make more insecure options configurable and change insecure defaults from true to false

2021-11-10 15:45:55 +01:00
parent 0ec64fe99f
commit 69cc11dbe6
21 changed files with 106 additions and 68 deletions
@@ -189,6 +189,13 @@ func ServerWithConfig(cfg *config.Config) []cli.Flag {
 			EnvVars:     []string{"REVA_GATEWAY"},
 			Destination: &cfg.Reva.Address,
 		},
+		&cli.BoolFlag{
+			Name:        "reva-gateway-insecure",
+			Value:       flags.OverrideDefaultBool(cfg.Reva.Insecure, false),
+			Usage:       "allow insecure communication to REVA gateway endpoint",
+			EnvVars:     []string{"REVA_GATEWAY_INSECURE"},
+			Destination: &cfg.Reva.Insecure,
+		},
 		&cli.BoolFlag{
 			Name:        "insecure",
 			Value:       flags.OverrideDefaultBool(cfg.InsecureBackends, false),
@@ -208,7 +215,7 @@ func ServerWithConfig(cfg *config.Config) []cli.Flag {
 		},
 		&cli.BoolFlag{
 			Name:        "oidc-insecure",
-			Value:       flags.OverrideDefaultBool(cfg.OIDC.Insecure, true),
+			Value:       flags.OverrideDefaultBool(cfg.OIDC.Insecure, false),
 			Usage:       "OIDC allow insecure communication",
 			EnvVars:     []string{"PROXY_OIDC_INSECURE"},
 			Destination: &cfg.OIDC.Insecure,