2026-02-27 21:59:01 +05:45
|
|
|
|
|
|
|
|
[default]
|
|
|
|
|
# Certificate validity period (in hours)
|
2026-03-01 16:50:27 +05:45
|
|
|
cert_validity_hours=8
|
2026-02-27 21:59:01 +05:45
|
|
|
|
|
|
|
|
# Maximum certificate validity allowed (in hours)
|
2026-03-01 16:50:27 +05:45
|
|
|
max_cert_validity_hours=720
|
2026-02-27 21:59:01 +05:45
|
|
|
|
2026-03-01 16:50:27 +05:45
|
|
|
# CA private key path (required for local encryption mode)
|
|
|
|
|
ca_key_path=
|
2026-02-27 21:59:01 +05:45
|
|
|
|
|
|
|
|
# Certificate Field Limits
|
|
|
|
|
max_principals_per_cert=256
|
|
|
|
|
max_key_id_length=255
|
|
|
|
|
|
|
|
|
|
# Verification challenge max age (in hours)
|
|
|
|
|
verification_challenge_max_age=24
|
|
|
|
|
|
2026-03-01 16:50:27 +05:45
|
|
|
# Cleanup: delete unverified SSH keys after this many days
|
2026-02-27 21:59:01 +05:45
|
|
|
auto_delete_unverified_days=30
|
|
|
|
|
|
|
|
|
|
[development]
|
2026-03-01 16:50:27 +05:45
|
|
|
ca_key_path=${SSH_CA_KEY_PATH}
|
2026-02-27 21:59:01 +05:45
|
|
|
cert_validity_hours=24
|
|
|
|
|
|
|
|
|
|
[production]
|
2026-03-01 16:50:27 +05:45
|
|
|
cert_validity_hours=8
|
2026-02-27 21:59:01 +05:45
|
|
|
|
|
|
|
|
[testing]
|
2026-03-01 16:50:27 +05:45
|
|
|
cert_validity_hours=8
|
