diff options
| author | John Molakvoæ <skjnldsv@users.noreply.github.com> | 2021-07-22 13:47:26 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-07-22 13:47:26 +0300 |
| commit | f14b8aa34bfb9f7af7b23cfecc09e2fb8f604c1b (patch) | |
| tree | 7f02c9fcb169d6b091e39b5db65599a098822c54 /config | |
| parent | dd4668f935f59cdb21deea38cfd16e6226798da0 (diff) | |
| parent | 6e00fe8c26c8d1cd68497911371c3b4b785d903c (diff) | |
Merge pull request #27888 from nextcloud/fix/redis-auth
Diffstat (limited to 'config')
| -rw-r--r-- | config/config.sample.php | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/config/config.sample.php b/config/config.sample.php index e21d18e6eaa..4fcfc5fb6fd 100644 --- a/config/config.sample.php +++ b/config/config.sample.php @@ -1221,13 +1221,25 @@ $CONFIG = [ * For enhanced security it is recommended to configure Redis * to require a password. See http://redis.io/topics/security * for more information. + * + * We also support redis SSL/TLS encryption as of version 6. + * See https://redis.io/topics/encryption for more information. */ 'redis' => [ 'host' => 'localhost', // can also be a unix domain socket: '/tmp/redis.sock' 'port' => 6379, 'timeout' => 0.0, + 'read_timeout' => 0.0, + 'user' => '', // Optional, if not defined no password will be used. 'password' => '', // Optional, if not defined no password will be used. 'dbindex' => 0, // Optional, if undefined SELECT will not run and will use Redis Server's default DB Index. + // If redis in-transit encryption is enabled, provide certificates + // SSL context https://www.php.net/manual/en/context.ssl.php + 'ssl_context' => [ + 'local_cert' => '/certs/redis.crt', + 'local_pk' => '/certs/redis.key', + 'cafile' => '/certs/ca.crt' + ] ], /** @@ -1263,7 +1275,15 @@ $CONFIG = [ 'timeout' => 0.0, 'read_timeout' => 0.0, 'failover_mode' => \RedisCluster::FAILOVER_ERROR, + 'user' => '', // Optional, if not defined no password will be used. 'password' => '', // Optional, if not defined no password will be used. + // If redis in-transit encryption is enabled, provide certificates + // SSL context https://www.php.net/manual/en/context.ssl.php + 'ssl_context' => [ + 'local_cert' => '/certs/redis.crt', + 'local_pk' => '/certs/redis.key', + 'cafile' => '/certs/ca.crt' + ] ], |