GitHub user 3BK added a comment to the discussion: Out of the box gunicorn_config.py doesn't allow cipher suite configuration.
@potiuk You are correct. The following launches a TLSv1.3 webserver. `GUNICORN_CMD_ARGS=`--ciphers ECDHE-AESGCM:!ECDSA' airflow standalone` I had expected GUNICORN_CMD_ARGS to be overridden. Please be advised that excessive use of environment variables can be an indicator of compromise(IOC). refs: https://docs.gunicorn.org/en/latest/configure.html https://github.com/apache/airflow/blob/main/airflow/cli/commands/webserver_command.py#L324 GitHub link: https://github.com/apache/airflow/discussions/43338#discussioncomment-11043560 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
