![]() |
![]() |
![]() |
Cockpit Guide | ![]() |
---|
cockpit.confcockpit.conf — Cockpit configuration file |
Cockpit can be configured via /etc/cockpit/cockpit.conf. That file has a INI file syntax and thus contains key / value pairs, grouped into topical groups. For example, to set the "group" key in the "login" group to the value "adm", place this into /etc/cockpit/cockpit.conf:
[login] group = adm
Note: The port that cockpit listens on cannot be changed in this file. To change the port change the systemd cockpit.socket
file.
|
By default cockpit will not accept crossdomain websocket connections. Use this setting to allow access from alternate domains. Origins should include scheme, host and port, if necessary. [WebService] Origins = https://somedomain1.com https://somedomain2.com:9090 |
|
Set the browser title for the login screen. |
Cockpit can be configured to support the
implicit grant OAuth authorization flow. When successful the resulting oauth
token will be passed to cockpit-ws using the Bearer
auth-scheme.
For a login to be successful, cockpit will also need a to be configured to verify
and allow Bearer
tokens.
|
This is the url that cockpit will redirect the users browser to when it needs to obtain an oauth token. Cockpit will add a redirect_uri parameter to the url with the location of where the oauth provider should redirect to once a token has been obtained. |
|
When a oauth provider redirects a user back to cockpit, look for this parameter
in the querystring or fragment portion of the url to find a error message. When not
provided it will default to |
|
When a oauth provider redirects a user back to cockpit, look for this parameter
in the querystring or fragment portion of the url to find the access token. When not
provided it will default to |