mirror of
https://github.com/fosrl/docs-v2.git
synced 2026-02-23 05:16:46 +00:00
update config for remote nodes
This commit is contained in:
@@ -79,7 +79,8 @@
|
|||||||
"manage/remote-node/ha",
|
"manage/remote-node/ha",
|
||||||
"manage/remote-node/nodes",
|
"manage/remote-node/nodes",
|
||||||
"manage/remote-node/quick-install-remote",
|
"manage/remote-node/quick-install-remote",
|
||||||
"manage/remote-node/convert-remote"
|
"manage/remote-node/convert-remote",
|
||||||
|
"manage/remote-node/config-file"
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"manage/domains",
|
"manage/domains",
|
||||||
|
|||||||
86
manage/remote-node/config-file.mdx
Normal file
86
manage/remote-node/config-file.mdx
Normal file
@@ -0,0 +1,86 @@
|
|||||||
|
---
|
||||||
|
title: "Configuration File"
|
||||||
|
description: "Configure your remote node using the config.yml file"
|
||||||
|
---
|
||||||
|
|
||||||
|
The `config.yml` file includes basic config variable for your remote node. This file is mounted at `config/config.yml` in your Docker container.
|
||||||
|
|
||||||
|
Minimal configuration file:
|
||||||
|
|
||||||
|
```yaml title="config.yml"
|
||||||
|
gerbil:
|
||||||
|
start_port: 51820
|
||||||
|
base_endpoint: "154.123.45.67" # REPLACE WITH YOUR IP OR DOMAIN
|
||||||
|
|
||||||
|
managed:
|
||||||
|
id: "he4g78wevj25msf"
|
||||||
|
secret: "n7sd18twfko0q0vrb7wyclqzbvvnx1fqt7ezv8xewhdb9s7d"
|
||||||
|
```
|
||||||
|
|
||||||
|
### Gerbil Tunnel Controller
|
||||||
|
|
||||||
|
<ResponseField name="gerbil" type="object" required>
|
||||||
|
Gerbil tunnel controller settings for WireGuard tunneling.
|
||||||
|
|
||||||
|
<Expandable title="Gerbil">
|
||||||
|
<ResponseField name="base_endpoint" type="string" required>
|
||||||
|
Domain name included in WireGuard configuration for tunnel connections.
|
||||||
|
|
||||||
|
**Example**: `pangolin.example.com`
|
||||||
|
</ResponseField>
|
||||||
|
|
||||||
|
<ResponseField name="start_port" type="integer">
|
||||||
|
Starting port for WireGuard tunnels.
|
||||||
|
|
||||||
|
**Example**: `51820`
|
||||||
|
</ResponseField>
|
||||||
|
</Expandable>
|
||||||
|
</ResponseField>
|
||||||
|
|
||||||
|
### Managed Configuration
|
||||||
|
|
||||||
|
<ResponseField name="managed" type="object">
|
||||||
|
Managed deployment configuration for connecting self-hosted instances to managed services.
|
||||||
|
|
||||||
|
<Expandable title="Managed">
|
||||||
|
{/* <ResponseField name="name" type="string">
|
||||||
|
Display name for the managed deployment.
|
||||||
|
|
||||||
|
**Example**: `My Self-Hosted Instance`
|
||||||
|
</ResponseField> */}
|
||||||
|
|
||||||
|
<ResponseField name="id" type="string">
|
||||||
|
Unique identifier for the managed deployment. Generated from the installer or the [Pangolin dashboard](https://pangolin.fossorial.io).
|
||||||
|
|
||||||
|
**Example**: `he4g78wevj25msf`
|
||||||
|
</ResponseField>
|
||||||
|
|
||||||
|
<ResponseField name="secret" type="string">
|
||||||
|
Secret key for authenticating with the managed service. Generated from the installer or the [Pangolin dashboard](https://pangolin.fossorial.io).
|
||||||
|
|
||||||
|
**Example**: `n7sd18twfko0q0vrb7wyclqzbvvnx1fqt7ezv8xewhdb9s7d`
|
||||||
|
|
||||||
|
<Warning>
|
||||||
|
Keep this secret secure and do not share it publicly.
|
||||||
|
</Warning>
|
||||||
|
</ResponseField>
|
||||||
|
|
||||||
|
<ResponseField name="endpoint" type="string">
|
||||||
|
The managed service endpoint to connect to. This can only change with enterprise deployments.
|
||||||
|
|
||||||
|
**Example**: `https://pangolin.fossorial.io`
|
||||||
|
|
||||||
|
**Default**: `https://pangolin.fossorial.io`
|
||||||
|
</ResponseField>
|
||||||
|
|
||||||
|
<ResponseField name="redirect_endpoint" type="string">
|
||||||
|
Custom redirect endpoint for authentication flows. This can only change for enterprise deployments.
|
||||||
|
|
||||||
|
**Example**: `https://my-pangolin.example.com`
|
||||||
|
|
||||||
|
<Note>
|
||||||
|
If not specified, the default dashboard URL will be used.
