pinning + new version of backups
This commit is contained in:
@@ -23,6 +23,12 @@ OVERLORD_AGENT_TOKEN=
|
||||
# OVERLORD_TLS_KEY=./certs/server.key
|
||||
# OVERLORD_TLS_CA=./certs/ca.crt
|
||||
|
||||
# Additional SHA-256 SPKI pins embedded in newly generated agents. Use this for
|
||||
# a planned next certificate key, or provide the externally terminated TLS
|
||||
# certificate pins when OVERLORD_TLS_OFFLOAD=true. Comma-separated; an optional
|
||||
# "sha256/" prefix is accepted.
|
||||
# OVERLORD_TLS_SPKI_PINS=base64-sha256-current,base64-sha256-next
|
||||
|
||||
# Reverse-proxy TLS offload. This serves internal HTTP only; keep the listener
|
||||
# on loopback and expose HTTPS/WSS through nginx, Caddy, or another trusted proxy.
|
||||
# HOST=127.0.0.1
|
||||
|
||||
Reference in New Issue
Block a user