fixed sample tunnel configuration

This commit is contained in:
Adolfo Gómez García 2021-01-25 08:42:50 +01:00
parent 9e88ff5daa
commit c796f5aaac

View File

@ -1,16 +1,18 @@
# Sample DS tunnel configuration # Sample UDS tunnel configuration
# Pid file location # Pid file, optional
pidfile = /tmp/udstunnel.pid # pidfile = /tmp/udstunnel.pid
# Log level, valid are DEBUG, INFO, WARN, ERROR. Defaults to ERROR # Log level, valid are DEBUG, INFO, WARN, ERROR. Defaults to ERROR
loglevel = DEBUG loglevel = INFO
# Log file, Defaults to stdout # Log file, Defaults to stdout
# logfile = /tmp/tunnel.log # logfile = /tmp/tunnel.log
# Max log size before rotating it. Defaults to 32 MB. # Max log size before rotating it. Defaults to 32 MB.
# The value is in MB. You can include or not the M string at end. # The value is in MB. You can include or not the M string at end.
logsize = 20M logsize = 20M
# Number of backup logs to keep. Defaults to 3 # Number of backup logs to keep. Defaults to 3
lognumber = 3 lognumber = 3
@ -24,8 +26,8 @@ workers = 2
port = 7777 port = 7777
# SSL Related parameters. # SSL Related parameters.
ssl_certificate = tests/testing.pem ssl_certificate = /etc/certs/server.pem
ssl_certificate_key = tests/testing.key ssl_certificate_key = /etc/certs/key.pem
# ssl_ciphers and ssl_dhparam are optional. # ssl_ciphers and ssl_dhparam are optional.
ssl_ciphers = ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384 ssl_ciphers = ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384
ssl_dhparam = /etc/certs/dhparam.pem ssl_dhparam = /etc/certs/dhparam.pem
@ -37,11 +39,12 @@ ssl_dhparam = /etc/certs/dhparam.pem
# https://www.example.com:14333/uds/rest/tunnel/ # https://www.example.com:14333/uds/rest/tunnel/
uds_server = http://172.27.0.1:8000/uds/rest/tunnel uds_server = http://172.27.0.1:8000/uds/rest/tunnel
# Secret to get access to admin commands. No default for this. # Secret to get access to admin commands (Currently only stats commands). No default for this.
# Admin commands and only allowed from localhost # Admin commands and only allowed from "allow" ips
# So, in order to allow this commands, ensure listen address allows connections from localhost # So, in order to allow this commands, ensure listen address allows connections from localhost
secret = MySecret secret = MySecret
# List of af allowed admin commands ips (only IPs, no networks or whatever) # List of af allowed admin commands ips (Currently only stats commands).
# Only use IPs, no networks allowed
# defaults to localhost (change if listen address is different from 0.0.0.0) # defaults to localhost (change if listen address is different from 0.0.0.0)
allow = 127.0.0.1 allow = 127.0.0.1