mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-02 03:46:29 +02:00
43 lines
1.2 KiB
YAML
43 lines
1.2 KiB
YAML
# This file contains only route and policy configuration details. Other
|
|
# configuration settings required by pomerium are excluded for clarity.
|
|
# See: https://www.pomerium.io/docs/reference/
|
|
|
|
#
|
|
# For a complete self contained configuration see : config.example.yaml.
|
|
# Or, mix and match a policy file (this) with env vars : config.example.env
|
|
|
|
routes:
|
|
- from: https://verify.localhost.pomerium.io
|
|
to: http://localhost:8000
|
|
policy:
|
|
- allow:
|
|
or:
|
|
- domain:
|
|
is: pomerium.io
|
|
cors_allow_preflight: true
|
|
timeout: 30s
|
|
- from: https://external-verify.localhost.pomerium.io
|
|
to: https://verify.pomerium.com
|
|
policy:
|
|
- allow:
|
|
or:
|
|
- domain:
|
|
is: gmail.com
|
|
- from: https://weirdlyssl.localhost.pomerium.io
|
|
to: http://neverssl.com
|
|
policy:
|
|
- allow:
|
|
or:
|
|
- email:
|
|
is: user@example.com
|
|
- groups:
|
|
has: "admins"
|
|
- groups:
|
|
has: "developers"
|
|
- from: https://hello.localhost.pomerium.io
|
|
to: http://localhost:8080
|
|
policy:
|
|
- allow:
|
|
or:
|
|
- groups:
|
|
has: "admins@pomerium.io"
|