forked from xmidt-org/themis
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy paththemis.yaml
104 lines (96 loc) · 1.76 KB
/
themis.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
servers:
key:
address: :8080
disableHTTPKeepAlives: true
header:
X-Midt-Server:
- issuer
X-Midt-Version:
- development
issuer:
address: :8081
disableHTTPKeepAlives: true
header:
X-Midt-Server:
- issuer
X-Midt-Version:
- development
claims:
address: :8082
disableHTTPKeepAlives: true
header:
X-Midt-Server:
- issuer
X-Midt-Version:
- development
metrics:
address: :8083
disableHTTPKeepAlives: true
health:
address: :8084
disableHTTPKeepAlives: true
header:
X-Midt-Server:
- issuer
X-Midt-Version:
- development
health:
disableLogging: false
custom:
server: development
prometheus:
defaultNamespace: xmidt
defaultSubsystem: issuer
constLabels:
development: "true"
token:
alg: RS256
nonce: true
notBeforeDelta: -15s
duration: 24h
claims:
mac:
header: X-Midt-Mac-Address
parameter: mac
required: true
serial:
header: X-Midt-Serial-Number
parameter: serial
required: true
uuid:
header: X-Midt-Uuid
parameter: uuid
required: true
iss:
value: "development"
partner-id:
value: "comcast"
trust:
value: 1000
sub:
value: "client-supplied"
aud:
value: "XMiDT"
capabilities:
value:
- x1:issuer:test:.*:all
metadata:
mac:
header: X-Midt-Mac-Address
parameter: mac
required: true
serial:
header: X-Midt-Serial-Number
parameter: serial
required: true
uuid:
header: X-Midt-Uuid
parameter: uuid
required: true
key:
kid: development
type: rsa
bits: 1024
log:
file: stdout
level: DEBUG