john/soteria
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

comments

Browse Source
This commit is contained in:
John Lancaster
2026-01-02 14:32:35 -06:00
parent be29375bee
commit b7537179c9
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
envoy.yaml
View File

@@ -29,6 +29,7 @@ static_resources:
- certificate_chain: { filename: /certs/cert.pem } - certificate_chain: { filename: /certs/cert.pem }
private_key: { filename: /certs/envoy.pem } private_key: { filename: /certs/envoy.pem }
# --8<-- [end:transport_socket] # --8<-- [end:transport_socket]
# --8<-- [start:http]
filters: filters:
- name: envoy.filters.network.http_connection_manager - name: envoy.filters.network.http_connection_manager
typed_config: typed_config:
@@ -37,11 +38,14 @@ static_resources:
use_remote_address: true use_remote_address: true
http2_protocol_options: http2_protocol_options:
max_concurrent_streams: 100 max_concurrent_streams: 100
# --8<-- [start:access_log]
access_log: access_log:
- name: envoy.access_loggers.file - name: envoy.access_loggers.file
typed_config: typed_config:
"@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
path: "/var/log/envoy/access.log" path: "/var/log/envoy/access.log"
# --8<-- [end:access_log]
# --8<-- [start:cluster_route]
route_config: route_config:
name: local_route name: local_route
virtual_hosts: virtual_hosts:
@@ -52,7 +56,9 @@ static_resources:
prefix: "/" prefix: "/"
route: route:
cluster: restic cluster: restic
# --8<-- [end:cluster_route]
http_filters: http_filters:
# --8<-- [start:rbac]
- name: envoy.filters.http.rbac - name: envoy.filters.http.rbac
typed_config: typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC "@type": type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
@@ -71,9 +77,11 @@ static_resources:
- authenticated: - authenticated:
principal_name: principal_name:
exact: "spiffe://john-stream.com/ubuntu" exact: "spiffe://john-stream.com/ubuntu"
# --8<-- [end:rbac]
- name: envoy.filters.http.router - name: envoy.filters.http.router
typed_config: typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
# --8<-- [start:cluster]
clusters: clusters:
- name: restic - name: restic
connect_timeout: 0.25s connect_timeout: 0.25s
@@ -89,3 +97,4 @@ static_resources:
# Change this depending on the docker compose service name # Change this depending on the docker compose service name
address: rest-server address: rest-server
port_value: 8000 port_value: 8000
# --8<-- [end:cluster]