diff options
| author | Anders Betts <anders.betts@gmail.com> | 2026-09-17 21:26:20 +0200 |
|---|---|---|
| committer | Anders Betts <anders.betts@gmail.com> | 2026-09-17 21:26:20 +0200 |
| commit | ed1c15929d2eb2dbc6432986c26661bf1549964a (patch) | |
| tree | 4f04934edef686b19d16e1bb2f79bb5c15e142de /.env.example | |
| parent | 380195f7cd5e57acf2c1cf2bc41069e6b0b979ed (diff) | |
| download | bokf-0.1.1.tar.gz bokf-0.1.1.zip | |
Add native TLS transport, TLS clients and lego cert sidecarv0.1.1
- bokfd: optional TLS listener (OpenSSL), certificate reload on change
- clients: tls:host:port targets with chain and host verification
- compose: port 8788 and an INWX/lego renewal sidecar
- Makefile: header dependency tracking (-MMD -MP)
Diffstat (limited to '.env.example')
| -rw-r--r-- | .env.example | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/.env.example b/.env.example index bb20a6f..ab0dd6f 100644 --- a/.env.example +++ b/.env.example @@ -11,3 +11,11 @@ BOKF_REMOTE_DIR=/srv/bokf # Local compose runs: "docker compose up --build" builds this image name. BOKF_IMAGE=bokf BOKF_TAG=dev +# +# TLS: the certs sidecar renews a Let's Encrypt certificate via INWX DNS-01 +# and bokfd serves the clients on port 8788. Keep the credentials in the +# host's .env only; they are never committed. +# LEGO_DOMAIN=bokf.makandra.eu +# LEGO_EMAIL=anders@makandra.eu +# INWX_USERNAME=... +# INWX_PASSWORD=... |