Configuration

Platformatic DB is configured with a configuration file. It supports the use of environment variables as setting values with configuration placeholders.

Configuration file

If the Platformatic CLI finds a file in the current working directory matching one of these filenames, it will automatically load it:

• platformatic.db.json
• platformatic.db.json5
• platformatic.db.yml or platformatic.db.yaml
• platformatic.db.tml or platformatic.db.toml

Alternatively, a --config option with a configuration filepath can be passed to most platformatic db CLI commands.

The configuration examples in this reference use JSON.

Supported formats

Format	Extensions
JSON	.json
JSON5	.json5
YAML	.yml, .yaml
TOML	.tml

Comments are supported by the JSON5, YAML and TOML file formats.

Settings

Configuration settings are organised into the following groups:

• db (required)
• dashboard
• metrics
• migrations
• plugins
• server (required)
• authorization

Sensitive configuration settings, such as a database connection URL that contains a password, should be set using configuration placeholders.

db

A required object with the following settings:

• connectionString (required, string) — Database connection URL.

  • Example: postgres://user:password@my-database:5432/db-name

• schema (array of string) - Currently supported only for postgres, schemas used tolook for entities. If not provided, the default public schema is used.

  Examples

  "db": {
    "connectionString": "(...)",
    "schema": [
      "schema1", "schema2"
    ],
    ...

  },

• Platformatic DB supports MySQL, MariaDB, PostgreSQL and SQLite.

• graphql (boolean or object, default: true) — Controls the GraphQL API interface, with optional GraphiQL UI.

  Examples

  Enables GraphQL support

  {
    "db": {
      ...
      "graphql": true
    }
  }

  Enables GraphQL support with GraphiQL

  {
    "db": {
      ...
      "graphql": {
        "graphiql": true
      }
    }
  }

  It's possible to selectively ignore entites:

  {
    "db": {
      ...
      "graphql": {
        "ignore": {
          "categories": true
        }
      }
    }
  }

  It's possible to selectively ignore fields:

  {
    "db": {
      ...
      "graphql": {
        "ignore": {
          "categories": {
            "name": true
          }
        }
      }
    }
  }

  It's possible to add a custom GraphQL schema during the startup:

  {
    "db": {
      ...
      "graphql": {
        "schemaPath": "path/to/schema.graphql"
        }
      }
    }
  }

• openapi (boolean or object, default: true) — Enables OpenAPI REST support.

  • If value is an object, all OpenAPI v3 allowed properties can be passed. Also a prefix property can be passed to set the OpenAPI prefix.
  • Platformatic DB uses @fastify/swagger under the hood to manage this configuration.

  Examples

  Enables OpenAPI

  {
    "db": {
      ...
      "openapi": true
    }
  }

  Enables OpenAPI with prefix

  {
    "db": {
      ...
      "openapi": {
        "prefix": "/api"
      }
    }
  }

  Enables OpenAPI with options

  {
    "db": {
      ...
      "openapi": {
        "info": {
          "title": "Platformatic DB",
          "description": "Exposing a SQL database as REST"
        }
      }
    }
  }

  You can for example add the security section, so that Swagger will allow you to add the authentication header to your requests. In the following code snippet, we're adding a Bearer token in the form of a JWT:

  {
    "db": {
      ...
      "openapi": {
        ...
        "security": [{ "bearerAuth": [] }],
        "components": {
          "securitySchemes": {
            "bearerAuth": {
              "type": "http",
              "scheme": "bearer",
              "bearerFormat": "JWT"
            }
          }
        }
      }
    }
  }

  It's possible to selectively ignore entites:

  {
    "db": {
      ...
      "openapi": {
        "ignore": {
          "categories": true
        }
      }
    }
  }

  It's possible to selectively ignore fields:

  {
    "db": {
      ...
      "openapi": {
        "ignore": {
          "categories": {
            "name": true
          }
        }
      }
    }
  }

• ignore (object) — Key/value object that defines which database tables should not be mapped as API entities.

  Examples

  {
    "db": {
      ...
      "ignore": {
        "versions": true // "versions" table will be not mapped with GraphQL/REST APIs
      }
    }
  }

• events (boolean or object, default: true) — Controls the support for events published by the SQL mapping layer. If enabled, this option add support for GraphQL Subscription over WebSocket. By default it uses an in-process message broker. It's possible to configure it to use Redis instead.

