Jan Dittberner
9821d34939
- recommend `mkcert` to generate certificates for local development - change default configuration to use files recommended in README.md - separate server name and bind address to allow binding to a local address but publish a different public name
21 lines
567 B
TOML
21 lines
567 B
TOML
[security]
|
|
# random key for CSRF protection, must be 32 bytes, generate with openssl rand -base64 32
|
|
csrf.key = "32-byte-long-random-base64-encoded-key"
|
|
# CA certificates that are accepted to sign client certificates
|
|
client.ca-file = "client.cas.pem"
|
|
|
|
[server]
|
|
# server name
|
|
name = "idp.cacert.org"
|
|
# server IP address
|
|
bind_address = "127.0.0.1"
|
|
# server port
|
|
port = 3443
|
|
# server TLS X.509 certificate in PEM format
|
|
certificate = "server.crt.pem"
|
|
# private key for TLS
|
|
key = "server.key.pem"
|
|
|
|
[admin]
|
|
# URL to ORY Hydra admin endpoint URL
|
|
url = "https://hydra:4445"
|