Pomerium with Prebuilt Binaries

The following quick-start guide covers how to configure and run Pomerium using prebuilt binaries.

Prerequisites

A configured identity provider
A wild-card TLS certificate

Download

Download the latest release of Pomerium for your machine's operating system and architecture.

Configure

Pomerium supports setting configuration variables using both environmental variables and using a configuration file.

Configuration file

Create a config file (config.yaml). This configuration file will be use to determine Pomerium's configuration settings, routes, and access-policies. Consider the following example:

<<< @/docs/docs/examples/config/config.minimal.yaml

Environmental Variables

As mentioned above, Pomerium supports mixing and matching where configuration details are set. For example, we can specify our secret values and domains certificates as environmental configuration variables.

<<< @/docs/docs/examples/config/config.minimal.env

Run

Finally, source the the configuration env file and run pomerium specifying the config.yaml you just created.

source ./env
./bin/pomerium -config config.yaml

Navigate

Browse to external-httpbin.your.domain.example. Connections between you and httpbin will now be proxied and managed by Pomerium.

1.8 KiB Raw Blame History