Allow dedicated Redis for OCSP publication

2026-10-31 20:26:37 +00:00
parent ef64c4a532
commit a101182fdd
10 changed files with 93 additions and 33 deletions
@@ -1,7 +1,9 @@
 # KCA — Kubernetes deployment sketch (namespace: kca).
 #
 # Replace every REPLACE_ME. Postgres and the OIDC provider are external; Redis
-# stores disposable sessions and expiring OCSP snapshots. KCA_MASTER_KEY is the AES key
+# stores disposable sessions and expiring OCSP snapshots. Set
+# KCA_OCSP_REDIS_URL to publish OCSP snapshots to a separate instance instead.
+# KCA_MASTER_KEY is the AES key
 # protecting private keys at rest: generate it once and never lose it.
 #
 #   kubectl apply -f deploy/k8s/kca.yaml