1"use strict";(globalThis.webpackChunkmy_website=globalThis.webpackChunkmy_website||[]).push([[872],{48193:(e,t,n)=>{n.d(t,{R:()=>s,x:()=>c});var o=n(30758);const r={},i=o.createContext(r);function s(e){const t=o.useContext(i);return o.useMemo(function(){return"function"==typeof e?e(t):{...t,...e}},[t,e])}function c(e){let t;return t=e.disableParentContext?"function"==typeof e.components?e.components(r):e.components||r:s(e.components),o.createElement(i.Provider,{value:t},e.children)}},92328:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>a,contentTitle:()=>c,default:()=>u,frontMatter:()=>s,metadata:()=>o,toc:()=>l});const o=JSON.parse('{"id":"pro/encryption","title":"Encryption","description":"SSL encryption is used for communicating dkron pro nodes. Also if client auth is enabled. This means that no other software running on your local network will be able to talk to dkron servers.","source":"@site/versioned_docs/version-v2/pro/encryption.md","sourceDirName":"pro","slug":"/pro/encryption","permalink":"/docs/v2/pro/encryption","draft":false,"unlisted":false,"editUrl":"https://github.com/distribworks/dkron/tree/main/website/docs/versioned_docs/version-v2/pro/encryption.md","tags":[],"version":"v2","frontMatter":{"title":"Encryption"},"sidebar":"tutorialSidebar","previous":{"title":"configuration","permalink":"/docs/v2/pro/configuration"},"next":{"title":"Docker executor","permalink":"/docs/v2/pro/executors/docker"}}');var r=n(86070),i=n(48193);const s={title:"Encryption"},c=void 0,a={},l=[];function d(e){const t={a:"a",admonition:"admonition",code:"code",p:"p",pre:"pre",...(0,i.R)(),...e.components};return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsx)(t.p,{children:"SSL encryption is used for communicating dkron pro nodes. Also if client auth is enabled. This means that no other software running on your local network will be able to talk to dkron servers."}),"\n",(0,r.jsx)(t.p,{children:"This ensures that no unexpected usage of the Dkron's store will happen, unless it is another Dkron pro instance."}),"\n",(0,r.jsx)(t.p,{children:"SSL encryption is enabled by default in Dkron Pro and can not be disabled, you don't need to do nothing to use it."}),"\n",(0,r.jsx)(t.p,{children:"By default Dkron Pro runs with automatically generated SSL certificates, this is enough for using it in a trusted environment but to have a better grade of confidence, it is recommended to run Dkron Pro with custom SSL certificates."}),"\n",(0,r.jsxs)(t.p,{children:["Follow ",(0,r.jsx)(t.a,{href:"https://coreos.com/os/docs/latest/generate-self-signed-certificates.html",children:"this tutorial"})," to generate autosigned SSL certificates for your instances."]}),"\n",(0,r.jsx)(t.admonition,{type:"note",children:(0,r.jsx)(t.p,{children:'You don\'t need a client certificate for Dkron server, just add "client auth" usage to your server cert.'})}),"\n",(0,r.jsx)(t.pre,{children:(0,r.jsx)(t.code,{className:"language-yaml",children:"# dkron.yaml\nauto-tls: false # Set to false to use custom certs\nkey-file: server-key.pem\ncert-file: server.pem\ntrusted-ca-file: ca.pem\nclient-cert-auth: true # Enable it to only allow certs signed by the same CA\n"})})]})}function u(e={}){const{wrapper:t}={...(0,i.R)(),...e.components};return t?(0,r.jsx)(t,{...e,children:(0,r.jsx)(d,{...e})}):d(e)}}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.