Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/puppet/kandra/files/teleport_server.yaml

29 lines
686 B
YAML
Raw Normal View History

puppet: Add a teleport server. See https://goteleport.com/docs/architecture/overview/ for the general architecture of a Teleport cluster. This commit adds a Teleport auth[1] and proxy[2] server. The auth server serves as a CA for granting time-bounded access to users and authenticating nodes on the cluster; the proxy provides access and a management UI. [1] https://goteleport.com/docs/architecture/authentication/ [2] https://goteleport.com/docs/architecture/proxy/
2021-06-02 03:41:02 +02:00
# See https://goteleport.com/docs/config-reference/ and
# https://goteleport.com/docs/admin-guide/#configuration
teleport:
ca_pin: "sha256:df15ba56d56227e288ce183d7eee77a6bef552aaaa5dc25f0f5ea56494ce14c6"
auth_service:
enabled: "yes"
listen_addr: 0.0.0.0:3025
cluster_name: teleport.zulipchat.net
authentication:
type: local
second_factor: on
u2f:
app_id: https://teleport.zulipchat.net
teleport: Add explicit WebAuthn config, not just U2F. WebAuthn is the default, replacing U2F, in Teleport 10 and above[1]. While Teleport can derive a WebAuthn configuration from a U2F configuration[2], it's useful to be explicit. [1]: https://goteleport.com/docs/access-controls/guides/webauthn/ [2]: https://goteleport.com/docs/access-controls/guides/webauthn/#u2f
2022-07-16 01:38:00 +02:00
webauthn:
rp_id: teleport.zulipchat.net
puppet: Add a teleport server. See https://goteleport.com/docs/architecture/overview/ for the general architecture of a Teleport cluster. This commit adds a Teleport auth[1] and proxy[2] server. The auth server serves as a CA for granting time-bounded access to users and authenticating nodes on the cluster; the proxy provides access and a management UI. [1] https://goteleport.com/docs/architecture/authentication/ [2] https://goteleport.com/docs/architecture/proxy/
2021-06-02 03:41:02 +02:00
proxy_service:
enabled: "yes"
listen_addr: 0.0.0.0:3023
web_listen_addr: 0.0.0.0:443
public_addr: teleport.zulipchat.net:443
acme:
enabled: "yes"
email: zulip-ops@zulip.com
ssh_service:
enabled: no