docs: document cloak_method and the account/fingerprint/static cloak keys
This commit is contained in:
parent
6efbcb6db0
commit
a6293d5bbc
1 changed files with 13 additions and 0 deletions
|
|
@ -47,6 +47,19 @@ oper = admin CHANGE_THIS_PASSWORD
|
|||
# Changing it re-cloaks everyone.
|
||||
cloak_key = CHANGE_THIS_TO_A_LONG_RANDOM_HEX_STRING
|
||||
|
||||
# cloak_method — how +x cloaks are built. Repeatable/ordered: the first method
|
||||
# that applies to a user wins. Default (unset) = hmac-sha256. Methods:
|
||||
# hmac-sha256 keyed, subnet-preserving host hash (the default)
|
||||
# account logged-in users show <cloak_account_prefix>/<account>
|
||||
# fingerprint TLS clients show <cloak_cert_prefix>/<hash of their cert>
|
||||
# static everyone shows the fixed cloak_static_host
|
||||
# e.g. account cloak for logged-in users, host hash for everyone else:
|
||||
# cloak_method = account
|
||||
# cloak_method = hmac-sha256
|
||||
# cloak_account_prefix = account # default: account
|
||||
# cloak_cert_prefix = cert # default: cert
|
||||
# cloak_static_host = users.example.net
|
||||
|
||||
# reverse-DNS clients on connect (the "*** Looking up your hostname..." notices).
|
||||
# on (default) performs the lookup and reports the result; off skips it (bare IP).
|
||||
resolve_hosts = on
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue