diff options
| author | John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com> | 2021-07-09 10:41:43 +0200 |
|---|---|---|
| committer | backportbot[bot] <backportbot[bot]@users.noreply.github.com> | 2021-07-22 10:52:12 +0000 |
| commit | 9d2cf57776a58cdf4968f41e551ee1a59a48c531 (patch) | |
| tree | 6fae417a2c63fdfef540d11de2aee5dbc3cca22d /config | |
| parent | 67675c80d620a9f8d95b8e97f14f4c2045ee72c4 (diff) | |
| download | nextcloud-server-9d2cf57776a58cdf4968f41e551ee1a59a48c531.tar.gz nextcloud-server-9d2cf57776a58cdf4968f41e551ee1a59a48c531.zip | |
Support redis user password auth and tls encryption
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Diffstat (limited to 'config')
| -rw-r--r-- | config/config.sample.php | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/config/config.sample.php b/config/config.sample.php index e21d18e6eaa..6b4d72186ff 100644 --- a/config/config.sample.php +++ b/config/config.sample.php @@ -1221,13 +1221,25 @@ $CONFIG = [ * For enhanced security it is recommended to configure Redis * to require a password. See http://redis.io/topics/security * for more information. + * + * We also support redis SSL/TLS encryption as of version 6. + * See https://redis.io/topics/encryption for more information. */ 'redis' => [ 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock' 'port' => 6379, 'timeout' => 0.0, + 'read_timeout' => 0.0, + 'user' => '', // Optional, if not defined no password will be used. 'password' => '', // Optional, if not defined no password will be used. 'dbindex' => 0, // Optional, if undefined SELECT will not run and will use Redis Server's default DB Index. + // If redis is encrypted, provide certificates + // SSL context https://www.php.net/manual/en/context.ssl.php + 'ssl_context' => [ + 'local_cert' => '/certs/redis.crt', + 'local_pk' => '/certs/redis.key', + 'cafile' => '/certs/ca.crt' + ] ], /** @@ -1263,7 +1275,15 @@ $CONFIG = [ 'timeout' => 0.0, 'read_timeout' => 0.0, 'failover_mode' => \RedisCluster::FAILOVER_ERROR, + 'user' => '', // Optional, if not defined no password will be used. 'password' => '', // Optional, if not defined no password will be used. + // If redis is encrypted, provide certificates + // SSL context https://www.php.net/manual/en/context.ssl.php + 'ssl_context' => [ + 'local_cert' => '/certs/redis.crt', + 'local_pk' => '/certs/redis.key', + 'cafile' => '/certs/ca.crt' + ] ], |