sigma icon indicating copy to clipboard operation
sigma copied to clipboard

如何配置自定义域名

Open eryajf opened this issue 7 months ago • 7 comments

我用默认配置拉起,然后通过NGINX代理,添加域名解析。

此时发现web端能够正常访问,但是docker login 的时候,会报错:tls: failed to verify certificate: x509: certificate signed by unknown authority

是不是配置文件里需要指定自定义域名的配置信息,这块儿看了说明,没有太理解:

http:
  # endpoint can be a domain or domain with port, eg: http://sigma.test.io, https://sigma.test.io:30080, http://127.0.0.1:3000
  # this endpoint will be used to generate the token service url in auth middleware,
  # you can leave it blank and it will use http://127.0.0.1:3000 as internal domain by default,
  # because the front page need show this endpoint.
  endpoint: https://sigma.test.io
  # in some cases, daemon may pull image and scan it, but we don't want to pull image from public registry domain,
  # so use this internal domain to pull image from registry.
  # you can leave it blank and it will use http://127.0.0.1:3000 as internal domain by default.
  # in k8s cluster, it will be set to the distribution service which is used to pull image from registry, eg: http://registry.default.svc.cluster.local:3000
  # in docker-compose, it will be set to the registry service which is used to pull image from registry, eg: http://registry:3000
  # if http.tls.enabled is true, internalEndpoint should start with https://
  # eg: http://sigma.test.io, http://sigma.test.io:3000, https://sigma.test.io:30080
  internalEndpoint: https://sigma.test.io
  # eg: http://sigma-distribution:3000
  internalDistributionEndpoint: https://sigma.test.io
  tls:
    enabled: true
    certificate: /etc/sigma/test.io.pem
    key: /etc/sigma/test.io.key

我目前这样配置的,这样配置之后,web页面也无法访问了。应该是哪里没有配置对。

eryajf avatar Jul 08 '24 08:07 eryajf