FlowX CMS setup

Ensure the following infrastructure components are available before starting the CMS service:

• Docker Engine: Version 17.06 or higher.
• MongoDB: Version 4.4 or higher for storing taxonomies and content.
• Redis: Version 6.0 or higher.
• Kafka: Version 2.8 or higher.
• Elasticsearch: Version 7.11.0 or higher.

​

Dependencies overview

• MongoDB instance
• Authorization & access roles
• Redis
• Kafka

​

Configuration

​

Set application defaults

Define the default application name for retrieving content:

application:
    defaultApplication: ${DEFAULT_APPLICATION:flowx}

​

Configuring authorization & access roles

Connect the CMS to an OAuth 2.0 identity management platform by setting the following variables:

• SECURITY_OAUTH2_BASE_SERVER_URL: Specifies the base URL for the OAuth 2.0 Authorization Server, which handles authentication and token issuance.
• SECURITY_OAUTH2_CLIENT_CLIENT_ID: Unique identifier for the client application. Used during authentication with the OAuth 2.0 server.
• SECURITY_OAUTH2_CLIENT_CLIENT_SECRET: Secret key to authenticate requests from the client application.
• SECURITY_OAUTH2_REALM: Defines the realm name for OAuth 2.0 provider authentication in Spring Security.

For detailed role and access configuration, refer to:

​

Configuring MongoDB

The CMS requires MongoDB for taxonomy and content storage. Configure MongoDB with the following variables:

• SPRING_DATA_MONGODB_URI: URI for connecting to the CMS MongoDB instance.
  • Format: mongodb://${DB_USERNAME}:${DB_PASSWORD}@<host1>,<host2>,<arbiter-host>:<port>/<database>?retryWrites=false
• DB_USERNAME : cms-core
• MONGOCK_TRANSACTIONENABLED: Enables or disables transactions in MongoDB for compatibility with the Mongock library.
  • Default Value: false (Set it to false to support successful migrations).
  • Note: Set to false due to known issues with transactions in MongoDB version 5.

​

Configuring MongoDB (runtime database - additional data)

In addition to core storage, CMS also connects to a Runtime MongoDB instance for operational data. Configure using these variables:

• RUNTIME_DB_USERNAME: app-runtime
• SPRING_DATA_MONGODB_RUNTIME_URI - URI for connecting to the Runtime MongoDB instance (app-runtime)
  • Format: mongodb://${DB_USERNAME}:${DB_PASSWORD}@<host1>,<host2>,<arbiter-host>:<port>/<database>?retryWrites=false
• SPRING_DATA_MONGODB_STORAGE - Specifies the storage type used for the Runtime MongoDB instance (Azure environments only)
  • Possible Values: mongodb, cosmosdb
  • Default Value: mongodb

​

Configuring Redis

The following values should be set with the corresponding Redis-related values:

• SPRING_REDIS_HOST: Hostname or IP address of the Redis server.
• SPRING_REDIS_PASSWORD: Authentication password for the Redis server.
• REDIS_TTL: Used to specify the maximum time-to-live (TTL) for a key in Redis, it is used to set a limit on how long a key can exist before it is automatically expired (Redis will delete the key after the specified TTL has expired).

All the data produced by the service will be stored in Redis under a specific key. The name of the key can be configured using the environment variable:

​

Configuring Kafka

To configure the Kafka server, you need to set the following environment variables:

• SPRING_KAFKA_BOOTSTRAP_SERVERS: Address of the Kafka server (host:port).
• SPRING_KAFKA_CONSUMER_GROUP_ID: Defines the Kafka consumer group.
• KAFKA_CONSUMER_THREADS: Number of Kafka consumer threads.
• KAFKA_AUTH_EXCEPTION_RETRY_INTERVAL: Retry interval after an authorization exception.
• KAFKA_TOPIC_AUDIT_OUT: Topic for audit logs.

​

Request content topics

• KAFKA_TOPIC_REQUEST_CONTENT_IN: This variable defines the topic used by the CMS to listen for incoming content retrieval requests.
• KAFKA_TOPIC_REQUEST_CONTENT_OUT: This variable defines the topic where the CMS sends the results of content retrieval requests back to the FlowX Engine.

Each action available in the service corresponds to a Kafka event. A separate Kafka topic must be configured for each use case.

​

Configuring logging

To control the log levels, the following environment variables can be set:

• LOGGING_LEVEL_ROOT: Log level for the root service logs.
• LOGGING_LEVEL_APP: Log level for application-specific logs.
• LOGGING_LEVEL_MONGO_DRIVER: Log level for the MongoDB driver.

​

Configuring file storage

• APPLICATION_FILE_STORAGE_S3_SERVER_URL: URL of the S3 server for file storage.
• APPLICATION_FILE_STORAGE_S3_BUCKET_NAME: S3 bucket name for file storage.
• APPLICATION_FILE_STORAGE_S3_ROOT_DIRECTORY: Root directory in the S3 bucket.
• APPLICATION_FILE_STORAGE_S3_CREATE_BUCKET: Indicates if the bucket should be auto-created (true/false).
• APPLICATION_FILE_STORAGE_S3_PUBLIC_URL: Public URL for accessing files.

​

Private storage configuration

Private CMS to securely store uploaded documents and AI-generated documents, ensuring they are accessible only via authenticated endpoints. This CMS will support AI services and workflows while maintaining strict access controls.

• APPLICATION_FILE_STORAGE_S3_PRIVATE_SERVER_URL: This environment variable specifies the URL of the S3 server used for private file storage.
• APPLICATION_FILE_STORAGE_S3_PRIVATE_BUCKET_NAME: This environment variable specifies the name of the S3 bucket dedicated to private file storage.
• APPLICATION_FILE_STORAGE_S3_PRIVATE_CREATE_BUCKET: This environment variable indicates whether the private S3 bucket should be created if it does not already exist. It can be set to true or false.
• APPLICATION_FILE_STORAGE_S3_PRIVATE_ACCESS_KEY: This environment variable holds the access key used to authenticate to the S3 server for private file storage.
• APPLICATION_FILE_STORAGE_S3_PRIVATE_SECRET_KEY: This environment variable holds the secret key used to authenticate to the S3 server for private file storage.

​

Configuring the maximum file size for uploads

To set the maximum file size for uploads through the CMS service (e.g., the Media Library), you can adjust the following environment variables:

• SPRING_SERVLET_MULTIPART_MAX_FILE_SIZE: ${MULTIPART_MAX_FILE_SIZE:50MB}: Defines the maximum file size allowed for uploads. Default is 50 MB.
• SPRING_SERVLET_MULTIPART_MAX_REQUEST_SIZE: ${MULTIPART_MAX_REQUEST_SIZE:50MB}: Defines the maximum request size allowed for uploads. Default is 50 MB.

​

Configuring application management

The FlowX helm chart provides a management service with the necessary parameters to integrate with the Prometheus operator. However, this integration is disabled by default.

​

Prometheus metrics export configuration

To configure Prometheus metrics export for the FlowX.AI Engine, the following environment variable is required: