#系统日志配置
systemLog:destination: filepath: /var/log/mongodb/mongod.loglogAppend: true#quiet模式运行，建议设置为false，方便排查错误quiet: false #进程管理
processManagement:#进程后台运行fork: true #进程pid文件 pidFilePath: /var/log/mongodb/mongod.pid  #网络配置
net:#监听端口port: 27017 #监听网卡 多个使用英文逗号隔开bindIp: 127.0.0.1 #最大并发连接数 默认65535maxIncomingConnections: 65535#验证客户端传过来的数据，文档嵌套多时，对性能会有些影响wireObjectCheck: true #是否启用ipv6，默认不启用ipv6: false unixDomainSocket:#是否启用socket监听 默认trueenabled: true #socket保存目录，默认/tmppathPrefix: /var/log/mongodb#socket文件权限，默认0700filePermissions: 0700 http:#是否启用http服务，默认false，安全考虑线上环境要关闭enabled: false #是否启用http jsonp，默认false，即使http.enabled为false，只要此项为true，一样可以访问，安全考虑线上环境要关闭JSONPEnabled: false #是否启用rest api接口，默认false，安全考虑线上环境要关闭RESTInterfaceEnabled: false ssl:#type:string#是否启用加密#可选值1 disabled:禁用#可选值2 allowSSL:优先使用非加密，但是服务器支持加密#可选值3 preferSSL:优先使用加密，但是服务器也支持非加密#可选值4 requireSSL:只支持加密mode: disabled #type:string#包含TLS/SSL certificate and key的文件路径#包含公钥和私钥PEMKeyFile: /var/log/mongodb/mongodb.pem#type:string#私钥加密时的密码PEMKeyPassword: password#type:string#The .pem file that contains the x.509 certificate-key file for membership authentication for the cluster or replica set.#不存在会使用PEMKeyFileclusterFile: /var/log/mongodb/cluster.pem#type:string#The password to de-crypt the x.509 certificate-key file specified with --sslClusterFileclusterPassword: password#type:string#The .pem file that contains the root certificate chain from the Certificate Authority.CAFile:  #type:string#The the .pem file that contains the Certificate Revocation List.CRLFile: #type:boolean#Enable or disable the requirement for TLS/SSL certificate validation that CAFile enablesallowConnectionsWithoutCertificates: true #type:boolean#Enable or disable the validation checks for TLS/SSL certificates on other servers in the cluster and allows the use of invalid certificates.allowInvalidCertificates: false #type:boolean#是否允许无效的域名，当为true时，mongod不检查证书里面域名的有效性，即使域名不匹配，mongod同样允许连接mongodb实例allowInvalidHostnames: false #type:string#禁用加密协议版本，多个使用英文逗号隔开#可设置的值TLS1_0, TLS1_1, and TLS1_2disabledProtocols: #type:string#Enable or disable the use of the FIPS mode of the installed OpenSSL library for the mongos or mongod.FIPSMode: false compression:#是否启用数据压缩compressors: snappy#安全配置
security:#type:string#密钥路径，副本集和分片集群节点间授权时使用的密钥keyFile:#type:string #集群授权模式，默认keyFile，值列表：keyFile,sendKeyFile,sendX509,x509clusterAuthMode: keyFile #type:string#是否开启数据库访问RBAC权限控制，默认：disabled，仅对mongod命令有效authorization: enabled #type:boolean#Allows the mongod or mongos to accept and create authenticated and non-authenticated connections to and from other mongod and mongos instances in the deployment.transitionToAuth: false #type:boolean#是否开启服端js执行，默认true，如果未开启$where,group,mapreduce都不能使用javascriptEnabled: true #type:boolean#写日志之前是否编辑客户端日志数据，去除日志中的敏感数据，仅企业版支持redactClientLogData: true #key管理配置
security:#type:boolean#WiredTiger存储引擎是否启用加密，默认false，仅企业版支持enableEncryption: false #type:string#加密模式，默认AES256-CBC，仅企业版支持encryptionCipherMode: AES256-CBC #type:string#密钥文件路径，仅企业版支持encryptionKeyFile: /var/log/mongodb/encKeyFile #kmip key server，仅企业版支持kmip: #type:string#Unique KMIP identifier for an existing key within the KMIP server.keyIdentifier: #type:boolean#If true, rotate the master key and re-encrypt the internal keystorerotateMasterKey: false #type:string#Hostname or IP address of key management solution running a KMIP server.serverName: #type:int#Port number the KMIP server is listening onport: 5696 #type:string#String containing the path to the client certificate used for authenticating MongoDB to the KMIP server.clientCertificateFile: #type:string#The password to decrypt the client certificate, used to authenticate MongoDB to the KMIP server.clientCertificatePassword: #type:string#Path to CA File. Used for validating secure client connection to KMIP server.serverCAFile: #sasal配置
security:sasl:hostName: "" #A fully qualified server domain name for the purpose of configuring SASL and Kerberos authentication. serviceName: "" #Registered name of the service using SASL. saslauthdSocketPath: "" #The path to the UNIX domain socket file for saslauthd#setParameter配置
setParameter:enableLocalhostAuthBypass: false#存储配置
