LXDMosaic Settings
This document describes all configurable settings available in LXDMosaic. These can be managed through the web interface under Settings, or configured during the initial setup wizard.
Site Title
Type: String Default: LXDMosaic
The display title shown in the browser tab and navigation bar.
Instance IP
Type: IP Address / Domain Name
The publicly reachable IP address or domain name of your LXDMosaic instance. This setting is required if you plan to use deployments with "phone-home" functionality, where deployed instances report back their status to LXDMosaic.
Record Actions (Audit Log)
Type: Boolean (1 or 0)
Whether to record user actions such as creating, starting, stopping, and deleting containers. Enabling this provides an audit trail of all operations performed in the system.
Backup Directory
Type: Filesystem Path
The local directory where LXDMosaic stores backup files. The path must be readable and writable by the web server process.
The resulting backup directory structure follows this pattern:
$hostId/$project/$instance/backup.tar.gz
Strong Password Policy
Type: Boolean (1 or 0) Default: 1 (enabled)
When enabled, all user passwords must meet the following requirements:
- At least 8 characters long
- Include at least one number
- Include at least one letter
Project Analytics History
Type: Duration string Default: -1 day
How long project analytics data is retained. Data is collected for every host's projects every 5 minutes. Express the duration as one of the following formats:
-X hours-Y days-Z months
Warning: This data accumulates quickly. The approximate daily volume is:
(number of projects × 8 metric types × 12 five-minute intervals per hour) × 24 hoursrows per day.
Instance Metric History
Type: Duration string Default: Configurable during setup
How long individual instance metrics (CPU, memory, disk I/O, etc.) are retained. Uses the same format as Project Analytics History (-X hours, -Y days, -Z months).
Timezone
Type: Timezone identifier Default: UTC
All dates stored in the database and retrieved from LXD/Incus APIs remain in UTC. This setting ensures that scheduled cron jobs (backups, snapshots, analytics collection) run at the times you expect in your local timezone.
Backup History
Type: Duration string Default: -1 year
How long backup operation records are retained in the database. Uses the same format as above (-X hours, -Y days, -Z months).
Software Inventory Monitor
Type: Boolean (1 or 0)
When enabled, LXDMosaic periodically snapshots the installed packages on each instance, allowing you to track software changes over time.
Software Inventory Monitor Duration
Type: Duration string
How far back to retain software inventory snapshots.
Timer Monitor
Type: Boolean (1 or 0)
When enabled, LXDMosaic monitors LXD/Incus timer/snapshot schedules across all connected hosts.
Timer Monitor Duration
Type: Duration string
How far back to retain timer monitoring data.
Search Index
Type: Boolean (1 or 0)
When enabled, a background task periodically builds a search index so you can quickly find entities (instances, profiles, images, etc.) across all hosts using the global search feature (Ctrl+S).
LDAP Settings
LDAP Server
Type: PHP LDAP connection string
The address of your LDAP server:
ldap://IP_ADDRESS:389 # Standard LDAP
ldaps://IP_ADDRESS:636 # LDAPS (encrypted)
LDAP Lookup User DN
Type: Distinguished Name
A service account used to search the LDAP directory when importing users. Example:
cn=administrator,cn=Users,dc=example,dc=com
LDAP Lookup User Password
Type: String
The password for the lookup user account.
LDAP Base DN
Type: Distinguished Name
The directory node under which user accounts are searched. LXDMosaic filters for entries matching objectClass=person. Example:
ou=Users,dc=example,dc=com
Importing Users
LXDMosaic automatically syncs LDAP users every hour. You can also trigger a manual sync from the UI. Avoid initiating a manual sync near the hour mark (e.g., do not start at 14:58) — having two imports overlap can result in duplicate users on large directories.
Performance note: importing approximately 4,000 users from a Samba LDAP directory took ~4 minutes on first import. Subsequent re-imports of the same users complete in under a second since only new or changed records are inserted.