427ff4bd00
Also fix readme to show a proper failing config to go along with this default config change. Change-Id: Id8e27ce34dc68af5341085a9403928646c2d5b7c
95 lines
2.6 KiB
Python
95 lines
2.6 KiB
Python
server = {
|
|
'port': '5000',
|
|
'host': '0.0.0.0'
|
|
}
|
|
|
|
# Pecan Application Configurations
|
|
app = {
|
|
'root': 'anchor.controllers.RootController',
|
|
'modules': ['anchor'],
|
|
# 'static_root': '%(confdir)s/public',
|
|
# 'template_path': '%(confdir)s/${package}/templates',
|
|
'debug': True,
|
|
'errors': {
|
|
'404': '/error/404',
|
|
'__force_dict__': True
|
|
}
|
|
}
|
|
|
|
auth = {
|
|
'static': {
|
|
'user': 'woot',
|
|
'secret': 'woot',
|
|
},
|
|
# 'ldap': {
|
|
# 'host': "ldap.host.com",
|
|
# 'domain': "host.com",
|
|
# 'base': "CN=Users,DC=host,DC=com",
|
|
# },
|
|
# 'keystone': {
|
|
# 'url': 'https://keystone.example.com:35357',
|
|
# },
|
|
}
|
|
|
|
validators = [
|
|
{
|
|
"name": "default",
|
|
"steps": [
|
|
('common_name', {'allowed_domains': ['.example.com']}),
|
|
('alternative_names', {'allowed_domains': ['.example.com']}),
|
|
('server_group', {'group_prefixes': {
|
|
'nv': 'Nova_Team',
|
|
'sw': 'Swift_Team',
|
|
'bk': 'Bock_Team',
|
|
'gl': 'Glance_Team',
|
|
'cs': 'CS_Team',
|
|
'mb': 'MB_Team',
|
|
'ops': 'SysEng_Team',
|
|
'qu': 'Neutron_Team',
|
|
}}),
|
|
('extensions', {'allowed_extensions': ['keyUsage', 'subjectAltName', 'basicConstraints', 'subjectKeyIdentifier']}),
|
|
('key_usage', {'allowed_usage': ['Digital Signature', 'Key Encipherment', 'Non Repudiation', 'Certificate Sign', 'CRL Sign']}),
|
|
('ca_status', {'ca_requested': False}),
|
|
('source_cidrs', {'cidrs': ["127.0.0.0/8"]}),
|
|
]
|
|
},
|
|
{
|
|
"name": "ip",
|
|
"steps": [
|
|
('common_name', {'allowed_networks': ['127/8']}),
|
|
('alternative_names', {'allowed_networks': ['127/8']}),
|
|
('ca_status', {'ca_requested': False}),
|
|
('source_cidrs', {'cidrs': ["127.0.0.0/8"]}),
|
|
]
|
|
},
|
|
]
|
|
|
|
ca = {
|
|
'cert_path': "CA/root-ca.crt",
|
|
'key_path': "CA/root-ca-unwrapped.key",
|
|
'output_path': "certs",
|
|
'valid_hours': 24,
|
|
'signing_hash': "sha1",
|
|
}
|
|
|
|
logging = {
|
|
'root': {'level': 'INFO', 'handlers': ['console']},
|
|
'loggers': {
|
|
'anchor': {'level': 'DEBUG'},
|
|
'wsgi': {'level': 'INFO'},
|
|
},
|
|
'handlers': {
|
|
'console': {
|
|
'level': 'DEBUG',
|
|
'class': 'logging.StreamHandler',
|
|
'formatter': 'simple'
|
|
}
|
|
},
|
|
'formatters': {
|
|
'simple': {
|
|
'format': ('%(asctime)s %(levelname)-5.5s [%(name)s]'
|
|
'[%(process)d/%(threadName)s] %(message)s')
|
|
}
|
|
}
|
|
}
|