zulip/puppet/zulip_ops/files/teleport_node.yaml

40 lines
956 B
YAML

# See https://goteleport.com/docs/config-reference/
teleport:
ca_pin: "sha256:df15ba56d56227e288ce183d7eee77a6bef552aaaa5dc25f0f5ea56494ce14c6"
auth_servers:
# Use the proxy address, to support running the app_service, which requires
# a reverse tunnel.
- teleport.zulipchat.net:443
ssh_service:
enabled: "yes"
commands:
- name: hostname
command: ["/bin/hostname"]
period: 1h0m0s
- name: uname
command: ["/usr/bin/uptrack-uname", "-r"]
period: 1h0m0s
- name: distro
command: ["/usr/bin/lsb_release", "-ds"]
period: 1h0m0s
- name: classes
command:
- /usr/bin/crudini
- --get
- /etc/zulip/zulip.conf
- machine
- puppet_classes
period: 1h0m0s
proxy_service:
enabled: no
auth_service:
enabled: no
# We intentionally end with `app_service` so we can append services under
# `apps:` via puppet.
app_service:
enabled: yes
apps: