106 lines
2.1 KiB
HCL
106 lines
2.1 KiB
HCL
# Copyright IBM Corp. 2020, 2026
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
disable_mlock = true
|
|
|
|
controller {
|
|
name = "docker-controller"
|
|
description = "A controller for a docker demo!"
|
|
|
|
database {
|
|
url = "env://BOUNDARY_POSTGRES_URL"
|
|
}
|
|
}
|
|
|
|
worker {
|
|
name = "boundary-colocated-worker"
|
|
description = "A worker that runs alongside the controller in the same process"
|
|
address = "boundary:9202"
|
|
}
|
|
|
|
listener "tcp" {
|
|
address = "boundary:9200"
|
|
purpose = "api"
|
|
tls_disable = true
|
|
}
|
|
|
|
listener "tcp" {
|
|
address = "boundary:9201"
|
|
purpose = "cluster"
|
|
tls_disable = true
|
|
}
|
|
|
|
listener "tcp" {
|
|
address = "boundary:9202"
|
|
purpose = "proxy"
|
|
tls_disable = true
|
|
}
|
|
|
|
listener "tcp" {
|
|
address = "boundary:9203"
|
|
purpose = "ops"
|
|
tls_disable = true
|
|
}
|
|
|
|
kms "aead" {
|
|
purpose = "root"
|
|
aead_type = "aes-gcm"
|
|
key = "sP1fnF5Xz85RrXyELHFeZg9Ad2qt4Z4bgNHVGtD6ung="
|
|
key_id = "global_root"
|
|
}
|
|
|
|
kms "aead" {
|
|
purpose = "worker-auth"
|
|
aead_type = "aes-gcm"
|
|
key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
|
|
key_id = "global_worker-auth"
|
|
}
|
|
|
|
kms "aead" {
|
|
purpose = "recovery"
|
|
aead_type = "aes-gcm"
|
|
key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
|
|
key_id = "global_recovery"
|
|
}
|
|
|
|
events {
|
|
audit_enabled = true
|
|
observations_enabled = true
|
|
sysevents_enabled = true
|
|
|
|
sink "stderr" {
|
|
name = "all-events"
|
|
description = "All events sent to stderr"
|
|
event_types = ["*"]
|
|
format = "cloudevents-json"
|
|
|
|
deny_filters = [
|
|
"\"/data/request_info/method\" contains \"Status\"",
|
|
"\"/data/request_info/path\" contains \"/health\"",
|
|
]
|
|
}
|
|
|
|
sink {
|
|
name = "audit-sink"
|
|
description = "Audit sent to a file"
|
|
event_types = ["audit"]
|
|
format = "cloudevents-json"
|
|
|
|
deny_filters = [
|
|
"\"/data/request_info/method\" contains \"Status\"",
|
|
]
|
|
|
|
file {
|
|
path = "/boundary/logs"
|
|
file_name = "audit.log"
|
|
}
|
|
|
|
audit_config {
|
|
audit_filter_overrides {
|
|
secret = "encrypt"
|
|
sensitive = "hmac-sha256"
|
|
}
|
|
}
|
|
}
|
|
}
|