From 317094a71ea8431f1f7f6db7c0cf86bc3aad6bd3 Mon Sep 17 00:00:00 2001 From: Erhhung Yuan Date: Sun, 3 Aug 2025 18:00:28 -0700 Subject: [PATCH] enh: Added env var hints on using TLS certs with private CA --- docs/getting-started/env-configuration.md | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/docs/getting-started/env-configuration.md b/docs/getting-started/env-configuration.md index 605e5224..c0fefea5 100644 --- a/docs/getting-started/env-configuration.md +++ b/docs/getting-started/env-configuration.md @@ -1300,7 +1300,13 @@ modeling files for reranking. - Type: `bool` - Default: `False` -- Description: Use gPRC interface whenever possible +- Description: Use gPRC interface whenever possible. + +:::info + +If set to `True`, and `QDRANT_URI` points to a self-hosted server with TLS enabled and certificate signed by a private CA, set the environment variable `GRPC_DEFAULT_SSL_ROOTS_FILE_PATH` to the path of your PEM-encoded CA certificates file. See the [gRPC Core Docs](https://grpc.github.io/grpc/core/md_doc_environment_variables.html) for more information. + +::: #### `QDRANT_GRPC_PORT` @@ -3240,6 +3246,12 @@ These variables are not specific to Open WebUI but can still be valuable in cert - Type: `str` - Description: Sets the endpoint URL for S3 storage. +:::info + +If the endpoint is an S3-compatible provider like MinIO that uses a TLS certificate signed by a private CA, set the environment variable `AWS_CA_BUNDLE` to the path of your PEM-encoded CA certificates file. See the [Amazon SDK Docs](https://docs.aws.amazon.com/sdkref/latest/guide/feature-gen-config.html) for more information. + +::: + #### `S3_KEY_PREFIX` - Type: `str`