zulip/puppet/zulip_ops/files/teleport_node.yaml

26 lines
606 B
YAML

# See https://goteleport.com/docs/config-reference/
teleport:
ca_pin: "sha256:df15ba56d56227e288ce183d7eee77a6bef552aaaa5dc25f0f5ea56494ce14c6"
auth_servers:
# Use the proxy address, to support running the app_service, which requires
# a reverse tunnel.
- teleport.zulipchat.net:443
ssh_service:
enabled: "yes"
commands:
- name: hostname
command: [/bin/hostname]
period: 1h0m0s
proxy_service:
enabled: no
auth_service:
enabled: no
# We intentionally end with `app_service` so we can append services under
# `apps:` via puppet.
app_service:
enabled: yes
apps: