我正在使用 altoros面料供应链来运行网络。我看到该节点存储了所有生成的私钥。我想停止该节点存储私钥,并仅向用户提供下载私钥的选项。
version: '2'
volumes:
orderer.DOMAIN:
services:
orderer.DOMAIN:
container_name: orderer.DOMAIN
image: hyperledger/fabric-orderer:x86_64-1.1.0
environment:
- ORDERER_GENERAL_LOGLEVEL=debug
- ORDERER_GENERAL_LISTENADDRESS=0.0.0.0
- ORDERER_GENERAL_GENESISMETHOD=file
- ORDERER_GENERAL_GENESISFILE=/etc/hyperledger/configtx/genesis.block
- ORDERER_GENERAL_LOCALMSPID=OrdererMSP
- ORDERER_GENERAL_LOCALMSPDIR=/etc/hyperledger/crypto/orderer/msp
- ORDERER_GENERAL_TLS_ENABLED=true
- ORDERER_GENERAL_TLS_PRIVATEKEY=/etc/hyperledger/crypto/orderer/tls/server.key
- ORDERER_GENERAL_TLS_CERTIFICATE=/etc/hyperledger/crypto/orderer/tls/server.crt
#- ORDERER_GENERAL_TLS_ROOTCAS=[/etc/hyperledger/crypto/orderer/tls/ca.crt, /etc/hyperledger/crypto/peerORG1/tls/ca.crt, /etc/hyperledger/crypto/peerORG2/tls/ca.crt, /etc/hyperledger/crypto/peerORG3/tls/ca.crt]
#TODO remove?
- ORDERER_GENERAL_TLS_ROOTCAS=[/etc/hyperledger/crypto/orderer/tls/ca.crt]
working_dir: /etc/hyperledger
command: orderer
ports:
- ORDERER_PORT:7050
volumes:
- ../artifacts/channel:/etc/hyperledger/configtx
- ../artifacts/crypto-config/ordererOrganizations/DOMAIN/orderers/orderer.DOMAIN/:/etc/hyperledger/crypto/orderer
- orderer.DOMAIN:/var/hyperledger/production/orderer
# - ../artifacts/crypto-config/peerOrganizations/ORG1.DOMAIN/peers/peer0.ORG1.DOMAIN/:/etc/hyperledger/crypto/peerORG1
# - ../artifacts/crypto-config/peerOrganizations/ORG2.DOMAIN/peers/peer0.ORG2.DOMAIN/:/etc/hyperledger/crypto/peerORG2
# - ../artifacts/crypto-config/peerOrganizations/ORG3.DOMAIN/peers/peer0.ORG3.DOMAIN/:/etc/hyperledger/crypto/peerORG3
cli.DOMAIN:
container_name: cli.DOMAIN
extends:
file: base-intercept.yaml
service: cli-base
# volumes:
# - ../artifacts/hosts/MAIN_ORG/cli_hosts:/etc/hosts
# - ../artifacts/crypto-config/ordererOrganizations/DOMAIN/orderers/orderer.DOMAIN/tls:/etc/hyperledger/crypto/orderer/tls
CLI_EXTRA_HOSTS
# simple http server to disseminate certificates
www.DOMAIN:
extends:
file: base-intercept.yaml
service: www-base
container_name: www.DOMAIN
ports:
- WWW_PORT:80