give the option for doing local host http and then using a rev proxy

2026-07-18 20:22:16 -05:00
parent 12cb3f6b4c
commit 0ae7069cc7
6 changed files with 90 additions and 14 deletions
@@ -17,14 +17,17 @@ OVERLORD_PASS=admin
 JWT_SECRET=
 OVERLORD_AGENT_TOKEN=

-# TLS/HTTPS Configuration (Always Enabled)
-# Certificates are auto-generated if not present
-# You can specify custom certificate paths:
+# TLS/HTTPS Configuration
+# By default, certificates are generated when missing and Overlord serves HTTPS.
 # OVERLORD_TLS_CERT=./certs/server.crt
 # OVERLORD_TLS_KEY=./certs/server.key
-
-# Optional: CA certificate for client certificate verification (mutual TLS)
 # OVERLORD_TLS_CA=./certs/ca.crt

+# Reverse-proxy TLS offload. This serves internal HTTP only; keep the listener
+# on loopback and expose HTTPS/WSS through nginx, Caddy, or another trusted proxy.
+# HOST=127.0.0.1
+# OVERLORD_TLS_OFFLOAD=true
+# OVERLORD_HEALTHCHECK_URL=http://127.0.0.1:5173/health
+
 # Performance tuning
 PRUNE_BATCH=500