pinning + new version of backups

This commit is contained in:
KingKDot
2026-07-30 14:03:16 -05:00
parent 477b9a5353
commit 2669ab1388
32 changed files with 1527 additions and 133 deletions
+6
View File
@@ -23,6 +23,12 @@ OVERLORD_AGENT_TOKEN=
# OVERLORD_TLS_KEY=./certs/server.key
# OVERLORD_TLS_CA=./certs/ca.crt
# Additional SHA-256 SPKI pins embedded in newly generated agents. Use this for
# a planned next certificate key, or provide the externally terminated TLS
# certificate pins when OVERLORD_TLS_OFFLOAD=true. Comma-separated; an optional
# "sha256/" prefix is accepted.
# OVERLORD_TLS_SPKI_PINS=base64-sha256-current,base64-sha256-next
# Reverse-proxy TLS offload. This serves internal HTTP only; keep the listener
# on loopback and expose HTTPS/WSS through nginx, Caddy, or another trusted proxy.
# HOST=127.0.0.1