Author Archives: TimL

•

PostgreSQL has an autovacuum and however much it improves with every version it has not removed the benefit of the occasional manual vacuum. There are 3 levels of effectiveness and load; autovacuum, vacuum (like reindex), and vacuum full (like a dump/restore). We find that a full vacuum can be of little benefit even over decades, but a regular vacuum can be of benefit in as little as a year.

  • System Tools > Analytics > DB Index Fragmentation

gives an indication of if running a vacuum would be of benefit (more than 10 tables, over 30% fragmented). Noodle has a button for this and other tasks in

  • System Tools > Settings > General > Import > Maintenance

But there is no progress report etc like with the official management client for PostgreSQL (PGAdmin4): 

or by running SQL:

  • VACUUM VERBOSE ANALYZE;

We don't automate this for servers we don't manage because it can conflict with backups and usage.

•

In System Tools > Settings > Security there are 2 header related options:

  • Use CTO and STS headers
    • X-Content-Type-Options: nosniff
    • Strict-Transport-Security: max-age=$HSTSSeconds; includeSubDomains
      • $HSTSSeconds is set in noodle.properties (6 months default)
      • Only set if HTTPS is in use
  • Use RT, CSP, FO, XSSP headers
    • Report-To: ...1 day... /CSP.po
      • If Chrome or Edge of supporting versions
    • Content-Security-Policy: $CSP
      • $CSP varies depending on the page served
    • X-Frame-Options: SAMEORIGIN
    • Referrer-Policy: strict-origin-when-cross-origin
    • X-XSS-Protection: 1

•

Noodle offers Large Language Model (LLM) Artificial Intelligence (AI) integration in the editors for streamlining document creation and refinement. Information in Noodle other than what is in the current editor when AI is invoked is not made available to the AIs .Which AI is used (Google Gemini by default) and the ability to disable is in:

System Tools > Settings > General > Integrations

Links to 3rd party Application Programming Interfaces (APIs) and pricing:

Free tiers:

Paid only:

ArtificialAnalysis.ai has a nice pricing, quality, and speed overview.

Due to AI being in a growth phase models are deprecated quickly.

Undo ([ctrl]+[z]) or close can be used to revert changes made by pressing the AI button.

•

If certbot or the like is not used certificates will need to be updated manually.

  • Download the signed public key from your Certificate Authorities (CA)
  • Import the signed public key into the keystore already containing the private key (and intermediate certificates if required)
keytool -import -alias noodle.domain.tld -trustcacerts -file noodlecert.crt -keystore noodle.pfx
  • Restart the Noodle service

•

Add the following to the Host tag in server.xml

<Context docBase="ROOT" override="true">
    <Resources cachingAllowed="true" cacheMaxSize="100000"/>
</Context>

Add the following to multiserver or intranet.bat

-Xmx1000m -Xms1000m -XX:+UseG1GC