22 lines
967 B
Plaintext
22 lines
967 B
Plaintext
# RustProxy administration endpoint reachable from OPNsense.
|
|
RUSTPROXY_URL='https://rustproxy.example.lan:9090'
|
|
|
|
# Certificate API credential created in RustProxy Settings -> Certificate API.
|
|
# The credential must allow this CERTIFICATE_ID and have deploy permission enabled.
|
|
RUSTPROXY_KEY_ID='opnsense-acme'
|
|
RUSTPROXY_TOKEN='REPLACE_WITH_CERTIFICATE_API_TOKEN'
|
|
|
|
# Stable RustProxy certificate id to create/update.
|
|
CERTIFICATE_ID='shared-cert'
|
|
|
|
# os-acme-client certificate material. Replace CERT_UUID with the actual UUID.
|
|
CERT_FILE='/var/etc/acme-client/certs/CERT_UUID/fullchain.pem'
|
|
KEY_FILE='/var/etc/acme-client/keys/CERT_UUID/private.key'
|
|
|
|
# Optional: trust a private CA used by the RustProxy administration listener.
|
|
# RUSTPROXY_CACERT='/usr/local/etc/ssl/rustproxy-ca.pem'
|
|
|
|
# Optional: connect to a fixed address while keeping TLS verification for the URL hostname.
|
|
# Format: hostname:port:address
|
|
# RUSTPROXY_RESOLVE='rustproxy.example.lan:9090:192.0.2.20'
|