Application Properties¶

While many configuration and setup options are available through the Web Administration application Settings > Global page, more fundamental (and security minded) changes to how the application operates are made using "Application Properties" defined by (in order of priority):

Java System Properties

Web Application context parameters

System Environmental Variables

As part of the operating environment GeoServer application properties, unlike settings, cannot be changed at runtime.

For more information see Configuration Considerations.

GeoServer Property Reference¶

+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | Application Property | System Property | Context Param | Env Variable | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_DATA_DIR | x | x | x | | | | | | | /datadirectory/setting | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_MODULE_SYSTEM_ENVIRONMENT_STATUS_ENABLED | | | x | | | | | | | Showing Environment Variables and Java System Properties | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_MODULE_SYSTEM_PROPERTY_STATUS_ENABLED | | | x | | | | | | | Showing Environment Variables and Java System Properties | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOWEBCACHE_CACHE_DIR | x | x | x | | | | | | | /geowebcache/config | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_NODE_OPTS | x | x | x | | | | | | | /production/identify | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | serviceStrategy | x | x | x | | | | | | | /production/config, default PARTIAL-BUFFER2 | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_CONSOLE_DISABLED | x | | | | | | | | | /production/config | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GWC_DISKQUOTA_DISABLED | x | x | x | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.login.autocomplete | x | | x | | | | | | | /production/config, default on. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | CONFIGURATION_TRYLOCK_TIMEOUT | x | x | x | | | | | | | Delay for REST API and Web Administration configuration changes (default 30000 MS) | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | COMPARISON_TOLERANCE | x | x | x | | | | | | | Referencing tolerance when matching PRJ to EPSG code (default 0.00000001) | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_CSRF_DISABLED | x | x | x | | | | | | | /security/webadmin/csrf | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_CSRF_WHITELIST | x | x | x | | | | | | | /security/webadmin/csrf | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.web.csp.strict | x | | | | | | | | | User interface non-responsive, default true. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.catalog.loadingThreads | x | x | x | | | | | | | Number of threads used to load catalogue (Default 4). | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | CAPABILITIES_CACHE_CONTROL_ENABLED | x | x | x | | | | | | | Use false to disable, defaults to true. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_FILEBROWSER_HIDEFS | x | x | x | | | | | | | When set to true only GEOSERVER_DATA_DIR available to browse. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_XSTREAM_WHITELIST | x | x | x | | | | | | | Used to restrict catalogue persistence. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENTITY_RESOLUTION_UNRESTRICTED | x | x | x | | | | | | | /production/config, default false. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENTITY_RESOLUTION_UNRESTRICTED_INTERNAL | x | x | x | | | | | | | /production/config, default false. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENTITY_RESOLUTION_ALLOWLIST | x | x | x | | | | | | | /production/config. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.xframe.shouldSetPolicy | x | x | x | | | | | | | /production/config, default true. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.xframe.policy | x | x | x | | | | | | | /production/config, default SAMEORIGIN | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.xContentType.shouldSetPolicy | x | x | x | | | | | | | /production/config, default true | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.xXssProtection.shouldSetPolicy | x | x | x | | | | | | | /production/config, default false | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.xXssProtection.policy | x | x | x | | | | | | | /production/config, default 0 | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.hsts.shouldSetPolicy | x | x | x | | | | | | | /production/config, default false | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.hsts.policy | x | x | x | | | | | | | /production/config, default max-age=31536000 ; includeSubDomains | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.csp.remoteResources | x | x | x | | | | | | | /security/csp | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.csp.frameAncestors | x | x | x | | | | | | | /security/csp | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | geoserver.csp.fallbackDirectives | x | x | x | | | | | | | /security/csp, default base-uri 'none'; form-action 'none'; default-src 'none'; frame-ancestors 'none'; | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_DISABLE_STATIC_WEB_FILES | x | x | x | | | | | | | Static Web Files, default false | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_STATIC_WEB_FILES_SCRIPT | x | x | x | | | | | | | /tutorials/staticfiles, default UNSAFE | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_FEATUREINFO_HTML_SCRIPT | x | x | x | | | | | | | WFS GetFeatureInfo CSP Policy, default SELF | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_FORCE_FREEMARKER_ESCAPING | x | x | x | | | | | | | /production/config, default true | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_FREEMARKER_ALLOW_LIST | x | x | x | | | | | | | /tutorials/GetFeatureInfo/html | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_FREEMARKER_BLOCK_LIST | x | x | x | | | | | | | /tutorials/GetFeatureInfo/html | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_FREEMARKER_API_EXPOSED | x | x | x | | | | | | | /tutorials/GetFeatureInfo/html, default false | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ows10.exception.xml.responsetype | x | | | | | | | | | /production/config | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ows11.exception.xml.responsetype | x | | | | | | | | | /production/config | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENABLE_MAP_WRAPPING | x | x | x | | | | | | | Default if setting unavailable (true) | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENABLE_ADVANCED_PROJECTION | x | x | x | | | | | | | Default if setting unavailable (true) | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | OPTIMIZE_LINE_WIDTH | x | x | x | | | | | | | /services/wms/global, default true (can be set false.) | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | MAX_FILTER_RULES | x | x | x | | | | | | | /services/wms/global, default 20 | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | USE_GLOBAL_RENDERING_POOL | x | x | x | | | | | | | Default is true, can be set false | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.render.raster.direct.disable | x | | | | | | | | | Used to bypass direct raster rendering | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | wms.raster.disableGutter | x | | | | | | | | | Disable gutter used to request larger area when reprojecting raster content. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | wms.raster.enableRasterChainDebug | x | | | | | | | | | Trouble shoot raster rendering | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_GLOBAL_LAYER_GROUP_INHERIT | x | x | x | | | | | | | Should workspaces include layer groups from the global workspace, default true. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | PROXY_BASE_URL | x | x | x | | | | | | | Supply PROXY_BASE_URL, overriding settings. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | PROXY_BASE_URL_HEADER | x | x | x | | | | | | | Enables PROXY_BASE_URL to use headers variables if set to true, overriding GeoServer datadir settings. Default false. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.service.disabled | x | x | x | | | | | | | Layer service default comma separated list of disabled services. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_DEFAULT_CACHE_PROVIDER | x | x | x | | | | | | | Request custom cache implementation for catalog. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.wfs.xml.WFSURIHandler.disabled | x | | | | | | | | | Flag to disable internal handling of references to GeoServer. Force reflective references such as DescribeFeatureType to be handled as separate request. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.wfs.xml.WFSURIHandler.additionalHostnames | x | | | | | | | | | default localhost. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | force200 | x | | | | | | | | | Use true to force the http return code to always be 200. Required for WCS2.0, breaks OWS2 and WCS2 standards. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GS_SHAPEFILE_CHARSET | x | x | x | | | | | | | Supply default for shapefile datastore | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_GEOJSON_LEGACY_CRS | x | x | x | | | | | | | true to enable legacy GeoJSON output. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENABLE_JSONP | x | x | x | | | | | | | /services/wms/global | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | XML_LOOKAHEAD | x | x | x | | | | | | | Number of bytes read to determine XML POST request (default 8192). | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.wfs.getfeature.cachelimit | x | | | | | | | | | /production/config, default 0 (disabled) | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.wfs.xml.entityExpansionLimit | x | x | x | | | | | | | Default 100. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | org.geoserver.htmlTemplates.staticMemberAccess | x | x | x | | | | | | | /tutorials/GetFeatureInfo/html | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENABLE_OL3 | x | x | x | | | | | | | Default true. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_LOG_LOCATION | x | x | x | | | | | | | /configuration/logging | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | RELINQUISH_LOG4J_CONTROL | x | x | x | | | | | | | /configuration/logging | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GT2_LOGGING_REDIRECTION | x | x | x | | | | | | | /configuration/logging | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | wicket.configuration | x | x | x | | | | | | | Wicket RuntimeConfigurationType (DEPLOYMENT or DEVELOPMENT) | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_FILESYSTEM_SANDBOX | x | x | x | | | | | | | /security/sandbox | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_ROOT_LOGIN_ENABLED | x | x | x | | | | | | | Root account | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ALLOW_ENV_PARAMETRIZATION | x | | | | | | | | | /datadirectory/configtemplate | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | ENV_PROPERTIES | x | x | x | | | | | | | /datadirectory/configtemplate | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | WORKSPACE_ADMIN_SERVICE_ACCESS | x | x | x | | | | | | | | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_DATA_DIR_LOADER_ENABLED | x | | x | | | | | | | /datadirectory/setting | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | GEOSERVER_DATA_DIR_LOADER_THREADS | x | | x | | | | | | | /datadirectory/setting | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+ | TRACK_USER | x | | | | | | | | | Flag to enable user tracking in GeoServer. Allows to store the username of user that performed creation/modification of layer, layergroup, store, style, workspace. Has precedence over "Display the user who performed last modification" option in global settings. | | | | +-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-----------------+---------------+--------------+

