boulder/test/config/ra.json

{
	"ra": {
		"rateLimitPoliciesFilename": "test/rate-limit-policies.yml",
		"limiter": {
			"redis": {
				"username": "boulder-wfe",
				"passwordFile": "test/secrets/wfe_ratelimits_redis_password",
				"lookups": [
					{
						"Service": "redisratelimits",
						"Domain": "service.consul"
					}
				],
				"lookupDNSAuthority": "consul.service.consul",
				"readTimeout": "250ms",
				"writeTimeout": "250ms",
				"poolSize": 100,
				"routeRandomly": true,
				"tls": {
					"caCertFile": "test/certs/ipki/minica.pem",
					"certFile": "test/certs/ipki/wfe.boulder/cert.pem",
					"keyFile": "test/certs/ipki/wfe.boulder/key.pem"
				}
			},
			"Defaults": "test/config/wfe2-ratelimit-defaults.yml",
			"Overrides": "test/config/wfe2-ratelimit-overrides.yml"
		},
		"maxContactsPerRegistration": 3,
		"debugAddr": ":8002",
		"hostnamePolicyFile": "test/hostname-policy.yaml",
		"maxNames": 100,
		"goodkey": {
			"fermatRounds": 100
		},
		"issuerCerts": [
			"test/certs/webpki/int-rsa-a.cert.pem",
			"test/certs/webpki/int-rsa-b.cert.pem",
			"test/certs/webpki/int-rsa-c.cert.pem",
			"test/certs/webpki/int-ecdsa-a.cert.pem",
			"test/certs/webpki/int-ecdsa-b.cert.pem",
			"test/certs/webpki/int-ecdsa-c.cert.pem"
		],
		"validationProfiles": {
			"legacy": {
				"pendingAuthzLifetime": "168h",
				"validAuthzLifetime": "720h",
				"orderLifetime": "168h"
			},
			"modern": {
				"pendingAuthzLifetime": "7h",
				"validAuthzLifetime": "7h",
				"orderLifetime": "7h"
			},
			"shortlived": {
				"pendingAuthzLifetime": "7h",
				"validAuthzLifetime": "7h",
				"orderLifetime": "7h"
			}
		},
		"defaultProfileName": "legacy",
		"tls": {
			"caCertFile": "test/certs/ipki/minica.pem",
			"certFile": "test/certs/ipki/ra.boulder/cert.pem",
			"keyFile": "test/certs/ipki/ra.boulder/key.pem"
		},
		"vaService": {
			"dnsAuthority": "consul.service.consul",
			"srvLookup": {
				"service": "va",
				"domain": "service.consul"
			},
			"timeout": "20s",
			"noWaitForReady": true,
			"hostOverride": "va.boulder"
		},
		"caService": {
			"dnsAuthority": "consul.service.consul",
			"srvLookup": {
				"service": "ca",
				"domain": "service.consul"
			},
			"timeout": "15s",
			"noWaitForReady": true,
			"hostOverride": "ca.boulder"
		},
		"ocspService": {
			"dnsAuthority": "consul.service.consul",
			"srvLookup": {
				"service": "ca",
				"domain": "service.consul"
			},
			"timeout": "15s",
			"noWaitForReady": true,
			"hostOverride": "ca.boulder"
		},
		"publisherService": {
			"dnsAuthority": "consul.service.consul",
			"srvLookup": {
				"service": "publisher",
				"domain": "service.consul"
			},
			"timeout": "300s",
			"noWaitForReady": true,
			"hostOverride": "publisher.boulder"
		},
		"saService": {
			"dnsAuthority": "consul.service.consul",
			"srvLookup": {
				"service": "sa",
				"domain": "service.consul"
			},
			"timeout": "15s",
			"noWaitForReady": true,
			"hostOverride": "sa.boulder"
		},
		"akamaiPurgerService": {
			"dnsAuthority": "consul.service.consul",
			"srvLookup": {
				"service": "akamai-purger",
				"domain": "service.consul"
			},
			"timeout": "15s",
			"noWaitForReady": true,
			"hostOverride": "akamai-purger.boulder"
		},
		"grpc": {
			"maxConnectionAge": "30s",
			"address": ":9094",
			"services": {
				"ra.RegistrationAuthority": {
					"clientNames": [
						"admin.boulder",
						"bad-key-revoker.boulder",
						"ocsp-responder.boulder",
						"sfe.boulder",
						"wfe.boulder"
					]
				},
				"ra.SCTProvider": {
					"clientNames": [
						"ca.boulder"
					]
				},
				"grpc.health.v1.Health": {
					"clientNames": [
						"health-checker.boulder"
					]
				}
			}
		},
		"features": {
			"UseKvLimitsForNewOrder": true,
			"IncrementRateLimits": true
		},
		"ctLogs": {
			"stagger": "500ms",
			"logListFile": "test/ct-test-srv/log_list.json",
			"sctLogs": [
				"A1 Current",
				"A1 Future",
				"A2 Past",
				"A2 Current",
				"B1",
				"B2",
				"C1",
				"D1",
				"E1"
			],
			"infoLogs": [
				"F1"
			],
			"finalLogs": [
				"A1 Current",
				"A1 Future",
				"C1",
				"F1"
			]
		}
	},
	"pa": {
		"challenges": {
			"http-01": true,
			"dns-01": true,
			"tls-alpn-01": true
		}
	},
	"syslog": {
		"stdoutlevel": 6,
		"sysloglevel": 6
	}
}