# Required Jetty modules
--module=server
--module=deploy
--module=annotations
--module=resources
--module=logging-jetty
--module=console-capture
--module=requestlog
--module=servlets
--module=jsp
--module=jstl
--module=ext
--module=plus

# Allows setting Java system properties (-Dname=value)
# and JVM flags (-X, -XX) in this file
# NOTE: spawns child Java process
--exec

# Uncomment if IdP is installed somewhere other than /opt/shibboleth-idp
-Didp.home={{ shib_idp.home }}

# Ensure Jetty have enough time to do its scanning for annotations in the idp.war file - 3 minutes should be ample
-Dorg.eclipse.jetty.annotations.maxWait=180

# Use a temporary directory that is not /tmp as some systems regularly clean up /tmp
-Djava.io.tmpdir={{ install_base }}/jetty/tmp

# Bypass file validation for the SSL module, to work around a bug in Jetty 9.3.X
--skip-file-validation=ssl

# Alternate garbage collector that reduces memory needed for larger metadata files
-XX:+UseG1GC

# Maximum amount of memory that Jetty may use, at least 1.5G is recommended
# for handling larger (> 25M) metadata files but you will need to test on
# your particular metadata configuration
-Xmx1500m
-Xms1500m

# Required Jetty modules
--module=server
--module=deploy
--module=annotations
--module=resources
--module=logging-jetty
--module=console-capture
--module=requestlog
--module=servlets
--module=jsp
--module=jstl
--module=ext
--module=plus

# Allows setting Java system properties (-Dname=value)
# and JVM flags (-X, -XX) in this file
# NOTE: spawns child Java process
--exec

# Uncomment if IdP is installed somewhere other than /opt/shibboleth-idp
-Didp.home={{ shib_idp.home }}

# Ensure Jetty have enough time to do its scanning for annotations in the idp.war file - 3 minutes should be ample
-Dorg.eclipse.jetty.annotations.maxWait=180

# Use a temporary directory that is not /tmp as some systems regularly clean up /tmp
-Djava.io.tmpdir={{ install_base }}/jetty/tmp

# Use /dev/urandom to aviod /dev/random blocking on lack of entropy
-Djava.security.egd=file:/dev/urandom

# Bypass file validation for the SSL module, to work around a bug in Jetty 9.3.X
--skip-file-validation=ssl

# Alternate garbage collector that reduces memory needed for larger metadata files
-XX:+UseG1GC

# Maximum amount of memory that Jetty may use, at least 1.5G is recommended
# for handling larger (> 25M) metadata files but you will need to test on
# your particular metadata configuration
-Xmx1500m
-Xms1500m

Configure jetty to use /dev/urandom
Configure jetty to use /dev/urandom
