Merge branch '4956-limit-request-size' refs #4956

[arvados.git] / services / api / config / application.default.yml

diff --git a/services/api/config/application.default.yml b/services/api/config/application.default.yml
index 2d62e40f034a6bcbaca3697768d9ca7e48246ad4..5547704fc388fd46719095e5b67f5bf339835ff0 100644 (file)
--- a/services/api/config/application.default.yml
+++ b/services/api/config/application.default.yml
@@ -244,4 +244,14 @@ common:
   # Permit insecure (OpenSSL::SSL::VERIFY_NONE) connections to the Single Sign
   # On (sso) server.  Should only be enabled during development when the SSO
   # server is using a self-signed cert.
-  sso_insecure: false
\ No newline at end of file
+  sso_insecure: false
+
+  # Default replication level for collections. This is used when a
+  # collection's replication_desired attribute is nil.
+  default_collection_replication: 2
+
+  # Maximum size (in bytes) allowed for a single API request that will be
+  # published in the discovery document for use by clients.
+  # Note you must separately configure the upstream web server or proxy to
+  # actually enforce the desired maximum request size on the server side.
+  max_request_size: 134217728