TLS

2026-10-26 18:06:22 -04:00
parent caf8839edd
commit d01f4a8fb7
5 changed files with 44 additions and 5 deletions
@@ -87,6 +87,8 @@ DEX_CLIENT_SECRET = os.environ.get("DEX_CLIENT_SECRET", "")
 DEX_CONNECTOR_ID = os.environ.get("DEX_CONNECTOR_ID", "ldap")

 LDAP_URL = os.environ.get("LDAP_URL", "")
+# Explicit opt-in for trusted internal networks; never a TLS-error fallback.
+LDAP_ALLOW_INSECURE = os.environ.get("LDAP_ALLOW_INSECURE", "0") == "1"
 LDAP_BIND_DN = os.environ.get("LDAP_BIND_DN", "")
 LDAP_BIND_PASSWORD = os.environ.get("LDAP_BIND_PASSWORD", "")
 LDAP_CA_CERT_FILE = os.environ.get("LDAP_CA_CERT_FILE") or None