.

Default locale that can be consumed by the extensions.

The locale must be specified in the IETF BCP 47 format e.g. en-US or fr-FR.

For instance, the Hibernate Validator extension makes use of it.

Native-image build uses this property to derive user.language and user.country for the application's runtime.

Enable the fail fast mode. When fail fast is enabled the validation will stop on the first constraint violation detected.

Define whether more than one constraint on a return value may be marked for cascading validation are allowed. The default value is false, i.e. do not allow.

See Section 4.5.5 of the JSR 380 specification, specifically

"One must not mark a method return value for cascaded validation more than once in a line of a class hierarchy.
In other words, overriding methods on sub types (be it sub classes/interfaces or interface implementations)
cannot mark the return value for cascaded validation if the return value has already been marked on the
overridden method of the super type or interface."

Define whether overriding methods that override constraints should throw a ConstraintDefinitionException. The default value is false, i.e. do not allow.

See Section 4.5.5 of the JSR 380 specification, specifically

"In sub types (be it sub classes/interfaces or interface implementations), no parameter constraints may
be declared on overridden or implemented methods, nor may parameters be marked for cascaded validation.
This would pose a strengthening of preconditions to be fulfilled by the caller."

Define whether parallel methods that define constraints should throw a ConstraintDefinitionException. The default value is false, i.e. do not allow.

See Section 4.5.5 of the JSR 380 specification, specifically

"If a sub type overrides/implements a method originally defined in several parallel types of the hierarchy
(e.g. two interfaces not extending each other, or a class and an interface not implemented by said class),
no parameter constraints may be declared for that method at all nor parameters be marked for cascaded validation.
This again is to avoid an unexpected strengthening of preconditions to be fulfilled by the caller."

The cookie that is used to store the persistent session

If form authentication is enabled

The error page

Set the HttpOnly attribute to prevent access to the cookie via JavaScript.

The landing page to redirect to if there is no saved page to redirect back to

Option to control the name of the cookie used to redirect the user back to where he wants to get access to.

The login page

How old a cookie can get before it will be replaced with a new cookie with an updated timeout, also referred to as "renewal-timeout". Note that smaller values will result in slightly more server load (as new encrypted cookies will be generated more often), however larger values affect the inactivity timeout as the timeout is set when a cookie is generated. For example if this is set to 10 minutes, and the inactivity timeout is 30m, if a users last request is when the cookie is 9m old then the actual timeout will happen 21m after the last request, as the timeout is only refreshed when a new cookie is generated. In other words no timeout is tracked on the server side; the timestamp is encoded and encrypted in the cookie itself, and it is decrypted and parsed with each request.

The password field name.

The post location.

Option to disable redirect to landingPage if there is no saved page to redirect back to. Form Auth POST is followed by redirect to landingPage by default.

The inactivity (idle) timeout When inactivity timeout is reached, cookie is not renewed and a new login is enforced.

The username field name.

If this is true and credentials are present then a user will always be authenticated before the request progresses. If this is false then an attempt will only be made to authenticate the user if a permission check is performed or the current user is required for some other reason.

List of media types for which the compression should be enabled automatically, unless declared explicitly via Compressed or Uncompressed.

If responses should be compressed. Note that this will attempt to compress all responses, to avoid compressing already compressed content (such as images) you need to set the following header: Content-Encoding: identity Which will tell vert.x not to compress the response.

When enabled, vert.x will decompress the request's body if it's compressed. Note that the compression format (e.g., gzip) must be specified in the Content-Encoding header in the request.

A common root path for non-application endpoints. Various extension-provided endpoints such as metrics, health,
and openapi are deployed under this path by default.

* Relative path (Default, `q`) ->
Non-application endpoints will be served from
`${quarkus.http.root-path}/${quarkus.http.non-application-root-path}`.
* Absolute path (`/q`) ->
Non-application endpoints will be served from the specified path.
* `${quarkus.http.root-path}` -> Setting this path to the same value as HTTP root path disables
this root path. All extension-provided endpoints will be served from `${quarkus.http.root-path}`.

The HTTP root path. All web content will be served relative to this root path.

Configures the engine to require/request client authentication. NONE, REQUEST, REQUIRED

The REST Assured client timeout for testing.

If this is true then only a virtual channel will be set up for vertx web. We have this switch for testing purposes.

If enabled, Jackson will ignore case during Enum deserialization.

If enabled, Jackson will fail when no accessors are found for a type. This is enabled by default to match the default Jackson behavior.

If enabled, Jackson will fail when encountering unknown properties.

You can still override it locally with @JsonIgnoreProperties(ignoreUnknown = false).

If set, Jackson will default to using the specified timezone when formatting dates. Some examples values are "Asia/Jakarta" and "GMT+3". If not set, Jackson will use its own default.

If enabled, Jackson will serialize dates as numeric value(s).

The amount of time to wait for a remote dev connect or reconnect

Whether Quarkus should enable its ability to not do a full restart when changes to classes are compatible with JVM instrumentation. If this is set to true, Quarkus will perform class redefinition when possible.

The amount of time to wait between attempts when connecting to the server side of remote dev

The maximum number of attempts when connecting to the server side of remote dev

The set of supported locales that can be consumed by the extensions.

The locales must be specified in the IETF BCP 47 format e.g. en-US or fr-FR.

For instance, the Hibernate Validator extension makes use of it.

Native-image build uses it to define additional locales that are supposed to be available at runtime.

Whether logging metrics are published in case a metrics extension is present.

The default minimum log level.

Whether annotations such `@IfBuildTimeProfile`, `@IfBuildTimeProperty` and friends will be taken into account when used on JAX-RS classes.

When one of the quarkus-resteasy-reactive-jackson or quarkus-resteasy-reactive-jsonb extension are active and the result type of an endpoint is an application class or one of Collection, List, Set or Map, we assume the default return type is "application/json" if this configuration is enabled.

Whether duplicate endpoints should trigger error at startup

The amount of memory that can be used to buffer input before switching to blocking IO.

The size of the output stream response buffer. If a response is larger than this and no content-length is provided then the request will be chunked. Larger values may give slight performance increases for large responses, at the expense of more memory usage.

By default, we assume a default produced media type of "text/plain" for String endpoint return types. If this is disabled, the default produced media type will be "[text/plain, */*]" which is more expensive due to negotiation.

The syntax used in CRON expressions.
@see Scheduled#cron()

Scheduled task metrics will be enabled if a metrics extension is present and this value is true.

If set to true, access to all methods of beans that have any security annotations on other members will be denied by default. E.g. if enabled, in the following bean, methodB will be denied.

  {@literal @}ApplicationScoped
  public class A {
     {@literal @}RolesAllowed("admin")
     public void methodA() {
         ...
     }
     public void methodB() {
         ...
     }
  }

Enable trusting all certificates. Disable by default.

If set to true @Inject is automatically added to all non-static non-final fields that are annotated with one of the annotations defined by AutoInjectAnnotationBuildItem.

If set to true then javax.enterprise.inject.Produces is automatically added to all non-void methods that are annotated with a scope annotation, a stereotype or a qualifier, and are not annotated with Inject or Produces, and no parameter is annotated with Disposes, Observes or ObservesAsync.

The default naming strategy for ConfigProperties.NamingStrategy. The allowed values are determined by that enum

If set to true and SmallRye Context Propagation extension is present then enable the context propagation for CDI contexts.

If set to true then the container attempts to detect "unused removed beans" false positives during programmatic lookup at runtime. You can disable this feature to conserve some memory when running your application in production.
@see ArcConfig#removeUnusedBeans

If set to true then the container attempts to detect wrong usages of annotations and eventually fails the build to prevent unexpected behavior of a Quarkus application.

A typical example is @javax.ejb.Singleton which is often confused with @javax.inject.Singleton. As a result a component annotated with @javax.ejb.Singleton would be completely ignored. Another example is an inner class annotated with a scope annotation - this component would be again completely ignored.

If set to true then the container monitors business method invocations and fired events during the development mode.

The list of types that should be excluded from discovery.

An element value can be:

• a fully qualified class name, i.e. org.acme.Foo
• a simple class name as defined by Class#getSimpleName(), i.e. Foo
• a package name with suffix .*, i.e. org.acme.*, matches a package
• a package name with suffix .**, i.e. org.acme.**, matches a package that starts with the value

If set to true, the build fails if a private method that is neither an observer nor a producer, is annotated with an interceptor binding. An example of this is the use of Transactional on a private method of a bean. If set to false, Quarkus simply logs a warning that the annotation will be ignored.

The list of packages that will not be checked for split package issues.

A package string representation can be:

• a full name of the package, i.e. org.acme.foo
• a package name with suffix .*, i.e. org.acme.*, which matches a package that starts with provided value
Environment variable: QUARKUS_ARC_IGNORED_SPLIT_PACKAGES

• If set to all (or true) the container will attempt to remove all unused beans.
• If set to none (or false) no beans will ever be removed even if they are unused (according to the criteria set out below)
• If set to fwk, then all unused beans will be removed, except the unused beans whose classes are declared in the application code

An unused bean:

• is not a built-in bean or interceptor,
• is not eligible for injection to any injection point,
• is not excluded by any extension,
• does not have a name,
• does not declare an observer,
• does not declare any producer which is eligible for injection to any injection point,
• is not directly eligible for injection into any javax.enterprise.inject.Instance injection point

The list of selected alternatives for an application.

An element value can be:

• a fully qualified class name, i.e. org.acme.Foo
• a simple class name as defined by Class#getSimpleName(), i.e. Foo
• a package name with suffix .*, i.e. org.acme.*, matches a package
• a package name with suffix .**, i.e. org.acme.**, matches a package that starts with the value

If set to true then disable StartupEvent and ShutdownEvent observers declared on application bean classes during the tests.

If set to true, the bytecode of unproxyable beans will be transformed. This ensures that a proxy/subclass can be created properly. If the value is set to false, then an exception is thrown at build time indicating that a subclass/proxy could not be created. Quarkus performs the following transformations when this setting is enabled:

• Remove 'final' modifier from classes and methods when a proxy is required.
• Create a no-args constructor if needed.
• Makes private no-args constructors package-private if necessary.
  Environment variable: QUARKUS_ARC_TRANSFORM_UNPROXYABLE_CLASSES

List of types that should be considered unremovable regardless of whether they are directly used or not. This is a configuration option equivalent to using io.quarkus.arc.Unremovable annotation.

An element value can be:

• a fully qualified class name, i.e. org.acme.Foo
• a simple class name as defined by Class#getSimpleName(), i.e. Foo
• a package name with suffix .*, i.e. org.acme.*, matches a package
• a package name with suffix .**, i.e. org.acme.**, matches a package that starts with the value

The arguments passed to the command line.

We don't make it a list as the args are separated by a space, not a comma.

The path of the banner (path relative to root of classpath) which could be provided by user

If set to true, the workspace initialization will be based on the effective POMs (i.e. properly interpolated, including support for profiles) instead of the raw ones.

Whether to throw an error, warn or silently ignore misaligned platform BOM imports

If set to true, workspace discovery will be enabled for all launch modes. Usually, workspace discovery is enabled by default only for dev and test modes.

Artifacts that are loaded in a parent first manner. This can be used to work around issues where a given class needs to be loaded by the system ClassLoader. Note that if you make a library parent first all its dependencies should generally also be parent first.

Artifacts should be configured as a comma separated list of artifact ids, with the group, artifact-id and optional classifier separated by a colon.

WARNING: This config property can only be set in application.properties

Artifacts that are loaded in the runtime ClassLoader in dev mode, so they will be dropped and recreated on change.

This is an advanced option, it should only be used if you have a problem with libraries holding stale state between reloads. Note that if you use this any library that depends on the listed libraries will also need to be reloadable.

This setting has no impact on production builds.

Artifacts should be configured as a comma separated list of artifact ids, with the group, artifact-id and optional classifier separated by a colon.

WARNING: This config property can only be set in application.properties

Artifacts that will never be loaded by the class loader, and will not be packed into the final application. This allows you to explicitly remove artifacts from your application even though they may be present on the class path.

Additional config locations to be loaded with the Config. The configuration support multiple locations separated by a comma and each must represent a valid java.net.URI.

Accepts a single configuration profile name. If a configuration property cannot be found in the current active profile, the config performs the same lookup in the profile set by this configuration.

Set this to true to read configuration from system properties and environment variables only. This only applies to runtime.

Disable the testing status/prompt message at the bottom of the console and log these messages to STDOUT instead.

Use this option if your terminal does not support ANSI escape sequences.

If color should be enabled or disabled. If this is not present then an attempt will be made to guess if the terminal supports color

Disables the ability to enter input on the console.

If test results and status should be displayed in the console.

If this is false results can still be viewed in the dev console.

The credentials provider name

The credentials provider bean name.

It is the @Named value of the credentials provider bean. It is used to discriminate if multiple CredentialsProvider beans are available.

For Vault it is: vault-credentials-provider. Not necessary if there is only one credentials provider available.

The container start command to use, for container based DevServices providers. If the provider is not container based (e.g. a H2 Database) then this has no effect.

The name of the database to use if this Dev Service supports overriding it.

If DevServices has been explicitly enabled or disabled. DevServices is generally enabled by default, unless there is an existing configuration present. When DevServices is enabled Quarkus will attempt to automatically configure and start a database when running in Dev or Test mode.

The container image name to use, for container based DevServices providers. If the provider is not container based (e.g. a H2 Database) then this has no effect.

The password to use if this Dev Service supports overriding it.

Optional fixed port the dev service will listen to.

If not defined, the port will be chosen randomly.

The username to use if this Dev Service supports overriding it.

The datasource driver class name

Enable datasource metrics collection. If unspecified, collecting metrics will be enabled by default if a metrics extension is active.

Perform foreground validation on connections that have been idle for longer than the specified interval.

The initial size of the pool. Usually you will want to set the initial size to match at least the minimal size, but this is not enforced so to allow for architectures which prefer a lazy initialization of the connections on boot, while being able to sustain a minimal pool size after boot.

The interval at which we check for connection leaks.

The max lifetime of a connection.

Query executed when first using a connection.

Enable JDBC tracing.

Ignore specific queries from being traced

The transaction isolation level.

Require an active transaction when acquiring a connection. Recommended for production. WARNING: Some extensions acquire connections without holding a transaction for things like schema updates and schema validation. Setting this setting to STRICT may lead to failures in those cases.

Query executed to validate a connection.

The credentials provider name

The credentials provider bean name.

It is the @Named value of the credentials provider bean. It is used to discriminate if multiple CredentialsProvider beans are available.

For Vault it is: vault-credentials-provider. Not necessary if there is only one credentials provider available.

The container start command to use, for container based DevServices providers. If the provider is not container based (e.g. a H2 Database) then this has no effect.

The name of the database to use if this Dev Service supports overriding it.

If DevServices has been explicitly enabled or disabled. DevServices is generally enabled by default, unless there is an existing configuration present. When DevServices is enabled Quarkus will attempt to automatically configure and start a database when running in Dev or Test mode.

The container image name to use, for container based DevServices providers. If the provider is not container based (e.g. a H2 Database) then this has no effect.

The password to use if this Dev Service supports overriding it.

Optional fixed port the dev service will listen to.

If not defined, the port will be chosen randomly.

The username to use if this Dev Service supports overriding it.

The datasource driver class name

Enable datasource metrics collection. If unspecified, collecting metrics will be enabled by default if a metrics extension is active.

Perform foreground validation on connections that have been idle for longer than the specified interval.

The initial size of the pool. Usually you will want to set the initial size to match at least the minimal size, but this is not enforced so to allow for architectures which prefer a lazy initialization of the connections on boot, while being able to sustain a minimal pool size after boot.

The interval at which we check for connection leaks.

The max lifetime of a connection.

Query executed when first using a connection.

Enable JDBC tracing.

Ignore specific queries from being traced

The transaction isolation level.

