mirror of
https://github.com/hanzozt/zt.git
synced 2026-11-02 11:38:22 +00:00
79 lines
2.6 KiB
Cheetah
79 lines
2.6 KiB
Cheetah
{{$ssh_username := .Model.MustVariable "credentials.ssh.username"}}
|
|
{{$identity := .Component.Id}}
|
|
{{$router_ip := .Host.PublicIp}}
|
|
|
|
v: 3
|
|
|
|
enableDebugOps: true
|
|
|
|
identity:
|
|
cert: /home/{{$ssh_username}}/router-pki/{{$identity}}-client.cert
|
|
server_cert: /home/{{$ssh_username}}/router-pki/{{$identity}}-server.cert
|
|
key: /home/{{$ssh_username}}/router-pki/{{$identity}}.key
|
|
ca: /home/{{$ssh_username}}/router-pki/{{$identity}}-server.chain.pem
|
|
|
|
tls:
|
|
handshakeTimeout: 30s
|
|
|
|
ctrl:
|
|
endpoints: {{ range $host := .Model.MustSelectHosts "component.ctrl" 1 }}
|
|
- tls:{{ $host.PublicIp }}:6262{{end}}
|
|
startupTimeout: 5m
|
|
|
|
healthChecks:
|
|
ctrlPingCheck:
|
|
# How often to ping the controller over the control channel. Defaults to 30 seconds
|
|
interval: 30s
|
|
# When to timeout the ping. Defaults to 15 seconds
|
|
timeout: 15s
|
|
# How long to wait before pinging the controller. Defaults to 15 seconds
|
|
initialDelay: 15s
|
|
|
|
metrics:
|
|
reportInterval: 15s
|
|
messageQueueSize: 10
|
|
|
|
link:
|
|
{{if .Component.HasTag "public"}}
|
|
listeners:
|
|
- binding: transport
|
|
bind: tls:0.0.0.0:60{{printf "%02d" .Component.ScaleIndex }}
|
|
advertise: tls:{{$router_ip}}:60{{printf "%02d" .Component.ScaleIndex }}
|
|
{{end}}
|
|
dialers:
|
|
- binding: transport
|
|
options:
|
|
connectTimeout: 30s
|
|
|
|
listeners:
|
|
{{if .Component.HasTag "tunneler"}}
|
|
- binding: tunnel
|
|
options:
|
|
mode: host
|
|
{{end}}
|
|
- binding: edge
|
|
address: tls:0.0.0.0:62{{printf "%02d" .Component.ScaleIndex }}
|
|
options:
|
|
# (required) The public hostname and port combination that Ziti SDKs should connect on. Previously this was in the chanIngress section.
|
|
advertise: {{ .Host.PublicIp }}:62{{printf "%02d" .Component.ScaleIndex }}
|
|
|
|
# By having an 'edge' section defined, the ziti router will attempt to parse the edge configuration. Removing this
|
|
# section, commenting out, or altering the name of the section will cause the router to no longer operate as an Edge
|
|
# Router.
|
|
edge:
|
|
# (required) Information used to generate the initial registration CSR. For documentation on these fields please
|
|
# refer to the openssl documentation. These values MUST be supplied and have no defaults.
|
|
csr:
|
|
country: US
|
|
province: NC
|
|
locality: Charlotte
|
|
organization: NetFoundry
|
|
organizationalUnit: Ziti
|
|
|
|
# (required) SANs that this Gateways certs should contain. At least one IP or DNS SAN should be defined that matches
|
|
# the edge listeners "advertise" value from the "listeners" section.
|
|
sans:
|
|
ip:
|
|
- {{ .Host.PublicIp }}
|
|
|