  Examples

  {
    "db": {
      ...
      "events": {
        "connectionString": "redis://:password@redishost.com:6380/"
      }
    }
  }

dashboard

This setting can be a boolean or an object. If set to true the dashboard will be served at the root path (/).

Supported object properties:

• path (string, default: /) — Make the dashboard available at the specified path.

tip

Read the dashboard docs to understand how to create a build or have the Vite's development server up and running.

metrics

Configuration for a Prometheus server that will export monitoring metrics for the current server instance. It uses fastify-metrics under the hood.

This setting can be a boolean or an object. If set to true the Prometheus server will listen on http://0.0.0.0:9090.

Supported object properties:

• hostname (string) — The hostname where Prometheus server will listen for connections.
• port (number) — The port where Prometheus server will listen for connections.
• auth (object) — Basic Auth configuration. username and password are required here (use environment variables).

migrations

Configures Postgrator to run migrations against the database.

An optional object with the following settings:

• dir (required, string): Relative path to the migrations directory.
• autoApply (boolean, default: false): Automatically apply migrations when Platformatic DB server starts.

plugins

An optional object that defines the plugins loaded by Platformatic DB.

• paths (required, array): an array of paths (string) or an array of objects composed as follows,

  • path (string): Relative path to plugin's entry point.
  • options (object): Optional plugin options.
  • encapsulate (boolean): if the path is a folder, it instruct Platformatic to not encapsulate those plugins, allowing decorators and hooks to be shared across all routes.
  • maxDepth (integer): if the path is a folder, it limits the depth to load the content from.

• typescript (boolean): enable typescript compilation. A tsconfig.json file is required in the same folder.

• hotReload (boolean, default: true) if true or not specified, the plugin is loaded using fastify-sandbox, otherwise is loaded directly using require/import and the hot reload is not enabled

  Example

  {
    "plugins": {
      "paths": [{
        "path": "./my-plugin.js"
      }],
      "hotReload": true
    }
  }

danger

While hot reloading is useful for development, it is not recommended to use it in production. To switch if off, set hotReload to false.

watch

Disable watching for file changes if set to false. It can also be customized with the following options:

• ignore (string[], default: null): List of glob patterns to ignore when watching for changes. If null or not specified, ignore rule is not applied. Ignore option doesn't work for typescript files.

• allow (string[], default: ['*.js', '**/*.js']): List of glob patterns to allow when watching for changes. If null or not specified, allow rule is not applied. Allow option doesn't work for typescript files.

  Example

  {
    "watch": {
      "ignore": ["*.mjs", "**/*.mjs"],
      "allow": ["my-plugin.js", "plugins/*.js"]
    }
  }

server

A required object with the following settings:

• hostname (required, string) — Hostname where Platformatic DB server will listen for connections.

• port (required, number) — Port where Platformatic DB server will listen for connections.

• healthCheck (boolean or object) — Enables the health check endpoint.

  • Powered by @fastify/under-pressure.
  • The value can be an object, used to specify the interval between checks in milliseconds (default: 5000)

  Example

  {
    "server": {
      ...
      "healthCheck": {
        "interval": 2000
      }
    }
  }

• cors (object) — Configuration for Cross-Origin Resource Sharing (CORS) headers.

  • All options will be passed to the @fastify/cors plugin. In order to specify a RegExp object, you can pass { regexp: 'yourregexp' }, it will be automatically converted

• https (object) - Configuration for HTTPS supporting the following options.

  • key (required, string, object, or array) - If key is a string, it specifies the private key to be used. If key is an object, it must have a path property specifying the private key file. Multiple keys are supported by passing an array of keys.
  • cert (required, string, object, or array) - If cert is a string, it specifies the certificate to be used. If cert is an object, it must have a path property specifying the certificate file. Multiple certificates are supported by passing an array of keys.

• logger (object) -- the logger configuration.

• pluginTimeout (integer) -- the milliseconds to wait for a Fastify plugin to load

• bodyLimit (integer) -- the maximum request body size in bytes

• maxParamLength (integer) -- the maximum length of a request parameter

• caseSensitive (boolean) -- if true, the router will be case sensitive

• ignoreTrailingSlash (boolean) -- if true, the router will ignore the trailing slash

• ignoreTrailingSlash (boolean) -- if true, the router will ignore the trailing slash

• connectionTimeout (integer) -- the milliseconds to wait for a new HTTP request

• keepAliveTimeout (integer) -- the milliseconds to wait for a keep-alive HTTP request

