summaryrefslogtreecommitdiff
path: root/rel
diff options
context:
space:
mode:
Diffstat (limited to 'rel')
-rw-r--r--rel/overlay/etc/default.ini23
1 files changed, 23 insertions, 0 deletions
diff --git a/rel/overlay/etc/default.ini b/rel/overlay/etc/default.ini
index 81c363da..cb032152 100644
--- a/rel/overlay/etc/default.ini
+++ b/rel/overlay/etc/default.ini
@@ -17,6 +17,27 @@ port = {{cluster_port}}
backlog = 512
docroot = {{prefix}}/share/www
+[chttps]
+port = {{cluster_ssl}}
+
+; cert_file = /full/path/to/server_cert.pem
+; key_file = /full/path/to/server_key.pem
+; password = somepassword
+; also remember to enable the chttps daemon in [daemons] section.
+
+; set to true to validate peer certificates
+verify_ssl_certificates = false
+
+; Path to file containing PEM encoded CA certificates (trusted
+; certificates used for verifying a peer certificate). May be omitted if
+; you do not want to verify the peer.
+;cacert_file = /full/path/to/cacertf
+
+; The verification fun (optional) if not specified, the default
+; verification fun will be used.
+;verify_fun = {Module, VerifyFun}
+ssl_certificate_max_depth = 1
+
[httpd]
port = {{backend_port}}
bind_address = 127.0.0.1
@@ -65,6 +86,8 @@ auth_cache={couch_auth_cache, start_link, []}
replication_manager={couch_replication_manager, start_link, []}
vhosts={couch_httpd_vhost, start_link, []}
os_daemons={couch_os_daemons, start_link, []}
+; Uncomment next line to enable SSL daemon
+; chttpsd = {chttpd, start_link, [https]}
[httpd_global_handlers]
/ = {couch_httpd_misc_handlers, handle_welcome_req, <<"Welcome">>}