mc/metacrypt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add grpc_addr and [web] section to example configs

Browse Source 
Both deploy/examples configs now document the new server.grpc_addr and
[web] settings introduced with the metacrypt-web separation. The Docker
example uses the compose service name (metacrypt:9443) as vault_grpc.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Kyle Isom
2026-03-15 09:11:13 -07:00
parent cc1ac2e255
commit 33beb33a13
2 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
deploy/examples/metacrypt-docker.toml
View File

@@ -3,9 +3,16 @@
[server] [server]
listen_addr = ":8443" listen_addr = ":8443"
grpc_addr = ":9443"
tls_cert = "/srv/metacrypt/certs/server.crt" tls_cert = "/srv/metacrypt/certs/server.crt"
tls_key = "/srv/metacrypt/certs/server.key" tls_key = "/srv/metacrypt/certs/server.key"
[web]
# metacrypt-web connects to the vault container by its compose service name.
listen_addr = ":8080"
vault_grpc = "metacrypt:9443"
vault_ca_cert = "/srv/metacrypt/certs/server.crt"
[database] [database]
path = "/srv/metacrypt/metacrypt.db" path = "/srv/metacrypt/metacrypt.db"

23
deploy/examples/metacrypt.toml
View File

@@ -5,10 +5,33 @@
# Address to listen on. Use "0.0.0.0:8443" to listen on all interfaces. # Address to listen on. Use "0.0.0.0:8443" to listen on all interfaces.
listen_addr = ":8443" listen_addr = ":8443"
# gRPC address for metacrypt-web to connect to. Required if running the
# standalone web UI server.
grpc_addr = ":9443"
# TLS certificate and key. Metacrypt always terminates TLS. # TLS certificate and key. Metacrypt always terminates TLS.
tls_cert = "/srv/metacrypt/certs/server.crt" tls_cert = "/srv/metacrypt/certs/server.crt"
tls_key = "/srv/metacrypt/certs/server.key" tls_key = "/srv/metacrypt/certs/server.key"
# Public base URL used in ACME directory responses.
# external_url = "https://metacrypt.example.com"
[web]
# Address for the standalone web UI server (metacrypt-web) to listen on.
listen_addr = ":8080"
# gRPC address of the vault (must match server.grpc_addr above).
vault_grpc = "127.0.0.1:9443"
# CA certificate used to verify the vault's gRPC TLS certificate.
# Required if the vault uses a self-signed or private CA cert.
vault_ca_cert = "/srv/metacrypt/certs/server.crt"
# TLS for the web UI itself. Leave empty to run plain HTTP behind a
# reverse proxy, or set both to terminate TLS directly.
# tls_cert = "/srv/metacrypt/certs/web.crt"
# tls_key = "/srv/metacrypt/certs/web.key"
[database] [database]
# SQLite database path. Created automatically on first run. # SQLite database path. Created automatically on first run.
# The directory must be writable by the metacrypt user. # The directory must be writable by the metacrypt user.