mirror of
https://github.com/pomerium/pomerium.git
synced 2025-07-24 03:59:49 +02:00
25 lines
668 B
YAML
25 lines
668 B
YAML
# Required settings below. See complete documentation at https://www.pomerium.com/reference/
|
|
|
|
# To run on :443 set AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
# in a systemd override
|
|
address: :8443
|
|
|
|
authenticate_service_url: https://authenticate.localhost.pomerium.io
|
|
certificates:
|
|
- cert: /etc/pomerium/cert.pem
|
|
key: /etc/pomerium/key.pem
|
|
shared_secret: XXXXXX
|
|
cookie_secret: YYYYY
|
|
idp_provider: "google"
|
|
idp_client_id: XXXX
|
|
idp_client_secret: YYYY
|
|
idp_service_account: XXXXXX
|
|
|
|
routes:
|
|
- from: https://yoursite.localhost.pomerium.io
|
|
to: https://yoursite.local
|
|
policy:
|
|
- allow:
|
|
or:
|
|
- user:
|
|
is: user@domain.com
|