storage:#type:string#数据库数据存储目录，默认/data/dbdbPath:#type:boolean#启动时是否尝试重建索引，默认trueindexBuildRetry: true #type:string#修复数据时使用的目录，默认是：A _tmp_repairDatabase_<num> directory under the dbPathrepairPath: #journal日志journal: #type:boolean#Enable or disable the durability journal to ensure data files remain valid and recoverable. Default: true on 64-bit systems, false on 32-bit systemsenabled: true #type:int#日志同步间隔，Values can range from 1 to 500 milliseconds.commitIntervalMs: 100 #type:boolean#是否开启一数据库一目录，默认是falsedirectoryPerDB: false #type:int#数据落地时间间隔，默认为60秒，不能设置为0，一般使用默认值即可syncPeriodSecs: 60 #type:string##存储引擎，默认wiredTiger，可选值 mmapv1,wiredTiger,inMemoryengine: wiredTiger#mmapv1存储引擎配置
storage:mmapv1:#type:boolean#默认true,Enables or disables the preallocation of data files. preallocDataFiles: true#type:int#默认16M The default size for namespace files, which are files that end in .ns. nsSize: 16 #配额 quota: #type:boolean#是否强制限制每个数据库数据文件数量限制，数量限制由maxFilesPerDB选项指定，默认为falseenforced: false #type:int#单个实例最大数据文件数量，需要先开启enforced配置，默认8maxFilesPerDB: 8 #type:boolean#小文件存储，默认为false，journal文件也会影响，适用场景：多数据库且数据量不大smallFiles: false journal:#type:boolean#journal调试标志，用于测试功能，一般情况下不使用，系统异常关机会影响数据的完整性debugFlags: 0 #type:int#version >= 3.2版本不建议使用commitIntervalMs: 60 #wiredTiger存储引擎配置
storage:wiredTiger:engineConfig:#type:float#单个实例可用的数据缓存内存大小，version >= 3.4默认：50% of RAM minus 1 GB, or 256 MB. Values can range from 256MB to 10TB and can be a float.cacheSizeGB: 0.25#type:string#WiredTiger journal数据压缩格式，默认snappy，可用的压缩类型: none, snappy, zlibjournalCompressor: snappy #type:boolean#索引文件分目录存储，默认false，version >= 3.0后版本可用directoryForIndexes: false collectionConfig:#type:string#块数据压缩格式，默认snappy，可用的压缩类型：none, snappy, zlibblockCompressor: snappyindexConfig:#type:boolean#是否开启索引prefix compression，默认trueprefixCompression: true #是否开启索引prefix compression，默认true#operationProfiling操作性能分析
operationProfiling:#type:int#慢查询时间单位毫秒，默认100，如果开启了profile，日志会保存到system.profile集合中slowOpThresholdMs: 100 #type:string#性能分析模式，开启会影响性能，谨慎操作。默认off.#可选值1：off: Off. No profiling.#可选值2： slowOp:On. Only includes slow operations.#可选值3： all:On. Includes all operations.mode: off#replication复制配置
replication:#type:int#数字类型(单位M) replication op log 大小，64位系统默认为可用磁盘的5%oplogSizeMB: 512#type:string#所属replica set集群名称replSetName: #type:string#The indexes that secondary members of a replica set load into memory before applying operations from the oplog. 默认all#可选值1 none:Secondaries do not load indexes into memory.#可选值2 all:Secondaries load all indexes related to an operation.#可选值3 _id_only:Secondaries load no additional indexes into memory beyond the already existing _id index.secondaryIndexPrefetch: all #type:boolean#默认false version >= 3.2版本可用 Enables read concern level of "majority".enableMajorityReadConcern:false #分片配置
sharding:#type:string#分片集群中的担当的角色#可选值1 configsvr:配置svr#可选值2 shardsvr: 数据svrclusterRole: shardsvr#type:boolean#默认false#During chunk migration, a shard does not save documents migrated from the shard.archiveMovedChunks: false#auditLog配置
#仅企业版支付
auditLog:#type:string#审计日志保存方式#可选值1 syslog:Output the audit events to syslog in JSON format. #可选值2 console:Output the audit events to stdout in JSON format.#可选值3 file:Output the audit events to the file specified in --auditPath in the format specified in --auditFormat.destination: syslog#type:string#日志格式#可选值1:JSON#可选值2:BSONformat: JSON#type:string#日志文件路径，相对路经和绝对路径都支持path: path/audit.log#type:string representation of a document#The filter to limit the types of operations the audit system records.#内容格式：{ <field1>: <expression1>, ... }filter: {}#snmp(简单网络管理协议)配置
snmp:#type:boolean#When snmp.subagent is true, SNMP runs as a subagent. For more information, see Monitor MongoDB With SNMP on Linux.subagent:false#type:boolean#When snmp.master is true, SNMP runs as a master. For more information, see Monitor MongoDB With SNMP on Linux.master:false#Text Search配置
basisTech:#type:string#v3.2版本加入#仅企业版支持#Specify the path to the root directory of the Basis Technology Rosette Linguistics Platform installation to support additional languages for text search operations.rootDirectory:/path/#mongos-only Options
replication:#type:integer#The ping time, in milliseconds, that mongos uses to determine which secondary replica set members to pass read operations from clients. #默认值为15毫秒localPingThresholdMs:15
sharding:#type:string#The configuration servers for the sharded cluster.#建议使用replica set#值格式:<configReplSetName>/cfg1.example.net:27017, cfg2.example.net:27017,...configDB: