Configuration
This documentation pertains to the unsupported version of NeoDash, as part of Neo4j Labs. For users of the supported NeoDash offering, refer to NeoDash commercial. |
When using a custom NeoDash deployment, there are several settings that can be configured. These mostly relate to Standalone Mode and SSO configurations.
For a simple (non-Dockerized) deployment, these configuration parameters
can be changed by modifying dist/config.json
after you have built the
application. When Docker image, these can be passed as environment
variables. See Standalone Mode for more on
Docker deployments.
An example configuration for NeoDash (default, running in editor mode) will look like this:
{ "ssoEnabled": false, "ssoProviders": [], "ssoDiscoveryUrl": "https://example.com", "standalone": false, "standaloneProtocol": "neo4j", "standaloneHost": "localhost", "standalonePort": "7687", "standaloneDatabase": "neo4j", "standaloneDashboardName": "My Dashboard", "standaloneDashboardDatabase": "dashboards", "standaloneDashboardURL": "", "standaloneAllowLoad": false, "standaloneLoadFromOtherDatabases": false, "standaloneMultiDatabase": false, "standaloneDatabaseList": "neo4j" "loggingMode": "0", "loggingDatabase": "logs", "customHeader": "", }
Configuration Options
Name | Type | Default Value | Description |
---|---|---|---|
ssoEnabled |
boolean |
false |
If enabled, lets users connect to Neo4j using SSO. This requires a valid ssoDiscoveryUrl to be set. |
ssoProviders |
List |
[] |
When using multiple SSO providers on the database, you can configure the list of providers (by id) to be used on Neodash. If empty, all providers will be displayed. |
ssoDiscoveryUrl |
string |
If ssoEnabled is true & standalone mode is enabled, the URL to retrieve SSO auth config from. |
|
standalone |
boolean |
false |
Determines whether to run NeoDash in editor
mode (false), or reader mode (true). The terms |
standaloneProtocol |
string |
neo4j |
When running in standalone mode, the
protocol to used for the Neo4j driver. This shoudl be set to one of
|
standaloneHost |
string |
localhost |
When running in standalone mode, the hostname to connect to. This should be just the hostname, no protocols or ports. |
standalonePort |
string |
7687 |
When running in standalone mode, the Bolt port to connect to. |
standaloneDatabase |
string |
neo4j |
When running in standalone mode, the database to use for reporting. Cypher queries used in reports will read data from this database. |
standaloneUsername ⚠️ |
string |
… |
A hidden config parameter enables you to set the username for standalone mode by default. Keep in mind this is a security risk, as it exposes the Neo4j username to anyone who can access the NeoDash deployment. |
standalonePassword ⚠️ |
string |
… |
A hidden config parameter enables you to set the password for standalone mode by default. If this value is set connections are also made automatically. Keep in mind this is a security risk, as it exposes the Neo4j username to anyone who can access the NeoDash deployment. |
standaloneDashboardName |
string |
My Dashboard |
The exact name (case-sensitive) of the dashboard to be loaded when running in standalone mode. This must be a dashboard that is saved as a node in the graph. |
standaloneDashboardDatabase |
string |
neo4j |
The name of the Neo4j database that contains the saved dashboard node. This is neo4j by default, unless you are using Neo4j Enterprise Edition, which lets you use multiple databases. |
standaloneDashboardURL |
string |
neo4j |
If you do not save a dashboard inside Neo4j and would like to run a standalone mode deployment with a dashboard from a URL, set this parameter to the complete URL pointing to the dashboard JSON. |
standaloneAllowLoad |
boolean |
false |
If set to yes the "Load Dashboard" button will be enabled in standalone mode, allowing users to load additional dashboards from Neo4J. This parameter is false by default unless you are using Neo4j Enterprise Edition, which lets you use multiple databases. NOTE: when Load is enabled in standalone mode, only Database is available as a source, not file. |
standaloneLoadFromOtherDatabases |
boolean |
false |
If standaloneAllowLoad is set to true, this parmeter enables or not users to load dashboards from other databases than the one deifned in standaloneDashboardDatabase. If standaloneAllowLoad is set to false this parameters has no effect. |
standaloneMultiDatabase |
boolean |
false |
If this parameter set to true, the standalone configuration will ignore the standaloneDatabase parameter and allow users to choose which database to connect to in the login screen, among the ones provided in standaloneDatabaseList, with a dropdown list. This parameter is false by default unless you are using Neo4j Enterprise Edition, which lets you use multiple databases. |
standaloneDatabaseList |
string |
neo4j |
If standaloneMultiDatabase is set to true, this parmeter must contain a comma separated list of database names that will be displayed as options in the Database dropdown at user login (e.g. 'neo4j,database1,database2' will populate the database dropdown with the values 'neo4j','database1' and 'database2' in the connection screen). If standaloneMultiDatabase is set to false this parameters has no effect. |
loggingMode |
string |
none |
Determines whether neodash should create any
user activity logs. possible values include: ⚠️ Logs are created in Neo4J DB using the current user credentials (or standaloneUsername if configured); write access to the log database must be granted to enble any user to create logs. ⚠️ * Load/Save from/to file are not logged (only from/to Database) |
loggingDatabase |
string |
logs |
When loggingMode is set to anything else than '0', the database to use for logging. Log records (nodes) will be created in this database. |
customHeader |
string |
none |
When set the dashboard header will display the prameter value as a fixed string, otherwise it will display the host and port of current connection. |
Configuring SSO
NeoDash can use SSO as an alternative for password-based sign-in, if
your Neo4j database is enabled to use single sign on. To enable SSO, set
ssoEnabled
to true
. Then, set ssoDiscoveryUrl
to the place where
your discovery.json
is located (This will often be the hostname of
your database, appended by /discovery.json
).
Note that SSO is only available when Standalone Mode is enabled.
Auth Provider
To set up NeoDash to use an external identity provider, you can add a
/auth_provider resource to nginx (in /conf/default.conf
):
location /auth_provider { default_type application/json; return 200 '{ "auth_config" : { "oidc_providers" : [ ... ] } }'; }
For basic deployments it might suffice to route requests to
/auth_provider
on the https port of the neo4j database.
Configuring Standalone Mode
Standalone mode, or reader-mode, overrides the functionality of NeoDash,
allowing you to deploy a fixed dashboard to users. Standalone mode can
be enabled by changing the standalone
config parameter:
-
If standalone mode is
false
, all other configuration parameters are ignored. NeoDash will run in Editor mode, and require a manual sign-in. -
If standalone mode is
true
, NeoDash will read all configuration parameters. A predefined dashboard will be auto-loaded, and no changes to the dashboard can be made. There are two types of valid standalone deployments:-
A standalone deployment that reads the fixed dashboard from Neo4j. The
standaloneDashboardName
andstandaloneDashboardDatabase
config parameters are used to define these. -
A standalone deployment that reads the fixed dashboard from a URL. The
standaloneDashboardURL
config parameter is used to define this.
-
-
Standalone mode can also be configured to allow users load a different dashboard after the predefined one is loaded (a
Load Dashboard
button will be displayed on the right side of dashboard title). ThestandaloneAllowLoad
andstandaloneLoadFromOtherDatabases
are used to define this. -
When allowing users to load dashboards dyamically in standalone mode, they may also need to connect to different databases, depending on the specific dashboard bing loaded. this can be enabled setting
standaloneMultiDatabase
to true and providing a comma separated list of the allowed database names in the`standaloneDatabaseList` parameter.