Kyle Isom
691301dade
- ARCHITECTURE.md: document nginx + direct gRPC topology, add grpc_plain_addr config, update cert filenames to Let's Encrypt convention, add passwd to CLI table - RUNBOOK.md: replace systemctl/journalctl with docker commands, fix cert path references, improve sync troubleshooting steps - Example config: update cert paths, document grpc_plain_addr option - grpcserver: add optional plaintext gRPC listener for reverse proxy - config: add GRPCPlainAddr field Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
28 lines
649 B
TOML
28 lines
649 B
TOML
[server]
|
|
listen_addr = ":8443"
|
|
grpc_addr = ":9443"
|
|
# grpc_plain_addr = "127.0.0.1:9444" # Optional: plaintext gRPC for reverse proxy
|
|
tls_cert = "/srv/eng-pad-server/certs/fullchain.pem"
|
|
tls_key = "/srv/eng-pad-server/certs/privkey.pem"
|
|
|
|
[web]
|
|
listen_addr = ":8080"
|
|
base_url = "https://pad.metacircular.net"
|
|
|
|
[database]
|
|
path = "/srv/eng-pad-server/eng-pad-server.db"
|
|
|
|
[auth]
|
|
token_ttl = "24h"
|
|
argon2_memory = 65536
|
|
argon2_time = 3
|
|
argon2_threads = 4
|
|
|
|
[webauthn]
|
|
rp_display_name = "Engineering Pad"
|
|
rp_id = "pad.metacircular.net"
|
|
rp_origins = ["https://pad.metacircular.net"]
|
|
|
|
[log]
|
|
level = "info"
|