You can customize the MobileFirst Server settings before building MobileFirst Server container images.
The container gets created from the artifacts that are provided in the V8.0.0 package. For an overview of the package contents and folder structure, see Package structure and contents.
The customizable elements for the MobileFirst Server container are located in package_root/mfpf-server/usr. The following tables describe the subfolders and files to use for customization.
| Folder | Description |
|---|---|
| ./usr | Contains the customization template for the MobileFirst Server container. |
| ./usr/bin | Contains the script file (mfp-init) that gets executed when the container starts. You can add custom code to the script, however, do not modify the existing code. |
| ./usr/config | Contains the server configuration fragments (keystore, server
properties, user registry) used by MobileFirst Server.
|
| ./usr/env | Contains the environment properties used for server initialization (server.env) and custom JVM options jvm.options. See Table 2 for a list of supported server environment properties. |
| ./usr/jre-security | Add JRE security-related files (such as the JRE truststore, policy .jar files, and so forth) to be updated on the container. The files in this folder get copied to the JAVA_HOME/jre/lib/security/ folder in the container. |
| ./usr/security | Contains your keystore, truststore, and LTPA keys (ltpa.keys) files. |
| ./usr/ssh | Contains the ssh public key file (id_rsa.pub) to enable ssh on the container. |
| Property | Default Value | Description |
|---|---|---|
| MFPF_SERVER_HTTPPORT | 9080* | The port used for client HTTP requests. Use -1 to disable this port. |
| MFPF_SERVER_HTTPSPORT | 9443* | The port used for client HTTP requests secured with SSL (HTTPS). Use -1 to disable this port. |
| MFPF_CLUSTER_MODE | Standalone | Configuration not required. Valid values are Standalone orFarm. The Farm value is automatically set when the container is run as a container group. |
| MFPF_ADMIN_ROOT | mfpadmin | The context root at which the MobileFirst Server Administration Services are made available. |
| MFPF_CONSOLE_ROOT | mfpconsole | The context root at which the MobileFirst Operations Console is made available. |
| MFPF_ADMIN_GROUP | mfpadmingroup | The name of the user group assigned the predefined role mfpadmin. |
| MFPF_DEPLOYER_GROUP | mfpdeployergroup | The name of the user group assigned the predefined role mfpdeployer. |
| MFPF_MONITOR_GROUP | mfpmonitorgroup | The name of the user group assigned the predefined role mfpmonitor. |
| MFPF_OPERATOR_GROUP | mfpoperatorgroup | The name of the user group assigned the predefined role mfpoperator. |
| MFPF_SERVER_ADMIN_USER | WorklightRESTUser | The Liberty server administrator user for MobileFirst Server Administration Services. |
| MFPF_SERVER_ADMIN_PASSWORD | mfpadmin Ensure that you change the default value to a private password before deploying to a production environment. |
The password of the Liberty server administrator user for MobileFirst Server Administration Services. |
| MFPF_ADMIN_USER | admin | The user name for the administrator role for MobileFirst Server operations. |
| MFPF_ADMIN_PASSWORD | admin | The password for the administrator role for MobileFirst Server operations. |
Containers must be restarted after any configuration changes have been made (cf ic restart containerId). For container groups, you must restart each container instance within the group. For example, if a root certificate changes, each container instance must be restarted after the new certificate has been added.
There is currently an IBM Containers limitation with the port numbers that are available for public domain. Therefore, the default port numbers given for the MobileFirst Analytics container and the MobileFirst Server container (9080 for HTTP and 9443 for HTTPS) cannot be altered. Containers in a container group must use HTTP port 9080. Container groups do not support the use of multiple port numbers or HTTPS requests.