Require an active transaction when acquiring a connection. Recommended for production. WARNING: Some extensions acquire connections without holding a transaction for things like schema updates and schema validation. Setting this setting to STRICT may lead to failures in those cases.

Query executed to validate a connection.

If set to a directory, all generated classes will be written into that directory

If set to a directory, ZIG files for generated code will be written into that directory.

A ZIG file is a textual representation of the generated code that is referenced in the stacktraces.

If set to true, writes a list of all reflective classes to META-INF

If set to a directory, all transformed classes (e.g. Panache entities) will be written into that directory

The number of history log entries to remember.

Global flag that can be used to disable all Dev Services. If this is set to false then Dev Services will not be used.

The timeout for starting a container

Whether this persistence unit should be active at runtime.

If the persistence unit is not active, it won't start with the application,
and accessing the corresponding EntityManagerFactory/EntityManager or SessionFactory/Session
will not be possible.

Note that if Hibernate ORM is disabled (i.e. `quarkus.hibernate-orm.enabled` is set to `false`),
all persistence units are deactivated, and setting this property to `true` will fail.

The size of the batches used when loading entities and collections.

`-1` means batch loading is disabled.

@deprecated #fetch should be used to configure fetching properties.

The charset of the database.

Used for DDL generation and also for the SQL import scripts.

The default catalog to use for the database objects.

The default schema to use for the database objects.

Whether Hibernate should quote all identifiers.

The storage engine to use when the dialect supports multiple storage engines.

E.g. `MyISAM` or `InnoDB` for MySQL.

Existing applications rely (implicitly or explicitly) on Hibernate ignoring any DiscriminatorColumn declarations on joined inheritance hierarchies. This setting allows these applications to maintain the legacy behavior of DiscriminatorColumn annotations being ignored when paired with joined inheritance.

Whether Hibernate ORM is enabled during the build.

If Hibernate ORM is disabled during the build, all processing related to Hibernate ORM will be skipped,
but it will not be possible to activate Hibernate ORM at runtime:
`quarkus.hibernate-orm.active` will default to `false` and setting it to `true` will lead to an error.

The size of the batches used when loading entities and collections.

`-1` means batch loading is disabled.

The maximum depth of outer join fetch tree for single-ended associations (one-to-one, many-to-one).

A `0` disables default outer join fetching.

Pluggable strategy for applying implicit naming rules when an explicit name is not given. Class name of the Hibernate ImplicitNamingStrategy implementation

The number of updates (inserts, updates and deletes) that are sent by the JDBC driver at one time for execution.

How many rows are fetched at a time by the JDBC driver.

The time zone pushed to the JDBC driver.

Whether session metrics should be appended into the server log for each Hibernate session. This only has effect if statistics are enabled (`quarkus.hibernate-orm.statistics`). The default is false (which means both `statistics` and `log-session-metrics` need to be enabled for the session metrics to appear in the log).

Logs SQL bind parameter.

Setting it to true is obviously not recommended in production.

Logs SQL bind parameters.

Setting it to true is obviously not recommended in production.

Whether JDBC warnings should be collected and logged.

If set, Hibernate will log queries that took more than specified number of milliseconds to execute.

XML files to configure the entity mapping, e.g. META-INF/my-orm.xml.

Defaults to `META-INF/orm.xml` if it exists. Pass `no-file` to force Hibernate ORM to ignore `META-INF/orm.xml`.

The maximum depth of outer join fetch tree for single-ended associations (one-to-one, many-to-one).

A `0` disables default outer join fetching.

@deprecated #fetch should be used to configure fetching properties.

Class name of a custom
https://docs.jboss.org/hibernate/stable/orm/javadocs/org/hibernate/boot/spi/MetadataBuilderContributor.html[`org.hibernate.boot.spi.MetadataBuilderContributor`]
implementation.

[NOTE]
====
Not all customization options exposed by
https://docs.jboss.org/hibernate/stable/orm/javadocs/org/hibernate/boot/MetadataBuilder.html[`org.hibernate.boot.MetadataBuilder`]
will work correctly. Stay clear of options related to classpath scanning in particular.

This setting is exposed mainly to allow registration of types, converters and SQL functions.
====

Whether metrics are published if a metrics extension is enabled.

Defines the method for multi-tenancy (DATABASE, NONE, SCHEMA). The complete list of allowed values is available in the
https://javadoc.io/doc/org.hibernate/hibernate-core/5.6.10.Final/org/hibernate/MultiTenancyStrategy.html[Hibernate ORM
JavaDoc].
The type DISCRIMINATOR is currently not supported. The default value is NONE (no multi-tenancy).

Defines the name of the datasource to use in case of SCHEMA approach. The datasource of the persistence unit will be used if not set.

Pluggable strategy contract for applying physical naming rules for database object names. Class name of the Hibernate PhysicalNamingStrategy implementation

Default precedence of null values in `ORDER BY` clauses.

Valid values are: `none`, `first`, `last`.

The maximum size of the query plan cache. see #{@value QueryPlanCache#DEFAULT_QUERY_PLAN_MAX_COUNT}

Filename or URL where the database create DDL file should be generated.

Filename or URL where the database drop DDL file should be generated.

The default in Quarkus is for 2nd level caching to be enabled, and a good implementation is already integrated for you.

Just cherry-pick which entities should be using the cache.

Set this to false to disable all 2nd level caches.

Path to a file containing the SQL statements to execute when Hibernate ORM starts.

The file is retrieved from the classpath resources,
so it must be located in the resources directory (e.g. `src/main/resources`).

