Browse Source
Merge pull request #2534 from skurfuerst/add-ui-access-to-security-toml
pull/2539/head
Chris Lu
3 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with
7 additions and
0 deletions
-
weed/command/scaffold/security.toml
|
|
|
@ -10,6 +10,13 @@ |
|
|
|
key = "" |
|
|
|
expires_after_seconds = 10 # seconds |
|
|
|
|
|
|
|
# by default, if the signing key above is set, the Volume UI over HTTP is disabled. |
|
|
|
# by setting ui.access to true, you can re-enable the Volume UI. Despite |
|
|
|
# some information leakage (as the UI is unauthenticted), this should not |
|
|
|
# pose a security risk. |
|
|
|
[access] |
|
|
|
ui = false |
|
|
|
|
|
|
|
# jwt for read is only supported with master+volume setup. Filer does not support this mode. |
|
|
|
[jwt.signing.read] |
|
|
|
key = "" |
|
|
|
|
