sunlight

Documentation

Overview

Command sunlight runs a Certificate Transparency log write-path server.

A YAML config file is required (specified with -c, by default sunlight.yaml), the keys are documented in the Config type.

If the command line flag -testcert is passed, ACME will be disabled and the certificate will be loaded from sunlight.pem and sunlight-key.pem.

Metrics are exposed publicly at /metrics, and logs are written to stderr in human-readable format, and to stdout in JSON format.

A private HTTP debug server is also started on a random port on localhost. It serves the net/http/pprof endpoints, the heavyhitter endpoints, the keylog endpoints, and the stdlog endpoints.