Setting Application property¶

Application properties are determined using the first value obtained from: Java System Properties, Web Application context parameters, or System Environmental Variable.

Using GEOSERVER_DATA_DIR as an example:

Java System Properties: Supplied to the java virtual machine as part of your application server configuration.
```
-DGEOSERVER_DATA_DIR=/var/lib/geoserver_data
```
- For Tomcat on Linux edit setenv.sh to append additional java system properties:
```
# Append system properties
CATALINA_OPTS="${CATALINA_OPTS} -DGEOSERVER_DATA_DIR=/var/lib/geoserver_data"
```
- For Tomcat on Windows use Apache Tomcat Properties application, navigating to the Java tab to edit Java Options:
```
-DGEOSERVER_DATA_DIR=C:\ProgramData\GeoServer\data
```
While not commonly used for GEOSERVER_DATA_DIR, this approach is a popular way to enable/disable optional GeoServer functionality.

Web Application context parameter:

Tomcat: Use your application server to configure the GeoServer web application via conf/Catalina/localhost/geoserver.xml file:

<Context docBase="geoserver.war">
  <Parameter name="GEOSERVER_DATA_DIR"
             value="/var/opt/geoserver/data" override="false"/>
</Context>

!!! note

  Tomcat management of application properties as using `override="false"` is not the most straight forward to understand. This setting prevents parameter defined in **`WEB-INF/web.xml`** (from the **`geoserver.war`** ) to override the provided file location.

  Other application servers provide a user interface to manage web application properties and are more intuitive.

Not recommended: Hand editing the webapps/geoserver/WEB-INF/web.xml file:

<context-param>
  <param-name>GEOSERVER_DATA_DIR</param-name>
  <param-value>/var/lib/geoserver_data</param-value>
</context-param>

!!! note

  This file is part of the GeoServer application and will be replaced when updating the application.

  As a result this approach is error prone making updates more difficult and is not recommended.

System environmental variable:
```
export GEOSERVER_DATA_DIR=/var/lib/geoserver_data
```
This approach can be useful for GEOSERVER_DATA_DIR when running GeoServer in a docker container, traditionally managed with environmental variables.

Additional system properties¶

Cascading WFS and WMS services where GeoServer acts as a client for another web service make use of the Apache Http Components HTTP client library.

The HTTP client library respects the following java system properties:

ssl.TrustManagerFactory.algorithm
javax.net.ssl.trustStoreType
javax.net.ssl.trustStore
javax.net.ssl.trustStoreProvider
javax.net.ssl.trustStorePassword
ssl.KeyManagerFactory.algorithm
javax.net.ssl.keyStoreType
javax.net.ssl.keyStore
javax.net.ssl.keyStoreProvider
javax.net.ssl.keyStorePassword
https.protocols
https.cipherSuites
http.proxyHost
http.proxyPort
https.proxyHost
https.proxyPort
http.nonProxyHosts
http.keepAlive
http.maxConnections
http.agent

Reference:

HttpClientBuilder