The default value for this setting differs depending on the Quarkus launch mode:

* In dev and test modes, it defaults to `import.sql`.
Simply add an `import.sql` file in the root of your resources directory
and it will be picked up without having to set this property.
Pass `no-file` to force Hibernate ORM to ignore the SQL import file.
* In production mode, it defaults to `no-file`.
It means Hibernate ORM won't try to execute any SQL import file by default.
Pass an explicit value to force Hibernate ORM to execute the SQL import file.

If you need different SQL statements between dev mode, test (`@QuarkusTest`) and in production, use Quarkus
https://quarkus.io/guides/config#configuration-profiles[configuration profiles facility].

[source,property]
.application.properties
----
%dev.quarkus.hibernate-orm.sql-load-script = import-dev.sql
%test.quarkus.hibernate-orm.sql-load-script = import-test.sql
%prod.quarkus.hibernate-orm.sql-load-script = no-file
----

[NOTE]
====
Quarkus supports `.sql` file with SQL statements or comments spread over multiple lines.
Each SQL statement must be terminated by a semicolon.
====

Whether statistics collection is enabled. If 'metrics.enabled' is true, then the default here is considered true, otherwise the default is false.

If hibernate is not auto generating the schema, and Quarkus is running in development mode then Quarkus will attempt to validate the database after startup and print a log message if there are any problems.

Configure the Expression Language feature level for constraints, allowing the selection of Expression Language features available for message interpolation.

This property only affects the EL feature level of "static" constraint violation messages set through the message attribute of constraint annotations.

In particular, it doesn't affect the default EL feature level for custom violations created programmatically in validator implementations. The feature level for those can only be configured directly in the validator implementation.

A regular expression that can be used to exclude some paths from logging.

The log directory to use when logging access to a file If this is not set then the current working directory is used.

If basic auth should be enabled. If both basic and form auth is enabled then basic auth will be enabled in silent mode. If no authentication mechanisms are configured basic auth is the default.

The authentication realm

The encryption key that is used to store persistent logins (e.g. for form auth). Logins are stored in a persistent cookie that is encrypted with AES-256 using a key derived from a SHA-256 hash of the key that is provided here. If no key is provided then an in-memory one will be generated, this will change on every restart though so it is not suitable for production environments. This must be more than 16 characters long for security reasons

The compression level used when compression support is enabled.

The `Access-Control-Allow-Credentials` header is used to tell the browsers to expose the response to front-end JavaScript code when the request’s credentials mode Request.credentials is “include”. The value of this header will default to `true` if `quarkus.http.cors.origins` property is set and there is a match with the precise `Origin` header and that header is not '*'.

The `Access-Control-Max-Age` response header value indicating how long the results of a pre-flight request can be cached.

HTTP headers exposed in CORS Comma separated list of valid headers. ex: X-Custom,Content-Disposition default: empty

The number if IO threads used to perform IO. This will be automatically set to a reasonable value based on the number of CPU cores if it is not provided. If this is set to a higher value than the number of Vert.x event loops then it will be capped at the number of event loops. In general this should be controlled by setting quarkus.vertx.event-loops-pool-size, this setting should only be used if you want to limit the number of HTTP io threads to a smaller number than the total number of IO threads.

The maximum number of connections that are allowed at any one time. If this is set it is recommended to set a short idle timeout.

If either this or allow-forwarded are true and proxy address forwarding is enabled then the not standard Forwarded header will be used. In case the standard Forwarded header is enabled and detected on HTTP requests, the standard header has the precedence. Activating this together with quarkus.http.proxy.allow-x-forwarded has security implications as clients can forge requests with a forwarded header that is not overwritten by the proxy. Therefore, proxies should strip unexpected `X-Forwarded` or `X-Forwarded-*` headers from the client.

The {@linkplain CredentialsProvider}}. If this property is configured then a matching 'CredentialsProvider' will be used to get the keystore, keystore key and truststore passwords unless these passwords have already been configured. Please note that using MicroProfile {@linkplain ConfigSource} which is directly supported by Quarkus Configuration should be preferred unless using `CredentialsProvider` provides for some additional security and dynamism.

The credentials provider bean name.

It is the @Named value of the credentials provider bean. It is used to discriminate if multiple CredentialsProvider beans are available. It is recommended to set this property even if there is only one credentials provider currently available to ensure the same provider is always found in deployments where more than one provider may be available.

The file path to a server certificate or certificate chain in PEM format.
@deprecated Use #files instead.

The list of path to server certificates using the PEM format. Specifying multiple files require SNI to be enabled.

The file path to the corresponding certificate private key file in PEM format.
@deprecated Use #keyFiles instead.

The list of path to server certificates private key file using the PEM format. Specifying multiple files require SNI to be enabled. The order of the key files must match the order of the certificates.

An optional key store which holds the certificate information instead of specifying separate files.

An optional parameter to specify type of the key store file. If not given, the type is automatically detected based on the file name.

An optional parameter to select a specific key in the key store. When SNI is disabled, if the key store contains multiple keys and no alias is specified, the behavior is undefined.

An optional parameter to define the password for the key, in case it's different from #keyStorePassword If not given then it may be retrieved from {@linkplain CredentialsProvider}.
@see #credentialsProvider.

A parameter to specify a {@linkplain CredentialsProvider} property key which can be used to get the password for the key from {@linkplain CredentialsProvider}.
@see #credentialsProvider

A parameter to specify the password of the key store file. If not given, and if it can not be retrieved from {@linkplain CredentialsProvider}, then the default ("password") is used.
@see #credentialsProvider

A parameter to specify a {@linkplain CredentialsProvider} property key which can be used to get the password of the key store file from {@linkplain CredentialsProvider}.
@see #credentialsProvider

An optional parameter to specify a provider of the key store file. If not given, the provider is automatically detected based on the key store file type.

An optional parameter to trust only one specific certificate in the trust store (instead of trusting all certificates in the store).

An optional trust store which holds the certificate information of the certificates to trust.

An optional parameter to specify type of the trust store file. If not given, the type is automatically detected based on the file name.

A parameter to specify the password of the trust store file. If not given then it may be retrieved from {@linkplain CredentialsProvider}.
@see #credentialsProvider.

A parameter to specify a {@linkplain CredentialsProvider} property key which can be used to get the password of the trust store file from {@linkplain CredentialsProvider}.
@see #credentialsProvider

An optional parameter to specify a provider of the trust store file. If not given, the provider is automatically detected based on the trust store file type.

The cipher suites to use. If none is given, a reasonable default is selected.

Provides a hint (optional) for the default content type of responses generated for the errors not handled by the application.

If the client requested a supported content-type in request headers (e.g. "Accept: application/json", "Accept: text/html"), Quarkus will use that content type.

Otherwise, it will default to the content type configured here.

The Ide to use to open files from the DevUI. auto means that Quarkus will attempt to determine the Ide being used.

Define which properties of Java Beans are to be included in serialization.

@deprecated JNI is always enabled starting from GraalVM 19.3.1.

Paths of library to load.

Password used to use to connect to the remote dev-mode application

URL used to use to connect to the remote dev-mode application

The names of additional resource files to watch for changes, triggering a reload on change. Directories are not supported.

The names of the handlers to link to this category.

The log level for this category. Note that to get log levels below INFO, the minimum level build time configuration option needs to be adjusted as well.

The minimum log level for this category. By default, all categories are configured with DEBUG minimum level. To get runtime logging below DEBUG, e.g. TRACE, the minimum level has to be adjusted at build time, the right log level needs to be provided at runtime. As an example, to get TRACE logging, minimum level needs to be at TRACE and the runtime log level needs to match that.

Specify whether this logger should send its output to its parent Logger

The names of the handlers to link to this category.

The log level for this category. Note that to get log levels below INFO, the minimum level build time configuration option needs to be adjusted as well.

The minimum log level for this category. By default, all categories are configured with DEBUG minimum level. To get runtime logging below DEBUG, e.g. TRACE, the minimum level has to be adjusted at build time, the right log level needs to be provided at runtime. As an example, to get TRACE logging, minimum level needs to be at TRACE and the runtime log level needs to match that.

Specify whether this logger should send its output to its parent Logger

If the console logging should be in color. If undefined quarkus takes best guess based on operating system and environment. Note that this value will be ignored if an extension is present that takes control of console formatting (e.g. an XML or JSON-format extension). This has been deprecated, and replaced with quarkus.console.color instead, as quarkus now provides more console based functionality than just logging.

The name of the filter to link to the console handler.

The name of the filter to link to the file handler.

File handler rotation file suffix. When used, the file will be rotated based on its suffix. Example fileSuffix: .yyyy-MM-dd

The names of additional handlers to link to the root category. These handlers are defined in consoleHandlers, fileHandlers or syslogHandlers.

The app name used when formatting the message in RFC5424 format

The name of the filter to link to the file handler.

The name of the host the messages are being sent from

By default, Quarkus will install a non-functional JNDI initial context, to help mitigate against Log4Shell style attacks. If your application does need to use JNDI you can change this flag.

If all character sets should be added to the native image. This increases image size

Comma-separated, additional arguments to pass to the build process. If an argument includes the , symbol, it needs to be escaped, e.g. \\,

If all META-INF/services entries should be automatically registered

The docker image to use to do the image build. It can be one of `graalvm`, `mandrel`, or the full image path, e.g. quay.io/quarkus/ubi-quarkus-mandrel:21.3-java17.

If the native image server should be restarted.
@deprecated Since GraalVM 20.2.0 the native image server has become an experimental feature and is disabled by default.

Allows passing extra arguments to the UPX command line (like --brute). The arguments are comma-separated. The exhaustive list of parameters can be found in https://github.com/upx/upx/blob/devel/doc/upx.pod.

The compression level in [1, 10]. 10 means best Higher compression level requires more time to compress the executable.

If this build should be done using a container runtime. Unless container-runtime is also set, docker will be used by default. If docker is not available or is an alias to podman, podman will be used instead as the default.

The container runtime (e.g. docker) that is used to do an image based build. If this is set then a container build is always done.

Options to pass to the container runtime

If the native image build should wait for a debugger to be attached before running. This is an advanced option and is generally only intended for those familiar with GraalVM internals

If debug is enabled and debug symbols are generated. The symbols will be generated in a separate .debug file.

If the bytecode of all proxies should be dumped for inspection

If all security services should be added to the native image
@deprecated --enable-all-security-services was removed in GraalVM 21.1 https://github.com/oracle/graal/pull/3258

Generate the report files for GraalVM Dashboard.

