Skip to content

Audit trail configuration

Configuration of the audit trail, of the storage of its evidence, and of the demonstration tampering switch.

Name Environment Description Default value Notes
ontrack.extension.audit-trail.demo-tampering.enabled ONTRACK_EXTENSION_AUDIT_TRAIL_DEMO_TAMPERING_ENABLED Allows a global administrator to rewrite the payload of a trail entry through the API, to demonstrate a broken chain. Never enable it in production: while it is on, the trails of the instance prove nothing, and every page says so in a permanent error message. false
ontrack.extension.audit-trail.storage.access-key ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_ACCESS_KEY Access key of the S3-compatible service. Required.
ontrack.extension.audit-trail.storage.bucket ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_BUCKET Name of the bucket storing the evidence. It must exist. Required.
ontrack.extension.audit-trail.storage.endpoint ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_ENDPOINT URL of the S3-compatible service storing the evidence, for example https://fra1.digitaloceanspaces.com or http://minio:9000. Required.
ontrack.extension.audit-trail.storage.max-size ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_MAX_SIZE Maximum size of one evidence, for the whole instance. In megabytes when no unit is given. 50 (MEGABYTES)
ontrack.extension.audit-trail.storage.path-style ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_PATH_STYLE Path-style addressing (<endpoint>/<bucket>), as MinIO needs, instead of the virtual-hosted one (<bucket>.<endpoint>), as AWS S3 and DigitalOcean Spaces use. false
ontrack.extension.audit-trail.storage.region ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_REGION Region of the bucket. MinIO accepts any region; DigitalOcean Spaces wants the region of the endpoint, for example fra1. us-east-1
ontrack.extension.audit-trail.storage.secret-key ONTRACK_EXTENSION_AUDIT_TRAIL_STORAGE_SECRET_KEY Secret key of the S3-compatible service. Required.