|
||||||
|
</Note>
|
||||||
|
</ResponseField>
|
||||||
|
</Expandable>
|
||||||
|
</ResponseField>
|
||||||
@@ -31,20 +31,8 @@ flags:
|
|||||||
disable_signup_without_invite: true
|
disable_signup_without_invite: true
|
||||||
disable_user_create_org: true
|
disable_user_create_org: true
|
||||||
```
|
```
|
||||||
|
|
||||||
In managed mode:
|
|
||||||
|
|
||||||
```yaml title="config.yml"
|
|
||||||
gerbil:
|
|
||||||
start_port: 51820
|
|
||||||
base_endpoint: "154.123.45.67" # REPLACE WITH YOUR IP OR DOMAIN
|
|
||||||
|
|
||||||
managed:
|
|
||||||
id: "he4g78wevj25msf"
|
|
||||||
secret: "n7sd18twfko0q0vrb7wyclqzbvvnx1fqt7ezv8xewhdb9s7d"
|
|
||||||
```
|
|
||||||
|
|
||||||
<Warning>
|
<Warning>
|
||||||
|
|
||||||
Generate a strong secret for `server.secret`. Use at least 32 characters with a mix of letters, numbers, and special characters.
|
Generate a strong secret for `server.secret`. Use at least 32 characters with a mix of letters, numbers, and special characters.
|
||||||
</Warning>
|
</Warning>
|
||||||
|
|
||||||
@@ -618,72 +606,12 @@ This section contains the complete reference for all configuration options in `c
|
|||||||
</Expandable>
|
</Expandable>
|
||||||
</ResponseField>
|
</ResponseField>
|
||||||
|
|
||||||
### Managed Configuration
|
|
||||||
|
|
||||||
<ResponseField name="managed" type="object">
|
|
||||||
Managed deployment configuration for connecting self-hosted instances to managed services.
|
|
||||||
|
|
||||||
<Expandable title="Managed">
|
|
||||||
{/* <ResponseField name="name" type="string">
|
|
||||||
Display name for the managed deployment.
|
|
||||||
|
|
||||||
**Example**: `My Self-Hosted Instance`
|
|
||||||
</ResponseField> */}
|
|
||||||
|
|
||||||
<ResponseField name="id" type="string">
|
|
||||||
Unique identifier for the managed deployment. Generated from the installer or the [Pangolin dashboard](https://pangolin.fossorial.io).
|
|
||||||
|
|
||||||
**Example**: `he4g78wevj25msf`
|
|
||||||
</ResponseField>
|
|
||||||
|
|
||||||
<ResponseField name="secret" type="string">
|
|
||||||
Secret key for authenticating with the managed service. Generated from the installer or the [Pangolin dashboard](https://pangolin.fossorial.io).
|
|
||||||
|
|
||||||
**Example**: `n7sd18twfko0q0vrb7wyclqzbvvnx1fqt7ezv8xewhdb9s7d`
|
|
||||||
|
|
||||||
<Warning>
|
|
||||||
Keep this secret secure and do not share it publicly.
|
|
||||||
</Warning>
|
|
||||||
</ResponseField>
|
|
||||||
|
|
||||||
<ResponseField name="endpoint" type="string">
|
|
||||||
The managed service endpoint to connect to. This can only change with enterprise deployments.
|
|
||||||
|
|
||||||
**Example**: `https://pangolin.fossorial.io`
|
|
||||||
|
|
||||||
**Default**: `https://pangolin.fossorial.io`
|
|
||||||
</ResponseField>
|
|
||||||
|
|
||||||
<ResponseField name="redirect_endpoint" type="string">
|
|
||||||
Custom redirect endpoint for authentication flows. This can only change for enterprise deployments.
|
|
||||||
|
|
||||||
**Example**: `https://my-pangolin.example.com`
|
|
||||||
|
|
||||||
<Note>
|
|
||||||
If not specified, the default dashboard URL will be used.
|
|
||||||
</Note>
|
|
||||||
</ResponseField>
|
|
||||||
</Expandable>
|
|
||||||
</ResponseField>
|
|
||||||
|
|
||||||
## Environment Variables
|
## Environment Variables
|
||||||
|
|
||||||
Some configuration values can be set using environment variables for enhanced security:
|
Some configuration values can be set using environment variables for enhanced security:
|
||||||
|
|
||||||
<CardGroup cols={2}>
|
| Name | Variable | Config |
|
||||||
<Card title="Server Secret" icon="key">
|
|------|----------|--------|
|
||||||
**Variable**: `SERVER_SECRET`
|
| Server Secret | `SERVER_SECRET` | `server.secret` |
|
||||||
|
| Email Password | `EMAIL_SMTP_PASS` | `email.smtp_pass` |
|
||||||
**Config**: `server.secret`
|
| PostgreSQL Connection String | `POSTGRES_CONNECTION_STRING` | `postgres.connection_string` |
|
||||||
|
|
||||||
Use this to avoid hardcoding secrets in your config file.
|
|
||||||
</Card>
|
|
||||||
|
|
||||||
<Card title="Email Password" icon="mail">
|
|
||||||
**Variable**: `EMAIL_SMTP_PASS`
|
|
||||||
|
|
||||||
**Config**: `email.smtp_pass`
|
|
||||||
|
|
||||||
Keep SMTP passwords secure using environment variables.
|
|
||||||
</Card>
|
|
||||||
</CardGroup>
|
|
||||||
|
|||||||
Reference in New Issue
Block a user