diff options
| author | John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com> | 2021-07-09 10:41:43 +0200 |
|---|---|---|
| committer | John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com> | 2021-07-20 17:57:33 +0200 |
| commit | ed10d85ff36f4fc72eb7c3ba62589105505a999e (patch) | |
| tree | 3077e1ac993541bdf819a7f4ecea835d774929f2 /config | |
| parent | 71109b74259fdc5ec78e278d1674cf314c414ae1 (diff) | |
| download | nextcloud-server-ed10d85ff36f4fc72eb7c3ba62589105505a999e.tar.gz nextcloud-server-ed10d85ff36f4fc72eb7c3ba62589105505a999e.zip | |
Support redis user password auth and tls encryption
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Diffstat (limited to 'config')
| -rw-r--r-- | config/config.sample.php | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/config/config.sample.php b/config/config.sample.php index 4895b6a7c82..6d6f98db602 100644 --- a/config/config.sample.php +++ b/config/config.sample.php @@ -1222,13 +1222,25 @@ $CONFIG = [ * For enhanced security it is recommended to configure Redis * to require a password. See http://redis.io/topics/security * for more information. + * + * We also support redis SSL/TLS encryption as of version 6. + * See https://redis.io/topics/encryption for more information. */ 'redis' => [ 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock' 'port' => 6379, 'timeout' => 0.0, + 'read_timeout' => 0.0, + 'user' => '', // Optional, if not defined no password will be used. 'password' => '', // Optional, if not defined no password will be used. 'dbindex' => 0, // Optional, if undefined SELECT will not run and will use Redis Server's default DB Index. + // If redis is encrypted, provide certificates + // SSL context https://www.php.net/manual/en/context.ssl.php + 'ssl_context' => [ + 'local_cert' => '/certs/redis.crt', + 'local_pk' => '/certs/redis.key', + 'cafile' => '/certs/ca.crt' + ] ], /** @@ -1264,7 +1276,15 @@ $CONFIG = [ 'timeout' => 0.0, 'read_timeout' => 0.0, 'failover_mode' => \RedisCluster::FAILOVER_ERROR, + 'user' => '', // Optional, if not defined no password will be used. 'password' => '', // Optional, if not defined no password will be used. + // If redis is encrypted, provide certificates + // SSL context https://www.php.net/manual/en/context.ssl.php + 'ssl_context' => [ + 'local_cert' => '/certs/redis.crt', + 'local_pk' => '/certs/redis.key', + 'cafile' => '/certs/ca.crt' + ] ], |