Port of Pomerium

Objetivo

80

Por defecto

8801

Debug enables colored, human-readable logs to be streamed to standard out (opens new window). In production, it is recommended to be set to false.

Objetivo

POMERIUM_DEBUG

Por defecto

false

Valor

false

Address specifies the host and port to serve HTTP requests from.

Objetivo

ADDRESS

Por defecto

:80

Valor

:80

Turning on insecure server mode will result in pomerium starting, and operating without any protocol encryption in transit. This setting can be useful in a situation where you have Pomerium behind a TLS terminating ingress or proxy. However, even in that case, it is highly recommended to use TLS to protect the confidentiality and integrity of service communication even behind the ingress using self-signed certificates or an internal CA. Please see our helm-chart for an example of just that.

Objetivo

INSECURE_SERVER

Por defecto

true

Valor

true

Forward authentication creates an endpoint that can be used with third-party proxies that do not have rich access control capabilities. Forward authentication allows you to delegate authentication and authorization for each request to Pomerium.

Objetivo

FORWARD_AUTH_URL

Por defecto

http://fwdauth.domain.duckdns.org

Valor

http://fwdauth.[domain].duckdns.org

Authenticate Service URL is the externally accessible URL for the authenticate service.

Objetivo

AUTHENTICATE_SERVICE_URL

Por defecto

https://authenticate.domain.duckdns.org

Valor

https://authenticate.[domain].duckdns.org

Secret used to encrypt and sign session cookies. You can generate a random key with head -c32 /dev/urandom | base64.

Objetivo

COOKIE_SECRET

Por defecto

OWTV2fONR7expoexvhzYBnkdVtrwTh0XhJsQqFMzJuk=

Valor

OWTV2fONR7expoexvhzYBnkdVtrwTh0XhJsQqFMzJuk=

Shared Secret is the base64 encoded 256-bit key used to mutually authenticate requests between services. It's critical that secret keys are random, and stored safely. Use a key management system or /dev/urandom to generate a key. Example head -c32 /dev/urandom | base64

Objetivo

SHARED_SECRET

Por defecto

wB/J+7Fgc+XdCufhjnn/LVZhxjGmgsTaBr7VcjMBHTA=

Valor

wB/J+7Fgc+XdCufhjnn/LVZhxjGmgsTaBr7VcjMBHTA=

Provider is the short-hand name of a built-in OpenID Connect (oidc) identity provider to be used for authentication. To use a generic provider,set to oidc.

Objetivo

IDP_PROVIDER

Por defecto

google

Valor

google

Client ID is the OAuth 2.0 Client Identifier retrieved from your identity provider. See your identity provider's documentation, and our identity provider docs for details.

Objetivo

IDP_CLIENT_ID

Client Secret is the OAuth 2.0 Secret Identifier retrieved from your identity provider. See your identity provider's documentation, and our identity provider docs for details.

Objetivo

IDP_CLIENT_SECRET

Pomerium config.yaml file. Mostly defines routes and authorizations but also anything else not available through this template

Objetivo

/pomerium/config.yaml

Por defecto

/mnt/user/appdata/Pomerium/config.yaml