mirror of
https://github.com/rustfs/rustfs.git
synced 2026-01-17 01:30:33 +00:00
Restore globals and add unified TLS/mTLS loading from RUSTFS_TLS_PATH (#1309)
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: houseme <4829346+houseme@users.noreply.github.com>
This commit is contained in:
32
docs/examples/mnmd/docker-compose.mtls.yml
Normal file
32
docs/examples/mnmd/docker-compose.mtls.yml
Normal file
@@ -0,0 +1,32 @@
|
||||
services:
|
||||
mnmd:
|
||||
image: ghcr.io/your-org/mnmd:latest
|
||||
container_name: mnmd
|
||||
ports:
|
||||
- "8443:8443"
|
||||
volumes:
|
||||
- ./tls:/tls:ro
|
||||
environment:
|
||||
# Example mnmd settings (adapt to your image)
|
||||
- MNMD_LISTEN_ADDR=0.0.0.0:8443
|
||||
- MNMD_TLS_CERT=/tls/server_cert.pem
|
||||
- MNMD_TLS_KEY=/tls/server_key.pem
|
||||
- MNMD_TLS_CLIENT_CA=/tls/ca.crt
|
||||
|
||||
rustfs:
|
||||
image: ghcr.io/rustfs/rustfs:latest
|
||||
container_name: rustfs
|
||||
depends_on:
|
||||
- mnmd
|
||||
environment:
|
||||
- RUSTFS_TLS_PATH=/tls
|
||||
- RUSTFS_TRUST_SYSTEM_CA=false
|
||||
- RUSTFS_TRUST_LEAF_CERT_AS_CA=false
|
||||
# Enable outbound mTLS (client identity) for MNMD
|
||||
- RUSTFS_MTLS_CLIENT_CERT=/tls/client_cert.pem
|
||||
- RUSTFS_MTLS_CLIENT_KEY=/tls/client_key.pem
|
||||
# MNMD address configured to https
|
||||
- RUSTFS_MNMD_ADDR=https://mnmd:8443
|
||||
- RUSTFS_MNMD_DOMAIN=mnmd
|
||||
volumes:
|
||||
- ./tls:/tls:ro
|
||||
Reference in New Issue
Block a user