GitHub user 3BK added a comment to the discussion: Out of the box 
gunicorn_config.py doesn't allow cipher suite configuration.

@potiuk  You are correct.   

The following launches a TLSv1.3 webserver.
`GUNICORN_CMD_ARGS=`--ciphers ECDHE-AESGCM:!ECDSA'  airflow standalone`

I had expected GUNICORN_CMD_ARGS to be overridden.

Please be advised that excessive use of environment variables can be an 
indicator of compromise(IOC).

refs: 
https://docs.gunicorn.org/en/latest/configure.html
https://github.com/apache/airflow/blob/main/airflow/cli/commands/webserver_command.py#L324



GitHub link: 
https://github.com/apache/airflow/discussions/43338#discussioncomment-11043560

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: [email protected]

Reply via email to