I think this was somehow accidentally included from Vault back in the day and never removed. As far as I can tell these options have absolutely no effect on anything in Boundary and will probably only cause confusion.
60 lines
1.0 KiB
HCL
60 lines
1.0 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
disable_mlock = true
|
|
|
|
listener "tcp" {
|
|
address = "0.0.0.0:${port}"
|
|
purpose = "proxy"
|
|
tls_disable = true
|
|
}
|
|
|
|
listener "tcp" {
|
|
address = "0.0.0.0:${port_ops}"
|
|
purpose = "ops"
|
|
tls_disable = true
|
|
}
|
|
|
|
worker {
|
|
public_addr = "${worker_name}:${port}"
|
|
initial_upstreams = ["${initial_upstream}"]
|
|
controller_generated_activation_token = "${token}"
|
|
|
|
tags {
|
|
type = ${type_tags},
|
|
}
|
|
|
|
auth_storage_path = "/tmp/boundary/worker"
|
|
}
|
|
|
|
events {
|
|
audit_enabled = true
|
|
sysevents_enabled = true
|
|
observations_enable = true
|
|
|
|
sink "stderr" {
|
|
name = "all-events"
|
|
description = "All events sent to stderr"
|
|
event_types = ["*"]
|
|
format = "cloudevents-json"
|
|
}
|
|
|
|
sink {
|
|
name = "Log File"
|
|
event_types = ["*"]
|
|
format = "cloudevents-json"
|
|
|
|
file {
|
|
path = "/boundary/logs"
|
|
file_name = "events.log"
|
|
}
|
|
|
|
audit_config {
|
|
audit_filter_overrides {
|
|
secret = "redact"
|
|
sensitive = "redact"
|
|
}
|
|
}
|
|
}
|
|
}
|