LXDMosaic Settings

This document describes all configurable settings available in LXDMosaic. These can be managed through the web interface under Settings, or configured during the initial setup wizard.


Site Title

Type: String Default: LXDMosaic

The display title shown in the browser tab and navigation bar.


Instance IP

Type: IP Address / Domain Name

The publicly reachable IP address or domain name of your LXDMosaic instance. This setting is required if you plan to use deployments with "phone-home" functionality, where deployed instances report back their status to LXDMosaic.


Record Actions (Audit Log)

Type: Boolean (1 or 0)

Whether to record user actions such as creating, starting, stopping, and deleting containers. Enabling this provides an audit trail of all operations performed in the system.


Backup Directory

Type: Filesystem Path

The local directory where LXDMosaic stores backup files. The path must be readable and writable by the web server process.

The resulting backup directory structure follows this pattern:

plaintext
$hostId/$project/$instance/backup.tar.gz

Strong Password Policy

Type: Boolean (1 or 0) Default: 1 (enabled)

When enabled, all user passwords must meet the following requirements:

  • At least 8 characters long
  • Include at least one number
  • Include at least one letter

Project Analytics History

Type: Duration string Default: -1 day

How long project analytics data is retained. Data is collected for every host's projects every 5 minutes. Express the duration as one of the following formats:

  • -X hours
  • -Y days
  • -Z months

Warning: This data accumulates quickly. The approximate daily volume is: (number of projects × 8 metric types × 12 five-minute intervals per hour) × 24 hours rows per day.


Instance Metric History

Type: Duration string Default: Configurable during setup

How long individual instance metrics (CPU, memory, disk I/O, etc.) are retained. Uses the same format as Project Analytics History (-X hours, -Y days, -Z months).


Timezone

Type: Timezone identifier Default: UTC

All dates stored in the database and retrieved from LXD/Incus APIs remain in UTC. This setting ensures that scheduled cron jobs (backups, snapshots, analytics collection) run at the times you expect in your local timezone.


Backup History

Type: Duration string Default: -1 year

How long backup operation records are retained in the database. Uses the same format as above (-X hours, -Y days, -Z months).


Software Inventory Monitor

Type: Boolean (1 or 0)

When enabled, LXDMosaic periodically snapshots the installed packages on each instance, allowing you to track software changes over time.

Software Inventory Monitor Duration

Type: Duration string

How far back to retain software inventory snapshots.


Timer Monitor

Type: Boolean (1 or 0)

When enabled, LXDMosaic monitors LXD/Incus timer/snapshot schedules across all connected hosts.

Timer Monitor Duration

Type: Duration string

How far back to retain timer monitoring data.


Search Index

Type: Boolean (1 or 0)

When enabled, a background task periodically builds a search index so you can quickly find entities (instances, profiles, images, etc.) across all hosts using the global search feature (Ctrl+S).


LDAP Settings

LDAP Server

Type: PHP LDAP connection string

The address of your LDAP server:

plaintext
ldap://IP_ADDRESS:389    # Standard LDAP
ldaps://IP_ADDRESS:636   # LDAPS (encrypted)

LDAP Lookup User DN

Type: Distinguished Name

A service account used to search the LDAP directory when importing users. Example:

plaintext
cn=administrator,cn=Users,dc=example,dc=com

LDAP Lookup User Password

Type: String

The password for the lookup user account.

LDAP Base DN

Type: Distinguished Name

The directory node under which user accounts are searched. LXDMosaic filters for entries matching objectClass=person. Example:

plaintext
ou=Users,dc=example,dc=com

Importing Users

LXDMosaic automatically syncs LDAP users every hour. You can also trigger a manual sync from the UI. Avoid initiating a manual sync near the hour mark (e.g., do not start at 14:58) — having two imports overlap can result in duplicate users on large directories.

Performance note: importing approximately 4,000 users from a Samba LDAP directory took ~4 minutes on first import. Subsequent re-imports of the same users complete in under a second since only new or changed records are inserted.