mirror of
https://github.com/taigrr/nats.docs
synced 2025-01-18 04:03:23 -08:00
38 lines
2.0 KiB
Markdown
38 lines
2.0 KiB
Markdown
# Configuration
|
|
|
|
| Property | Description |
|
|
| :--- | :--- |
|
|
| `advertise` | Hostport `<host>:<port>` to advertise to other servers. |
|
|
| `authorization` | Authorization block \(same as other nats-server `authorization` configuration\). |
|
|
| `host` | Interface where the server will listen for incoming leafnode connections. |
|
|
| `listen` | Combines `host` and `port` as `<host>:<port>` |
|
|
| `no_advertise` | if `true` the leafnode shouldn't be advertised. |
|
|
| `port` | Port where the server will listen for incoming leafnode connections. |
|
|
| `remotes` | List of `remote` entries specifying servers where leafnode client connection can be made. |
|
|
| `tls` | TLS configuration block \(same as other nats-server `tls` configuration\). |
|
|
|
|
## LeafNode `remotes` Entry Block
|
|
|
|
| Property | Description |
|
|
| :--- | :--- |
|
|
| `url` | Leafnode URL \(URL protocol should be `nats-leaf`\). |
|
|
| `urls` | Leafnode URL array. Supports multiple URLs for discovery, e.g., urls: \[ "nats-leaf://host1:7422", "nats-leaf://host2:7422" \] |
|
|
| `account` | Account public key identifying the leafnode. Account must be defined locally. |
|
|
| `credentials` | Credential file for connecting to the leafnode server. |
|
|
| `tls` | A TLS configuration block. Leafnode client will use specified TLS certificates when connecting/authenticating. |
|
|
|
|
## `tls` Configuration Block
|
|
|
|
| Property | Description |
|
|
| :--- | :--- |
|
|
| `cert_file` | TLS certificate file. |
|
|
| `key_file` | TLS certificate key file. |
|
|
| `ca_file` | TLS certificate authority file. |
|
|
| `insecure` | Skip certificate verification. |
|
|
| `verify` | If `true`, require and verify client certificates. |
|
|
| `verify_and_map` | If `true`, require and verify client certificates and use values map certificate values for authentication purposes. |
|
|
| `cipher_suites` | When set, only the specified TLS cipher suites will be allowed. Values must match golang version used to build the server. |
|
|
| `curve_preferences` | List of TLS cypher curves to use in order. |
|
|
| `timeout` | TLS handshake timeout in fractional seconds. |
|
|
|