myriation/headscale
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity

Set db_ssl to false by default, fixes #1043

Browse source 
Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
This commit is contained in:
Kristoffer Dalby 2022-12-07 09:37:45 +01:00 committed by Kristoffer Dalby
parent 70f2f5d750
commit 134c72f4fb
7 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
CHANGELOG.md
View file

@ -2,11 +2,12 @@
## 0.18.x (2022-xx-xx) ## 0.18.x (2022-xx-xx)
- Added an OIDC AllowGroups Configuration options and authorization check [#1041](https://github.com/juanfont/headscale/pull/1041)
- Reworked routing and added support for subnet router failover [#1024](https://github.com/juanfont/headscale/pull/1024)
### Changes ### Changes
- Reworked routing and added support for subnet router failover [#1024](https://github.com/juanfont/headscale/pull/1024)
- Added an OIDC AllowGroups Configuration options and authorization check [#1041](https://github.com/juanfont/headscale/pull/1041)
- Set `db_ssl` to false by default [#1052](https://github.com/juanfont/headscale/pull/1052)
## 0.17.1 (2022-12-05) ## 0.17.1 (2022-12-05)
### Changes ### Changes

2
config.go
View file

@ -172,6 +172,8 @@ func LoadConfig(path string, isFile bool) error {
viper.SetDefault("cli.timeout", "5s") viper.SetDefault("cli.timeout", "5s")
viper.SetDefault("cli.insecure", false) viper.SetDefault("cli.insecure", false)
viper.SetDefault("db_ssl", false)
viper.SetDefault("oidc.scope", []string{oidc.ScopeOpenID, "profile", "email"}) viper.SetDefault("oidc.scope", []string{oidc.ScopeOpenID, "profile", "email"})
viper.SetDefault("oidc.strip_email_domain", true) viper.SetDefault("oidc.strip_email_domain", true)
viper.SetDefault("oidc.only_start_if_oidc_is_available", true) viper.SetDefault("oidc.only_start_if_oidc_is_available", true)

1
integration_test/etc/alt-config.dump.gold.yaml
View file

@ -3,6 +3,7 @@ cli:
insecure: false insecure: false
timeout: 5s timeout: 5s
db_path: /tmp/integration_test_db.sqlite3 db_path: /tmp/integration_test_db.sqlite3
db_ssl: false
db_type: sqlite3 db_type: sqlite3
derp: derp:
auto_update_enabled: false auto_update_enabled: false

1
integration_test/etc/alt-config.yaml
View file

@ -16,6 +16,7 @@ dns_config:
- 127.0.0.11 - 127.0.0.11
- 1.1.1.1 - 1.1.1.1
db_path: /tmp/integration_test_db.sqlite3 db_path: /tmp/integration_test_db.sqlite3
db_ssl: false
private_key_path: private.key private_key_path: private.key
noise: noise:
private_key_path: noise_private.key private_key_path: noise_private.key

1
integration_test/etc/alt-env-config.dump.gold.yaml
View file

@ -3,6 +3,7 @@ cli:
insecure: false insecure: false
timeout: 5s timeout: 5s
db_path: /tmp/integration_test_db.sqlite3 db_path: /tmp/integration_test_db.sqlite3
db_ssl: false
db_type: sqlite3 db_type: sqlite3
derp: derp:
auto_update_enabled: false auto_update_enabled: false

1
integration_test/etc/alt-env-config.yaml
View file

@ -15,6 +15,7 @@ dns_config:
nameservers: nameservers:
- 1.1.1.1 - 1.1.1.1
db_path: /tmp/integration_test_db.sqlite3 db_path: /tmp/integration_test_db.sqlite3
db_ssl: false
private_key_path: private.key private_key_path: private.key
noise: noise:
private_key_path: noise_private.key private_key_path: noise_private.key

1
integration_test/etc/config.dump.gold.yaml
View file

@ -3,6 +3,7 @@ cli:
insecure: false insecure: false
timeout: 5s timeout: 5s
db_path: /tmp/integration_test_db.sqlite3 db_path: /tmp/integration_test_db.sqlite3
db_ssl: false
db_type: sqlite3 db_type: sqlite3
derp: derp:
auto_update_enabled: false auto_update_enabled: false