Skip to content
ReverseDock

listeners

Sockets to accept traffic on. When empty, web (:80) and websecure (:443, TLS) are used.

listeners.<name>.address

Section titled “listeners.<name>.address”

Type: ListenAddress · Required

Address to bind, e.g. :443 or 127.0.0.1:8080.

listeners.<name>.protocol

Section titled “listeners.<name>.protocol”

Type: http · https · tcp · udp

Protocol. Inferred when omitted: https if tls is set, otherwise http.

  • http: Plain HTTP/1.1 and h2c.
  • https: HTTP over TLS (HTTP/1.1 and HTTP/2).
  • tcp: Raw TCP, optionally with TLS termination or SNI passthrough.
  • udp: UDP datagrams.

listeners.<name>.proxy_protocol planned for v0.6

Section titled “listeners.<name>.proxy_protocol ”

Type: object

Accept the PROXY protocol (v1 or v2) from these sources only.

listeners.<name>.proxy_protocol.trusted

Section titled “listeners.<name>.proxy_protocol.trusted”

Type: list of IpNetwork · Required

Sources allowed to send a PROXY header. Others are rejected.

listeners.<name>.timeouts

Section titled “listeners.<name>.timeouts”

Type: object · Default: {"idle":"1m","read":"1m","request_header":"10s","write":"1m"}

Client-side timeouts.

listeners.<name>.timeouts.idle

Section titled “listeners.<name>.timeouts.idle”

Type: Duration · Default: 1m

How long an idle keep-alive connection is kept open.

listeners.<name>.timeouts.read

Section titled “listeners.<name>.timeouts.read”

Type: Duration · Default: 1m

Longest wait for data from the client while a request or upgraded connection is open.

listeners.<name>.timeouts.request_header

Section titled “listeners.<name>.timeouts.request_header”

Type: Duration · Default: 10s

Time allowed to receive the complete request headers, counted from their first byte (protects against slow-header attacks).

listeners.<name>.timeouts.write

Section titled “listeners.<name>.timeouts.write”

Type: Duration · Default: 1m

Longest wait for the client to accept data.

listeners.<name>.tls

Section titled “listeners.<name>.tls”

Type: object

TLS termination settings.

listeners.<name>.tls.policy

Section titled “listeners.<name>.tls.policy”

Type: modern · intermediate · Default: intermediate

TLS versions and cipher suites.

  • modern: TLS 1.3 only.
  • intermediate: TLS 1.2 and 1.3 with forward-secret AEAD ciphers (Mozilla “intermediate”).