mirror of
https://github.com/wweir/sower.git
synced 2026-10-19 16:14:33 +00:00
wweir
2988505770
config/sowerd.toml and ExampleSowerdConfigTOML are the same artifact kept in two places: the constant is what `sowerd -i` writes to /etc/sower/sowerd.toml (internal/install/service.go), the file is what `-c config/sowerd.toml` loads during development. They had drifted in both directions -- the constant carried the [site_routes.routes] path-prefix example and the older cert.domains wording, while the file carried the newer wording and left `domains` uncommented -- so a deployment got guidance contradicting the shipped binary depending on which copy it read. Take the constant as the source of truth, comment out the placeholder cert.domains entry (a placeholder domain is not one the operator owns) and pin the two copies byte for byte with a test that prints the differing lines.
36 lines
1.5 KiB
TOML
36 lines
1.5 KiB
TOML
# Sowerd configuration example (TOML format)
|
|
# This is the daemon configuration for the sower server
|
|
|
|
# Logging configuration
|
|
log_level = "info" # Log level: debug, info, warn, error
|
|
|
|
# Server configuration
|
|
serve_ip = "0.0.0.0" # IP address to listen on for ports 80 and 443
|
|
password = "change_me" # Password for client authentication
|
|
fake_site = "/var/www" # Fallback fake site directory or address (default: /var/www)
|
|
|
|
# Site routing: map domains to upstream URLs for fallback traffic.
|
|
# When a TLS connection does not match sower transport,
|
|
# the SNI is looked up here. Unmatched connections fall through to fake_site.
|
|
# Custom certificate mode requires the certificate SANs to cover all routed domains.
|
|
#
|
|
# [[site_routes]]
|
|
# domains = ["a.example.com", "b.example.com"]
|
|
# upstream = "http://127.0.0.1:8080"
|
|
#
|
|
# [site_routes.routes]
|
|
# "/ws" = "http://127.0.0.1:8082"
|
|
#
|
|
# [[site_routes]]
|
|
# domains = ["c.example.com"]
|
|
# upstream = "https://backend.example.com"
|
|
|
|
# SSL/TLS certificate configuration
|
|
[cert]
|
|
email = "your-email@example.com" # Email for Let's Encrypt certificate
|
|
# domains = ["proxy.example.com"] # Issuance whitelist beyond site_routes (autocert mode).
|
|
# The FIRST entry answers TLS handshakes for unknown/empty SNI: keep it a concrete
|
|
# domain, not a wildcard. See docs/security.md.
|
|
cert = "" # Path to custom certificate file (optional)
|
|
key = "" # Path to custom private key file (optional)
|