TLS settings updated and documented

install/directors.ini

@@ -1,11 +1,12 @@
 ;
-; Bareos WebUI Configuration
+; Bareos WebUI Configuration File
+;
 ; File: /etc/bareos-webui/directors.ini
 ;
 
-;
+;------------------------------------------------------------------------------
 ; Section localhost-dir
-;
+;------------------------------------------------------------------------------
 [localhost-dir]
 
 ; Enable or disable section. Possible values are "yes" or "no", the default is "yes".
@@ -20,25 +21,49 @@ dirport	= 9101
 ; Set catalog to explicit value if you have multiple catalogs
 ;catalog = "MyCatalog"
 
-; Note: TLS has not been tested and documented, yet.
-;tls_verify_peer = false
-;server_can_do_tls = false
-;server_requires_tls = false
-;client_can_do_tls = false
-;client_requires_tls = false
+; TLS verify peer
+; Possible values: true or false
+tls_verify_peer = false
+
+; Server can do TLS
+; Possible values: true or false
+server_can_do_tls = false
+
+; Server requires TLS
+; Possible values: true or false
+server_requires_tls = false
+
+; Client can do TLS
+; Possible values: true or false
+client_can_do_tls = false
+
+; Client requires TLS
+; Possible value: true or false
+client_requires_tls = false
+
+; Path to the certificate authority file
+; E.g. ca_file = "/etc/bareos-webui/tls/BareosCA.crt"
 ;ca_file = ""
+
+; Path to the cert file which needs to contain the client certificate and the key in PEM encoding
+; E.g. ca_file = "/etc/bareos-webui/tls/restricted-named-console.pem"
 ;cert_file = ""
+
+; Passphrase needed to unlock the above cert file if set
 ;cert_file_passphrase = ""
+
+; Allowed common names
+; E.g. allowed_cns = "host1.example.com"
 ;allowed_cns = ""
 
-;
+;------------------------------------------------------------------------------
 ; Section another-host-dir
-;
+;------------------------------------------------------------------------------
 [another-host-dir]
 enabled = "no"
-diraddress = ""
+diraddress = "192.168.120.1"
 dirport = 9101
-; Note: TLS has not been tested and documented, yet.
+;catalog = "MyCatalog"
 ;tls_verify_peer = false
 ;server_can_do_tls = false
 ;server_requires_tls = false