woggioni/kca
2
0
Fork 0
Code Actions Packages Releases Activity

Allow dedicated Redis for OCSP publication
CI / Build and push docker image (push) Successful in 2m38s
Details
CI / Build and push OCSP image (push) Successful in 3m47s
Details

Browse Source
This commit is contained in:
woggioni
2026-10-31 20:26:37 +00:00
parent ef64c4a532
commit a101182fdd
10 changed files with 93 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/.env.example
+4 -2
View File
@@ -66,9 +66,11 @@ OTEL_EXCLUDED_PATHS=/api/health
#OTEL_METRICS_POLL_INTERVAL_SECONDS=15
# --- OCSP status publisher (optional) --------------------------------------
# When REDIS_URL is configured, KCA publishes one full CBOR status snapshot
# per CA to the same Redis instance and logical database used for sessions.
# KCA publishes one full CBOR status snapshot per CA. By default it uses the
# same Redis instance and logical database as sessions. Set KCA_OCSP_REDIS_URL
# to use a dedicated instance instead (also works when REDIS_URL is unset).
# Keys use a separate prefix and expire unless refreshed by the heartbeat.
#KCA_OCSP_REDIS_URL=redis://localhost:6380/0
KCA_OCSP_REDIS_PREFIX=ocsp
KCA_OCSP_PUBLISH_INTERVAL_SECONDS=1
# Republish unchanged snapshots to renew their Redis TTL. Keep the heartbeat