In System Tools > Settings > Security there are 2 header related options:

  • Use CTO and STS headers
    • X-Content-Type-Options: nosniff
    • Strict-Transport-Security: max-age=$HSTSSeconds; includeSubDomains
      • $HSTSSeconds is set in noodle.properties (6 months default)
      • Only set if HTTPS is in use
  • Use RT, CSP, FO, XSSP headers
    • Report-To: ...1 day... /CSP.po
      • If Chrome or Edge of supporting versions
    • Content-Security-Policy: $CSP
      • $CSP varies depending on the page served
    • X-Frame-Options: SAMEORIGIN
    • Referrer-Policy: strict-origin-when-cross-origin
    • X-XSS-Protection: 1

Noodle can integrate with Large Language Models to aid in content creation. ArtificialAnalysis.ai has a nice pricing, quality, and speed overview. One token is roughly equivalent to 0.75 million words.

Links to 3rd party Application Programming Interfaces and pricing:

Free tiers:

Paid only:

To get a screen share from Vialect please use any free offering:

Or send us a link to a paid service:

Or let us know if you have some other preference.

Currently not working on some Web Browsers:

  • Microsoft Teams [CoreError::LAYOUT_ERROR][Error::Cannot return null for non-nullable field AuthenticationUserProfile.upn.]

If certbot from Let's Encrypt is not used certificates will need to be updated annually.

  • Download the signed public key from your Certificate Authorities (CA)
  • Import the signed public key into the keystore already containing the private key (and intermediate certificates if required)
keytool -import -alias noodle.domain.tld -trustcacerts -file noodlecert.crt -keystore noodle.pfx
  • Restart the Noodle service

Add the following to the Host tag in server.xml

<Context docBase="ROOT" override="true">
    <Resources cachingAllowed="true" cacheMaxSize="100000"/>
</Context>

Add the following to multiserver or intranet.bat

-Xmx1000m -Xms1000m -XX:+UseG1GC

Add the following to the Host tag in server.xml

<Context docBase="ROOT" override="true">
    <Resources cachingAllowed="false" />
</Context>

Add the following to multiserver or intranet.bat

-Xmx50m -Xms50m -XX:+UseG1GC