From 4c90c1af121986d8350d0c0c6e1aa1db7941d77a Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Sun, 18 Dec 2022 18:07:02 -0500
Subject: [PATCH] Add defaults for redis

---
 salt/redis/defaults.yaml | 90 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 90 insertions(+)
 create mode 100644 salt/redis/defaults.yaml

diff --git a/salt/redis/defaults.yaml b/salt/redis/defaults.yaml
new file mode 100644
index 000000000..26be06229
--- /dev/null
+++ b/salt/redis/defaults.yaml
@@ -0,0 +1,90 @@
+redis:
+  config:
+    bind: '0.0.0.0'
+    protected-mode: 'no'
+    tls-cert-file: '/certs/redis.crt'
+    tls-key-file: '/certs/redis.key'
+    tls-ca-cert-file: '/certs/ca.crt'
+    tls-port: 9696
+    tls-auth-clients: 'no'
+    port: 6379
+    tcp-backlog: 511
+    timeout: 0
+    tcp-keepalive: 300
+    tls-replication: 'no'
+    tls-cluster: no
+    tls-protocols: '"TLSv1.2 TLSv1.3"'
+    tls-ciphers: 'DEFAULT:!MEDIUM'
+    tls-ciphersuites: 'TLS_CHACHA20_POLY1305_SHA256'
+    tls-prefer-server-ciphers: 'yes'
+    tls-session-caching: 'no'
+    tls-session-cache-size: 5000
+    tls-session-cache-timeout: 60
+    daemonize: 'no'
+    supervised: 'no'
+    pidfile: '/var/run/redis_6379.pid'
+    loglevel: 'notice'
+    logfile: '"/var/log/redis/redis-server.log"'
+    syslog-enabled: 'no'
+    syslog-ident: 'redis'
+    syslog-facility: 'local0'
+    databases: 16
+    always-show-logo: 'yes'
+    save:
+      900: 1
+      300: 1
+      60: 1000   
+    stop-writes-on-bgsave-error: 'yes'
+    rdbcompression: 'yes'
+    rdbchecksum: 'yes'
+    dbfilename: 'dump.rdb'
+    rdb-del-sync-files: 'no'
+    dir: './' 
+    replica-serve-stale-data: 'yes'
+    replica-read-only: 'yes'
+    repl-diskless-sync: 'no'
+    repl-diskless-sync-delay: 5
+    repl-diskless-load: 'disabled'
+    repl-disable-tcp-nodelay: 'no'
+    replica-priority: 100
+    acllog-max-len: 128
+    maxmemory: '812m'
+    maxmemory-policy: 'noeviction'
+    maxmemory-samples: 5
+    lazyfree-lazy-eviction: 'no'
+    lazyfree-lazy-expire: 'no'
+    lazyfree-lazy-server-del: 'no'
+    replica-lazy-flush: 'no'
+    lazyfree-lazy-user-del: 'no'
+    appendonly: 'no'
+    appendfilename: '"appendonly.aof"'
+    appendfsync: 'everysec'
+    no-appendfsync-on-rewrite: 'no'
+    auto-aof-rewrite-percentage: 100
+    auto-aof-rewrite-min-size: '64mb'
+    aof-load-truncated: 'yes'
+    aof-use-rdb-preamble: 'yes'
+    lua-time-limit: 5000
+    slowlog-log-slower-than: 10000
+    slowlog-max-len: 128
+    latency-monitor-threshold: 0
+    notify-keyspace-events: '""'
+    hash-max-ziplist-entries: 512
+    hash-max-ziplist-value: 64
+    list-max-ziplist-size: -2
+    list-compress-depth: 0
+    set-max-intset-entries: 512
+    zset-max-ziplist-entries: 128
+    zset-max-ziplist-value: 64
+    hll-sparse-max-bytes: 3000
+    stream-node-max-bytes: 4096
+    stream-node-max-entries: 100
+    activerehashing: yes
+    client-output-buffer-limit: 'normal 0 0 0'
+    client-output-buffer-limit: 'replica 256mb 64mb 60'
+    client-output-buffer-limit: 'pubsub 32mb 8mb 60'
+    hz: 10
+    dynamic-hz: 'yes'
+    aof-rewrite-incremental-fsync: 'yes'
+    rdb-save-incremental-fsync: 'yes'
+    jemalloc-bg-thread: 'yes'
\ No newline at end of file