[options] addons_path = /mnt/extra-addons,/usr/lib/python3/dist-packages/odoo/addons data_dir = /var/lib/odoo ; Operator control plane only. admin.kaissflow.com must never resolve to a ; database named "admin", so this instance is pinned rather than host-mapped. dbfilter = ^masterdb$ ; MUST be True. Provisioning calls odoo.service.db.exp_duplicate_database to ; clone nacef_tpl, and that function is decorated @check_db_management_enabled, ; which raises AccessDenied whenever list_db is false — even for in-process ; calls. With it false, Provision fails with "Échec de la création de la base". ; ; The database manager this exposes is NOT reachable: Odoo binds to 127.0.0.1 ; and nginx returns 404 for /web/database on every vhost. admin_passwd is a ; second lock in case that ever changes. list_db = True admin_passwd = $pbkdf2-sha512$CHANGE_ME_ON_THE_SERVER proxy_mode = True ; Tenant provisioning (CREATE DATABASE ... TEMPLATE nacef_tpl) blocks a worker ; for a while, so keep a couple spare. workers = 3 max_cron_threads = 2 limit_time_cpu = 900 limit_time_real = 1800 limit_memory_soft = 2147483648 limit_memory_hard = 2684354560 log_level = info