2016-11-11 21:48:00 +07:00
|
|
|
|
[general]
|
|
|
|
|
# domain name to serve th requests off of
|
|
|
|
|
domain = "auth.example.org"
|
|
|
|
|
# zone name server
|
|
|
|
|
nsname = "ns1.auth.example.org"
|
|
|
|
|
# admin email address, with @ substituted with .
|
|
|
|
|
nsadmin = "admin.example.org"
|
2016-11-15 14:27:34 +07:00
|
|
|
|
# predefined records that we're serving in addition to the TXT
|
|
|
|
|
records = [
|
|
|
|
|
# default A
|
|
|
|
|
"auth.example.org. A 192.168.1.100",
|
|
|
|
|
# A
|
|
|
|
|
"ns1.auth.example.org. A 192.168.1.100",
|
|
|
|
|
"ns2.auth.example.org. A 192.168.1.100",
|
|
|
|
|
# NS
|
|
|
|
|
"auth.example.org. NS ns1.auth.example.org.",
|
|
|
|
|
"auth.example.org. NS ns2.auth.example.org.",
|
|
|
|
|
]
|
2016-11-16 19:56:49 +07:00
|
|
|
|
# debug messages from CORS etc
|
|
|
|
|
debug = false
|
2016-11-15 14:27:34 +07:00
|
|
|
|
|
2016-11-11 21:48:00 +07:00
|
|
|
|
|
2016-11-13 19:50:44 +07:00
|
|
|
|
[api]
|
|
|
|
|
# domain name to listen requests for, mandatory if using tls = "letsencrypt"
|
|
|
|
|
# use "" (empty string) to bind to all interfaces
|
|
|
|
|
api_domain = ""
|
|
|
|
|
# listen port, eg. 443 for default HTTPS
|
|
|
|
|
port = "8080"
|
2016-11-16 19:56:49 +07:00
|
|
|
|
# possible values: "letsencrypt", "cert", "none"
|
|
|
|
|
tls = "none"
|
2016-11-11 21:48:00 +07:00
|
|
|
|
# only used if tls = "cert"
|
|
|
|
|
tls_cert_privkey = "/etc/tls/example.org/privkey.pem"
|
|
|
|
|
tls_cert_fullchain = "/etc/tls/example.org/fullchain.pem"
|
2016-11-16 19:56:49 +07:00
|
|
|
|
# CORS AllowOrigins, wildcards can be used
|
|
|
|
|
corsorigins = [
|
|
|
|
|
"web.example.org"
|
|
|
|
|
]
|
2016-11-13 19:50:44 +07:00
|
|
|
|
|
|
|
|
|
[logconfig]
|
|
|
|
|
# logging level
|
|
|
|
|
loglevel = "debug"
|
|
|
|
|
# possible values: stdout, file
|
|
|
|
|
logtype = "stdout"
|
|
|
|
|
# file path for logfile
|
|
|
|
|
logfile = "./acme-dns.log"
|
|
|
|
|
# format
|
|
|
|
|
logformat = "%{time:15:04:05.000} %{shortfunc} - %{level:.4s} %{id:03x} %{message}"
|