|
@@ -14,10 +14,8 @@ dashboard {
|
|
|
cors = false
|
|
cors = false
|
|
|
|
|
|
|
|
listeners.https {
|
|
listeners.https {
|
|
|
- ## Whether to enable the listener
|
|
|
|
|
- enable = true
|
|
|
|
|
|
|
|
|
|
- ## Port or Address to listen on
|
|
|
|
|
|
|
+ ## Port or Address to listen on, 0 means disable
|
|
|
bind = "0.0.0.0:18084" ## or just a port number, e.g. 18084
|
|
bind = "0.0.0.0:18084" ## or just a port number, e.g. 18084
|
|
|
|
|
|
|
|
## Socket acceptor pool size for TCP protocols
|
|
## Socket acceptor pool size for TCP protocols
|
|
@@ -43,48 +41,48 @@ dashboard {
|
|
|
|
|
|
|
|
## Trusted PEM format CA certificates bundle file
|
|
## Trusted PEM format CA certificates bundle file
|
|
|
cacertfile = "data/certs/cacert.pem"
|
|
cacertfile = "data/certs/cacert.pem"
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## PEM format certificates chain file
|
|
## PEM format certificates chain file
|
|
|
certfile = "data/certs/cert.pem"
|
|
certfile = "data/certs/cert.pem"
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## PEM format private key file
|
|
## PEM format private key file
|
|
|
keyfile = "data/certs/key.pem"
|
|
keyfile = "data/certs/key.pem"
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Enable or disable peer verification
|
|
## Enable or disable peer verification
|
|
|
verify = verify_none ## use verify_peer to enable
|
|
verify = verify_none ## use verify_peer to enable
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## if `verify' is ebabled, whit true, the connection fails if the client does not have a certificate to send
|
|
## if `verify' is ebabled, whit true, the connection fails if the client does not have a certificate to send
|
|
|
fail_if_no_peer_cert = false
|
|
fail_if_no_peer_cert = false
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Enable TLS session reuse
|
|
## Enable TLS session reuse
|
|
|
reuse_sessions = true
|
|
reuse_sessions = true
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Maximum number of non-self-issued intermediate certificates that can follow the peer certificate in a valid certification path
|
|
## Maximum number of non-self-issued intermediate certificates that can follow the peer certificate in a valid certification path
|
|
|
depth = 10
|
|
depth = 10
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Which versions are to be supported
|
|
## Which versions are to be supported
|
|
|
versions = [tlsv1.3, tlsv1.2]
|
|
versions = [tlsv1.3, tlsv1.2]
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## TLS cipher suite names
|
|
## TLS cipher suite names
|
|
|
## Note: By default, all available suites are supported, you do not need to set this
|
|
## Note: By default, all available suites are supported, you do not need to set this
|
|
|
ciphers = ["TLS_AES_256_GCM_SHA384","TLS_AES_128_GCM_SHA256"]
|
|
ciphers = ["TLS_AES_256_GCM_SHA384","TLS_AES_128_GCM_SHA256"]
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Allows a client and a server to renegotiate the parameters of the SSL connection on the fly
|
|
## Allows a client and a server to renegotiate the parameters of the SSL connection on the fly
|
|
|
secure_renegotiate = true
|
|
secure_renegotiate = true
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Log level for SSL communication
|
|
## Log level for SSL communication
|
|
|
## Type: emergency | alert | critical | error | warning | notice | info | debug | none | all
|
|
## Type: emergency | alert | critical | error | warning | notice | info | debug | none | all
|
|
|
log_level = notice
|
|
log_level = notice
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Hibernate the SSL process after idling for amount of time reducing its memory footprint
|
|
## Hibernate the SSL process after idling for amount of time reducing its memory footprint
|
|
|
hibernate_after = 5s
|
|
hibernate_after = 5s
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Forces the cipher to be set based on the server-specified order instead of the client-specified order
|
|
## Forces the cipher to be set based on the server-specified order instead of the client-specified order
|
|
|
honor_cipher_order = true
|
|
honor_cipher_order = true
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Setting this to false to disable client-initiated renegotiation
|
|
## Setting this to false to disable client-initiated renegotiation
|
|
|
client_renegotiation = true
|
|
client_renegotiation = true
|
|
|
-
|
|
|
|
|
|
|
+
|
|
|
## Maximum time duration allowed for the handshake to complete
|
|
## Maximum time duration allowed for the handshake to complete
|
|
|
handshake_timeout = 15s
|
|
handshake_timeout = 15s
|
|
|
}
|
|
}
|