mirror of
https://github.com/hanzozt/zt.git
synced 2026-11-03 05:01:58 +00:00
zeekay
241625e7d9
- Repo names: ziti-* → zt-* - Go modules: github.com/hanzozt/ziti → github.com/hanzozt/zt - Docker images: hanzozt/ziti-* → hanzozt/zt-* - C/Java/JS symbols: ziti_* → zt_* - File and directory names updated
108 lines
3.1 KiB
Cheetah
108 lines
3.1 KiB
Cheetah
{{$ssh_username := .Model.MustVariable "credentials.ssh.username"}}
|
|
{{$identity := .Component.Id}}
|
|
{{$router_ip := .Host.PublicIp}}
|
|
|
|
v: 3
|
|
|
|
enableDebugOps: true
|
|
|
|
{{if .Component.GetFlag "ha"}}
|
|
ha:
|
|
enabled: true
|
|
{{end}}
|
|
|
|
identity:
|
|
cert: /home/{{$ssh_username}}/fablab/cfg/{{$identity}}-client.cert
|
|
server_cert: /home/{{$ssh_username}}/fablab/cfg/{{$identity}}-server.cert
|
|
key: /home/{{$ssh_username}}/fablab/cfg/{{$identity}}.key
|
|
ca: /home/{{$ssh_username}}/fablab/cfg/{{$identity}}-server.chain.pem
|
|
|
|
ctrl:
|
|
endpoints: {{ range $host := .Model.MustSelectHosts "component.ctrl" 1 }}
|
|
- tls:{{ $host.PublicIp }}:6262{{end}}
|
|
|
|
healthChecks:
|
|
ctrlPingCheck:
|
|
# How often to ping the controller over the control channel. Defaults to 30 seconds
|
|
interval: 30s
|
|
# When to timeout the ping. Defaults to 15 seconds
|
|
timeout: 15s
|
|
# How long to wait before pinging the controller. Defaults to 15 seconds
|
|
initialDelay: 15s
|
|
|
|
metrics:
|
|
reportInterval: 15s
|
|
messageQueueSize: 10
|
|
enableDataDelayMetric: true
|
|
|
|
transport:
|
|
westworld3:
|
|
profile_version: 1
|
|
#max_segment_sz: 3000
|
|
#dtls:
|
|
# maxBytesPerSecond: 500000
|
|
|
|
link:
|
|
listeners:
|
|
- binding: transport
|
|
bind: tls:0.0.0.0:6000
|
|
advertise: tls:{{$router_ip}}:6000
|
|
dialers:
|
|
- binding: transport
|
|
split: false
|
|
|
|
dialers:
|
|
- binding: tunnel
|
|
options:
|
|
#mtu: 1435
|
|
#txPortalStartSize: 4192000
|
|
txPortalIncreaseThresh: 250
|
|
txPortalIncreaseScale: 0.5
|
|
txPortalRetxThresh: 50
|
|
txPortalRetxScale: 0.9
|
|
retxScale: 1.05
|
|
#txPortalMinSize: 4192000
|
|
txPortalIncreaseThresh: 256
|
|
|
|
listeners:
|
|
{{if .Component.HasTag "tunneler"}}
|
|
- binding: tunnel
|
|
options:
|
|
mode: tproxy
|
|
#mtu: 1435
|
|
#txPortalStartSize: 4192000
|
|
txPortalIncreaseThresh: 250
|
|
txPortalIncreaseScale: 0.5
|
|
txPortalRetxThresh: 50
|
|
txPortalRetxScale: 0.9
|
|
retxScale: 1.05
|
|
#txPortalMinSize: 4192000
|
|
txPortalIncreaseThresh: 256
|
|
|
|
{{end}}
|
|
- binding: edge
|
|
address: tls:0.0.0.0:6262
|
|
options:
|
|
# (required) The public hostname and port combination that Ziti SDKs should connect on. Previously this was in the chanIngress section.
|
|
advertise: {{ .Host.PublicIp }}:6262
|
|
|
|
# By having an 'edge' section defined, the zt router will attempt to parse the edge configuration. Removing this
|
|
# section, commenting out, or altering the name of the section will cause the router to no longer operate as an Edge
|
|
# Router.
|
|
edge:
|
|
# (required) Information used to generate the initial registration CSR. For documentation on these fields please
|
|
# refer to the openssl documentation. These values MUST be supplied and have no defaults.
|
|
csr:
|
|
country: US
|
|
province: NC
|
|
locality: Charlotte
|
|
organization: NetFoundry
|
|
organizationalUnit: Ziti
|
|
|
|
# (required) SANs that this Gateways certs should contain. At least one IP or DNS SAN should be defined that matches
|
|
# the edge listeners "advertise" value from the "listeners" section.
|
|
sans:
|
|
ip:
|
|
- {{ .Host.PublicIp }}
|
|
|