If a JVM based 'fallback image' should be created if native image fails. This is not recommended, as this is functionally the same as just running the application in a JVM

If the HTTP url handler should be enabled, allowing you to do URL.openConnection() for HTTP URLs

If the HTTPS url handler should be enabled, allowing you to do URL.openConnection() for HTTPS URLs

If isolates should be enabled

@deprecated JNI is always enabled starting from GraalVM 19.3.1.

If the reports on call paths and included packages/classes/methods should be generated

If the native image server should be used. This can speed up compilation but can result in changes not always being picked up due to cache invalidation not working 100%
@deprecated This used to be the default prior to GraalVM 20.2.0 and this configuration item was used to disable it as it was not stable. Since GraalVM 20.2.0 the native image server has become an experimental feature.

If the resulting image should allow VM introspection

Defines the file encoding as in -Dfile.encoding=.... Native image runtime uses the host's (i.e. build time) value of file.encoding system property. We intentionally default this to UTF-8 to avoid platform specific defaults to be picked up which can then result in inconsistent behavior in the generated native executable.

If full stack traces are enabled in the resulting image

The location of the Graal distribution

The default value for java.awt.headless JVM option. Switching this option affects linking of awt libraries.

If -H:+InlineBeforeAnalysis flag will be added to the native-image run
@deprecated inlineBeforeAnalysis is always enabled starting from GraalVM 21.3.

The location of the JDK

The maximum Java heap to be used during the native image generation

If the debug port should be published when building with docker and debug-build-process is true

If this build is done using a remote docker daemon.

If errors should be reported at runtime. This is a more relaxed setting, however it is not recommended as it means your application may fail at runtime if an unsupported feature is used by accident.

If exceptions should be reported with a full stack trace

A comma separated list of globs to match resource paths that should not be added to the native image.

Use slash (/) as a path separator on all platforms. Globs must not start with slash.

Please refer to #includes for details about the glob syntax.

By default, no resources are excluded.

Example: Given that you have src/main/resources/red.png and src/main/resources/foo/green.png in your source tree and one of your dependency JARs contains bar/blue.png file, with the following configuration

quarkus.native.resources.includes = **/*.png
quarkus.native.resources.excludes = foo/**,**/green.png

A comma separated list of globs to match resource paths that should be added to the native image.

Use slash (/) as a path separator on all platforms. Globs must not start with slash.

By default, no resources are included.

Example: Given that you have src/main/resources/ignored.png and src/main/resources/foo/selected.png in your source tree and one of your dependency JARs contains bar/some.txt file, with the following configuration

quarkus.native.resources.includes = foo/**,bar/**/*.txt

Supported glob features

Note that there are three levels of escaping when passing this option via application.properties:

1. application.properties parser
2. MicroProfile Config list converter that splits the comma separated list
3. Glob parser

Note that Quarkus extensions typically include the resources they require by themselves. This option is useful in situations when the built-in functionality is not sufficient.

Don't build a native image if it already exists. This is useful if you have already built an image and you want to use Quarkus to deploy it somewhere. Note that this is not able to detect if the existing image is outdated, if you have modified source or config and want a new image you must not use this flag.

Defines the user country used for building the native executable. It also serves as the default Locale country for the native executable application runtime. e.g. US or FR as defined by ISO 3166-1 alpha-2 codes.

@deprecated Use the global quarkus.default-locale.

Defines the user language used for building the native executable. It also serves as the default Locale language for the native executable application runtime. e.g. en or cs as defined by IETF BCP 47 language tags.

@deprecated Use the global quarkus.default-locale.

The value configuring the io.netty.allocator.maxOrder system property of Netty. The default value is 3. Configuring this property overrides the minimum maxOrder requested by the extensions. This property affects the memory consumption of the application. It must be used carefully. More details on https://programmer.group/pool-area-of-netty-memory-pool.html.

Indicates whether the generated binary file (uber-jar or native image) should have the runner suffix appended. Turning off the runner suffix in case of the uber-jar package type, the original build system (Maven, Gradle, etc) built JAR will be replaced with the Quarkus built uber JAR.

When AppCDS generation is enabled, if this property is set, then the JVM used to generate the AppCDS file will be the JVM present in the container image. The builder image is expected to have the 'java' binary on its PATH. This flag is useful when the JVM to be used at runtime is not the same exact JVM version as the one used to build the jar. Note that this property is consulted only when quarkus.package.create-appcds=true and it requires having docker available during the build.

Whether creation of the AppCDS archive should run in a container if available.

Normally, if either a suitable container image to create the AppCDS archive inside of can be determined automatically or if one is explicitly set using the quarkus.package.appcds-builder-image setting, the AppCDS archive is generated by running the JDK contained in the image as a container.

If this option is set to false, a container will not be used to generate the AppCDS archive. Instead, the JDK used to build the application is also used to create the archive. Note that the exact same JDK version must be used to run the application in this case.

Ignored if quarkus.package.create-appcds is set to false.

Whether to automate the creation of AppCDS. This has no effect when a native binary is needed and will be ignored in that case. Furthermore, this option only works for Java 11+ and is considered experimental for the time being. Finally, care must be taken to use the same exact JVM version when building and running the application.

An advanced option that will decompile generated and transformed bytecode into the 'decompiled' directory. This is only taken into account when fast-jar is used.

The git hash to use to download the fernflower tool from https://jitpack.io/com/github/fesh0r/fernflower/

The directory into which to save the fernflower tool if it doesn't exist

Flag indicating whether the optional dependencies should be filtered out or not.

