github.com/letsencrypt/boulder@v0.20251208.0/test/config/wfe2.json (about)

     1  {
     2  	"wfe": {
     3  		"timeout": "30s",
     4  		"listenAddress": "0.0.0.0:4001",
     5  		"TLSListenAddress": "0.0.0.0:4431",
     6  		"serverCertificatePath": "test/certs/ipki/boulder/cert.pem",
     7  		"serverKeyPath": "test/certs/ipki/boulder/key.pem",
     8  		"allowOrigins": [
     9  			"*"
    10  		],
    11  		"shutdownStopTimeout": "10s",
    12  		"subscriberAgreementURL": "https://boulder.service.consul:4431/terms/v7",
    13  		"debugAddr": ":8013",
    14  		"directoryCAAIdentity": "happy-hacker-ca.invalid",
    15  		"directoryWebsite": "https://github.com/letsencrypt/boulder",
    16  		"legacyKeyIDPrefix": "http://boulder.service.consul:4000/reg/",
    17  		"goodkey": {},
    18  		"tls": {
    19  			"caCertFile": "test/certs/ipki/minica.pem",
    20  			"certFile": "test/certs/ipki/wfe.boulder/cert.pem",
    21  			"keyFile": "test/certs/ipki/wfe.boulder/key.pem"
    22  		},
    23  		"raService": {
    24  			"dnsAuthority": "consul.service.consul",
    25  			"srvLookup": {
    26  				"service": "ra",
    27  				"domain": "service.consul"
    28  			},
    29  			"timeout": "15s",
    30  			"noWaitForReady": true,
    31  			"hostOverride": "ra.boulder"
    32  		},
    33  		"saService": {
    34  			"dnsAuthority": "consul.service.consul",
    35  			"srvLookup": {
    36  				"service": "sa",
    37  				"domain": "service.consul"
    38  			},
    39  			"timeout": "15s",
    40  			"noWaitForReady": true,
    41  			"hostOverride": "sa.boulder"
    42  		},
    43  		"accountCache": {
    44  			"size": 9000,
    45  			"ttl": "5s"
    46  		},
    47  		"getNonceService": {
    48  			"dnsAuthority": "consul.service.consul",
    49  			"srvLookup": {
    50  				"service": "nonce-taro",
    51  				"domain": "service.consul"
    52  			},
    53  			"timeout": "15s",
    54  			"noWaitForReady": true,
    55  			"hostOverride": "nonce.boulder"
    56  		},
    57  		"redeemNonceService": {
    58  			"dnsAuthority": "consul.service.consul",
    59  			"srvLookups": [
    60  				{
    61  					"service": "nonce-taro",
    62  					"domain": "service.consul"
    63  				},
    64  				{
    65  					"service": "nonce-zinc",
    66  					"domain": "service.consul"
    67  				}
    68  			],
    69  			"srvResolver": "nonce-srv",
    70  			"timeout": "15s",
    71  			"noWaitForReady": true,
    72  			"hostOverride": "nonce.boulder"
    73  		},
    74  		"nonceHMACKey": {
    75  			"keyFile": "test/secrets/nonce_prefix_key"
    76  		},
    77  		"chains": [
    78  			[
    79  				"test/certs/webpki/int-rsa-a.cert.pem",
    80  				"test/certs/webpki/root-rsa.cert.pem"
    81  			],
    82  			[
    83  				"test/certs/webpki/int-rsa-b.cert.pem",
    84  				"test/certs/webpki/root-rsa.cert.pem"
    85  			],
    86  			[
    87  				"test/certs/webpki/int-ecdsa-a.cert.pem",
    88  				"test/certs/webpki/root-ecdsa.cert.pem"
    89  			],
    90  			[
    91  				"test/certs/webpki/int-ecdsa-b.cert.pem",
    92  				"test/certs/webpki/root-ecdsa.cert.pem"
    93  			],
    94  			[
    95  				"test/certs/webpki/int-ecdsa-a-cross.cert.pem",
    96  				"test/certs/webpki/root-rsa.cert.pem"
    97  			],
    98  			[
    99  				"test/certs/webpki/int-ecdsa-b-cross.cert.pem",
   100  				"test/certs/webpki/root-rsa.cert.pem"
   101  			]
   102  		],
   103  		"staleTimeout": "5m",
   104  		"limiter": {
   105  			"redis": {
   106  				"username": "boulder",
   107  				"passwordFile": "test/secrets/redis_password",
   108  				"lookups": [
   109  					{
   110  						"Service": "redisratelimits",
   111  						"Domain": "service.consul"
   112  					}
   113  				],
   114  				"lookupDNSAuthority": "consul.service.consul",
   115  				"readTimeout": "250ms",
   116  				"writeTimeout": "250ms",
   117  				"poolSize": 100,
   118  				"routeRandomly": true,
   119  				"tls": {
   120  					"caCertFile": "test/certs/ipki/minica.pem",
   121  					"certFile": "test/certs/ipki/wfe.boulder/cert.pem",
   122  					"keyFile": "test/certs/ipki/wfe.boulder/key.pem"
   123  				}
   124  			},
   125  			"Defaults": "test/config/ratelimit-defaults.yml",
   126  			"Overrides": "test/config/ratelimit-overrides.yml"
   127  		},
   128  		"features": {
   129  			"ServeRenewalInfo": true,
   130  			"CheckIdentifiersPaused": true
   131  		},
   132  		"certProfiles": {
   133  			"legacy": "The normal profile you know and love",
   134  			"modern": "Profile 2: Electric Boogaloo",
   135  			"shortlived": "Like modern, but smaller"
   136  		},
   137  		"unpause": {
   138  			"hmacKey": {
   139  				"keyFile": "test/secrets/sfe_unpause_key"
   140  			},
   141  			"jwtLifetime": "336h",
   142  			"url": "https://boulder.service.consul:4003"
   143  		}
   144  	},
   145  	"syslog": {
   146  		"stdoutlevel": 7,
   147  		"sysloglevel": 6
   148  	}
   149  }