TLS

2026-10-26 18:06:22 -04:00
parent caf8839edd
commit d01f4a8fb7
5 changed files with 44 additions and 5 deletions
@@ -19,6 +19,9 @@ DEX_CLIENT_ID=www-membership
 DEX_CLIENT_SECRET=
 DEX_CONNECTOR_ID=www-ldap
 LDAP_URL=ldaps://ldap.eom.dev
+# Set to 1 ONLY with ldap:// on a trusted network to skip StartTLS.
+# Bind and registration passwords will be sent unencrypted. LDAPS stays verified.
+LDAP_ALLOW_INSECURE=0
 LDAP_BIND_DN=
 LDAP_BIND_PASSWORD=
 LDAP_CA_CERT_FILE=