This parameter is meant to be used in modules where multi-builds have been configured to avoid getting a final package with unused dependencies.

This option only applies when using fast-jar or mutable-jar. If this option is true then a list of all the coordinates of the artifacts that made up this image will be included in the quarkus-app directory. This list can be used by vulnerability scanners to determine if your application has any vulnerable dependencies.

List of all the dependencies that have been defined as optional to include into the final package of the application. Each optional dependency needs to be expressed in the following format:

groupId:artifactId:classifier:type

With the classifier and type being optional.

If the type is missing, the artifact is assumed to be of type jar.

This parameter is optional, if absent, no optional dependencies will be included into the final package of the application.

For backward compatibility reasons, this parameter is ignored by default and can be enabled by setting the parameter quarkus.package.filter-optional-dependencies to true.

This parameter is meant to be used in modules where multi-builds have been configured to avoid getting a final package with unused dependencies.

The entry point of the application. This can either be a fully qualified name of a standard Java class with a main method, or io.quarkus.runtime.QuarkusApplication.

If your application has main classes annotated with io.quarkus.runtime.annotations.QuarkusMain then this can also reference the name given in the annotation, to avoid the need to specify fully qualified names in the config.

If the Implementation information should be included in the runner jar's MANIFEST.MF.

The output folder in which to place the output, this is resolved relative to the build systems target directory.

The name of the final artifact

An advanced option that will decompile generated and transformed bytecode into the 'decompiled' directory. This is only taken into account when fast-jar is used.

The directory into which to save the fernflower tool if it doesn't exist

The version of Quiltflower to use

The suffix that is applied to the runner jar and native images

The requested output type.

The default built in types are 'jar' (which will use 'fast-jar'), 'legacy-jar' for the pre-1.12 default jar packaging, 'uber-jar', 'native' and 'native-sources'.

Files that should not be copied to the output artifact

This is an advanced option that only takes effect for the mutable-jar format.

If this is specified a directory of this name will be created in the jar distribution. Users can place jar files in this directory, and when re-augmentation is performed these will be processed and added to the class-path.

Note that before reaugmentation has been performed these jars will be ignored, and if they are updated the app should be reaugmented again.

If set to true, it will result in the Quarkus writing the transformed application bytecode to the build tool's output directory. This is useful for post-build tools that need to scan the application bytecode - for example for offline code-coverage tools. For example, if using Maven, enabling this feature will result in the classes in target/classes being updated with the versions that result after Quarkus has applied its transformations. Setting this to true however, should be done with a lot of caution and only if subsequent builds are done in a clean environment (i.e. the build tool's output directory has been completely cleaned).

artifactId of the platform to use

groupId of the platform to use

version of the platform to use

Set this to define the application path that serves as the base URI for all JAX-RS resource URIs provided by @Path annotations when there are no @ApplicationPath annotations defined on Application classes.

This value is always resolved relative to quarkus.http.root-path.

Whether authorization is enabled in dev mode or not. In other launch modes authorization is always enabled.

If no security annotations are affecting a method then they will default to requiring these roles, (equivalent to adding an @RolesAllowed annotation with the roles to every endpoint class). The role of '**' means any authenticated user, which is equivalent to the io.quarkus.security.Authenticated annotation.

If no security annotations are affecting a method then they will default to requiring these roles, (equivalent to adding an @RolesAllowed annotation with the roles to every endpoint class). The role of '**' means any authenticated user, which is equivalent to the io.quarkus.security.Authenticated annotation.

List of security providers to register

The timeout to wait for running requests to finish. If this is not set then the application will exit immediately. Setting this timeout will incur a small performance penalty, as it requires active requests to be tracked.

The MP-JWT configuration object

The name of the {@linkplain java.security.Provider} that supports SHA256withRSA signatures

A list of local directories that should be scanned for yaml and/or json files to be included in the static model. Example: `META-INF/openapi/`

Do not run the filter only at startup, but every time the document is requested (dynamic).

This will automatically add security based on the security extension included (if any).

This will automatically add the security requirement to all methods/classes that has a `RolesAllowed` annotation.

Setting it to `true` will automatically add a default server to the schema if none is provided, using the current running server host and port.

This will automatically add tags to operations based on the Java class name.

Add a scheme value to the Basic HTTP Security Scheme

Do not include the provided static openapi document (eg. META-INF/openapi.yaml)

Set the license name in Info tag in the Schema document

Set the license url in Info tag in the Schema document

Set the terms of the service in Info tag in the Schema document

Add a bearer format the JWT Security Scheme

Add a scheme value to the JWT Security Scheme

Add a scheme value to OAuth2 opaque token Security Scheme

Add an implicit flow authorizationUrl value to the OAuth2 Security Scheme

Add a implicit flow refreshUrl value to the OAuth2 Security Scheme

Add an implicit flow tokenUrl value to the OAuth2 Security Scheme

Add a scheme value to the OAuth2 opaque token Security Scheme

Add a openIdConnectUrl value to the OIDC Security Scheme

Override the openapi version in the Schema document

Set the strategy to automatically create an operation Id

The path at which to register the OpenAPI Servlet.

Add a description to the Security Scheme

Add a Security Scheme name to the generated OpenAPI document

If set, the generated OpenAPI schema documents will be stored here on build. Both openapi.json and openapi.yaml will be stored here if this is set.

Enable native SSL support.

If this should be included every time. By default, this is only included when the application is running in dev mode.

If set to true, enables deep linking for tags and operations.