a39406c12b
Add production deployment configs for the collab relay and locator: region-split compose (CN/global), direct nginx gateways and location maps, the CN docker-user firewall install/verify/validate tooling and systemd unit, and an SoftHSM-backed locator variant. Extend the collab security/deployment boundary checks to cover the new artifacts. The CN application host address is a placeholder (10.0.0.10); substitute the real private address at deploy time.
6 lines
274 B
Plaintext
6 lines
274 B
Plaintext
# Copy to a private inventory location as root:root mode 0600, then replace
|
|
# these RFC 5737 documentation addresses with the reviewed CN inventory.
|
|
OPENPENCIL_CN_INGRESS_INTERFACE=eth0
|
|
OPENPENCIL_CN_GATEWAY_SOURCE_IPV4=198.51.100.10
|
|
OPENPENCIL_CN_SERVICE_IPV4=203.0.113.10
|