mirror of
https://github.com/openziti/zrok.git
synced 2025-06-26 20:52:33 +02:00
prod configs
This commit is contained in:
parent
a603f64b2d
commit
2042140a4b
@ -7,7 +7,7 @@ v: 3
|
|||||||
# memory:
|
# memory:
|
||||||
# path: ctrl.memprof
|
# path: ctrl.memprof
|
||||||
|
|
||||||
db: "/home/ubuntu/local/etc/zrok.io/db/ctrl.db"
|
db: "/home/ubuntu/local/etc/zrok.io/db/ziti-ctrl.db"
|
||||||
|
|
||||||
identity:
|
identity:
|
||||||
cert: "/home/ubuntu/local/etc/zrok.io/pki/intermediate/certs/ctrl-client.cert"
|
cert: "/home/ubuntu/local/etc/zrok.io/pki/intermediate/certs/ctrl-client.cert"
|
||||||
@ -125,7 +125,7 @@ edge:
|
|||||||
# address - required
|
# address - required
|
||||||
# The default address (host:port) to use for enrollment for the Client API. This value must match one of the addresses
|
# The default address (host:port) to use for enrollment for the Client API. This value must match one of the addresses
|
||||||
# defined in this Controller.WebListener.'s bindPoints.
|
# defined in this Controller.WebListener.'s bindPoints.
|
||||||
address: api.zrok.io:1280
|
address: ziti.zrok.io:1280
|
||||||
# This section is used to define option that are used during enrollment of Edge Routers, Ziti Edge Identities.
|
# This section is used to define option that are used during enrollment of Edge Routers, Ziti Edge Identities.
|
||||||
enrollment:
|
enrollment:
|
||||||
# signingCert - required
|
# signingCert - required
|
||||||
@ -152,24 +152,24 @@ edge:
|
|||||||
|
|
||||||
# web
|
# web
|
||||||
# Defines webListeners that will be hosted by the controller. Each webListener can host many APIs and be bound to many
|
# Defines webListeners that will be hosted by the controller. Each webListener can host many APIs and be bound to many
|
||||||
# backend points.
|
# bind points.
|
||||||
web:
|
web:
|
||||||
# name - required
|
# name - required
|
||||||
# Provides a name for this listener, used for logging output. Not required to be unique, but is highly suggested.
|
# Provides a name for this listener, used for logging output. Not required to be unique, but is highly suggested.
|
||||||
- name: client-management
|
- name: client-management
|
||||||
# bindPoints - required
|
# bindPoints - required
|
||||||
# One or more backend points are required. A backend point specifies an interface (interface:port string) that defines
|
# One or more bind points are required. A bind point specifies an interface (interface:port string) that defines
|
||||||
# where on the host machine the webListener will frontend and the address (host:port) that should be used to
|
# where on the host machine the webListener will listen and the address (host:port) that should be used to
|
||||||
# publicly address the webListener(i.e. mydomain.com, localhost, 127.0.0.1). This public address may be used for
|
# publicly address the webListener(i.e. mydomain.com, localhost, 127.0.0.1). This public address may be used for
|
||||||
# incoming address resolution as well as used in responses in the API.
|
# incoming address resolution as well as used in responses in the API.
|
||||||
bindPoints:
|
bindPoints:
|
||||||
#interface - required
|
#interface - required
|
||||||
# A host:port string on which network interface to frontend on. 0.0.0.0 will frontend on all interfaces
|
# A host:port string on which network interface to listen on. 0.0.0.0 will listen on all interfaces
|
||||||
- interface: 0.0.0.0:1280
|
- interface: 0.0.0.0:1280
|
||||||
# address - required
|
# address - required
|
||||||
# The public address that external incoming requests will be able to resolve. Used in request processing and
|
# The public address that external incoming requests will be able to resolve. Used in request processing and
|
||||||
# response content that requires full host:port/path addresses.
|
# response content that requires full host:port/path addresses.
|
||||||
address: api.zrok.io:1280
|
address: ziti.zrok.io:1280
|
||||||
# identity - optional
|
# identity - optional
|
||||||
# Allows the webListener to have a specific identity instead of defaulting to the root 'identity' section.
|
# Allows the webListener to have a specific identity instead of defaulting to the root 'identity' section.
|
||||||
identity:
|
identity:
|
||||||
@ -206,7 +206,7 @@ web:
|
|||||||
# Allows one or more APIs to be bound to this webListener
|
# Allows one or more APIs to be bound to this webListener
|
||||||
apis:
|
apis:
|
||||||
# binding - required
|
# binding - required
|
||||||
# Specifies an API to backend to this webListener. Built-in APIs are
|
# Specifies an API to bind to this webListener. Built-in APIs are
|
||||||
# - edge-management
|
# - edge-management
|
||||||
# - edge-client
|
# - edge-client
|
||||||
# - fabric-management
|
# - fabric-management
|
@ -24,7 +24,7 @@ listeners:
|
|||||||
- binding: edge
|
- binding: edge
|
||||||
address: tls:0.0.0.0:3022
|
address: tls:0.0.0.0:3022
|
||||||
options:
|
options:
|
||||||
advertise: api.zrok.io:3022
|
advertise: ziti.zrok.io:3022
|
||||||
connectTimeoutMs: 1000
|
connectTimeoutMs: 1000
|
||||||
getSessionTimeout: 60s
|
getSessionTimeout: 60s
|
||||||
- binding: tunnel
|
- binding: tunnel
|
||||||
@ -41,7 +41,7 @@ edge:
|
|||||||
organizationalUnit: Ziti
|
organizationalUnit: Ziti
|
||||||
sans:
|
sans:
|
||||||
dns:
|
dns:
|
||||||
- api.zrok.io
|
- ziti.zrok.io
|
||||||
- localhost
|
- localhost
|
||||||
ip:
|
ip:
|
||||||
- "10.0.0.41"
|
- "10.0.0.41"
|
@ -9,12 +9,12 @@ endpoint:
|
|||||||
port: 8080
|
port: 8080
|
||||||
|
|
||||||
proxy:
|
proxy:
|
||||||
url_template: "http://{svcName}.in.zrok.io:8080/"
|
url_template: "https://{svcName}.in.zrok.io/"
|
||||||
identities:
|
identities:
|
||||||
- "yvnhjvzEd"
|
- "e6gMfeD4y"
|
||||||
|
|
||||||
store:
|
store:
|
||||||
path: /home/ubuntu/local/etc/zrok.io/db/zrok.db
|
path: /home/ubuntu/local/etc/zrok.io/db/zrok-ctrl.db
|
||||||
|
|
||||||
ziti:
|
ziti:
|
||||||
api_endpoint: "https://10.0.0.41:1280"
|
api_endpoint: "https://10.0.0.41:1280"
|
Loading…
x
Reference in New Issue
Block a user