Is railway Hashicorp/Vault secured with TLS_DISABLED = true?
acemint
HOBBYOP

2 years ago

In the template that is recommended by railway, https://github.com/Exayn/vault-railway-template the .sh file shows that the tls_disabled as true:

"listener\": [{ \"tcp\": { \"address\": \"[::]:8200\", \"tls_disable\": \"true\" } }]

I'm wondering whether this is secure, because afaik railway uses SSL connection to encrypt data but how is it that the tls is disabled the in the .sh file, so does it actually use SSL or not?

1 Replies

brody
EMPLOYEE

2 years ago

The applications ran on Railway should never try to do their own tls/ssl as Railway handles that for the public domains, so that configuration is needed for this particular application.

Side note, there is currently no such thing as a Railway recommend template besides the templates published by Railway directly, Railway does not endorse any of the community submitted templates such as the template you have linked.


Loading...