TLS

2026-10-26 20:33:41 -04:00
parent e048f579a2
commit 827ec93663
6 changed files with 31 additions and 2 deletions
@@ -6,6 +6,10 @@ www_repo_version: refs/heads/main
 www_membership_secret_name: www-membership-credentials
 www_membership_shkeeper_enabled: true
 www_membership_environment_overrides:
+  # Optional plaintext LDAP for a trusted cluster only; sends passwords unencrypted.
+  # Enable BOTH lines together. Omit them to retain the role's verified TLS default.
+  # LDAP_URL: ldap://openldap.openldap.svc.cluster.local:389
+  # LDAP_ALLOW_INSECURE: "1"
  LDAP_BIND_DN: cn=www-membership,ou=system,dc=eom,dc=dev
  LDAP_PASSWORD_SCHEME: "{ARGON2}"
  EMAIL_HOST: smtp.eom.dev