Add production deployment configs for the collab relay and locator: region-split compose (CN/global), direct nginx gateways and location maps, the CN docker-user firewall install/verify/validate tooling and systemd unit, and an SoftHSM-backed locator variant. Extend the collab security/deployment boundary checks to cover the new artifacts. The CN application host address is a placeholder (10.0.0.10); substitute the real private address at deploy time.
5 lines
128 B
Plaintext
5 lines
128 B
Plaintext
directories.tokendir = /var/lib/openpencil-softhsm/tokens/
|
|
objectstore.backend = file
|
|
log.level = ERROR
|
|
slots.removable = false
|