• maxRequestsPerSocket (integer) -- the maximum number of requests per socket

• forceCloseConnections (boolean or "idle") -- if true, the server will close all connections when it is closed

• requestTimeout (integer) -- the milliseconds to wait for a request to be completed

• disableRequestLogging (boolean) -- if true, the request logger will be disabled

• exposeHeadRoutes (boolean) -- if true, the router will expose HEAD routes

• serializerOpts (object) -- the serializer options

• requestIdHeader (string or false) -- the name of the header that will contain the request id

• requestIdLogLabel (string) -- Defines the label used for the request identifier when logging the request. default: 'reqId'

• jsonShorthand (boolean) -- default: true -- visit fastify docs for more details

• trustProxy (boolean or integer or string or String[]) -- default: false -- visit fastify docs for more details

tip

See the fastify docs for more details.

authorization

An optional object with the following settings:

• adminSecret (string): A secret that will be required as a password to access the Platformatic DB dashboard. This secret can also be sent in an x-platformatic-admin-secret HTTP header when performing GraphQL/REST API calls. Use an environment variable placeholder to securely provide the value for this setting.
• roleKey (string, default: X-PLATFORMATIC-ROLE): The name of the key in user metadata that is used to store the user's roles. See Role configuration.
• anonymousRole (string, default: anonymous): The name of the anonymous role. See Role configuration.
• jwt (object): Configuration for the JWT authorization strategy. Any option accepted by @fastify/jwt can be passed in this object.
  • secret (required, string or object): The secret key that the JWT was signed with. See the @fastify/jwt documentation for accepted string and object values. Use an environment variable placeholder to securely provide the value for this setting.
  • jwks (boolean or object): Configure authorization with JSON Web Key Sets (JWKS). See the JWKS documentation.
  • namespace (string): Configure a JWT Custom Claim Namespace to avoid name collisions.
• webhook (object): Configuration for the Webhook authorization strategy.
  • url (required, string): Webhook URL that Platformatic DB will make a POST request to.
• rules (array): Authorization rules that describe the CRUD actions that users are allowed to perform against entities. See Rules documentation.

note

If an authorization object is present, but no rules are specified, no CRUD operations are allowed unless adminSecret is passed.

Example

platformatic.db.json

{
  "authorization": {
    "jwt": {
      "secret": "{PLT_AUTHORIZATION_JWT_SECRET}"
    },
    "rules": [
       ...
    ]
  }
}

Environment variable placeholders

The value for any configuration setting can be replaced with an environment variable by adding a placeholder in the configuration file, for example {PLT_SERVER_LOGGER_LEVEL}.

All placeholders in a configuration must be available as an environment variable and must meet the allowed placeholder name rules.

Example

platformatic.db.json

{
  "db": {
    "connectionString": "{DATABASE_URL}"
  },
  "server": {
    "logger": {
      "level": "{PLT_SERVER_LOGGER_LEVEL}"
    },
    "port": "{PORT}"
  }
}

Platformatic will replace the placeholders in this example with the environment variables of the same name.

Setting environment variables

If a .env file exists it will automatically be loaded by Platformatic using dotenv. For example:

.env

PLT_SERVER_LOGGER_LEVEL=info
PORT=8080

The .env file must be located in the same folder as the Platformatic configuration file or in the current working directory.

Environment variables can also be set directly on the commmand line, for example:

PLT_SERVER_LOGGER_LEVEL=debug npx platformatic db

Allowed placeholder names

Only placeholder names prefixed with PLT_, or that are in this allow list, will be dynamically replaced in the configuration file:

• PORT
• DATABASE_URL

This restriction is to avoid accidentally exposing system environment variables. An error will be raised by Platformatic if it finds a configuration placeholder that isn't allowed.

The default allow list can be extended by passing a --allow-env CLI option with a comma separated list of strings, for example:

npx platformatic db --allow-env=HOST,SERVER_LOGGER_LEVEL

If --allow-env is passed as an option to the CLI, it will be merged with the default allow list.

Sample Configuration

This is a bare minimum configuration for Platformatic DB. Uses a local ./db.sqlite SQLite database, with OpenAPI and GraphQL support, and with the dashboard enabled.

Server will listen to http://127.0.0.1:3042

{
  "server": {
    "hostname": "127.0.0.1",
    "port": "3042"
  },
  "db": {
    "connectionString": "sqlite://./db.sqlite",
    "graphiql": true,
    "openapi": true,
    "graphql": true
  },
  "dashboard": true
}