Add HTTPS configuration settings for ServiceControl instances

Author: jasontaylordev

servicecontrol/audit-instances/configuration.md

@@ -283,6 +283,226 @@ Controls whether HTTPS is required when retrieving metadata from the authority.
 > [!WARNING]
 > Setting this to `false` is not recommended for production environments.
 
+## HTTPS
+
+These settings configure [HTTPS](/servicecontrol/security/hosting-guide.md#https).
+
+### ServiceControl.Audit/Https.Enabled
+
+_Added in version 6.9.0_
+
+Controls whether HTTPS is enabled.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_HTTPS_ENABLED` |
+| **App config key** | `ServiceControl.Audit/Https.Enabled` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| bool | `false` |
+
+### ServiceControl.Audit/Https.CertificatePath
+
+_Added in version 6.9.0_
+
+The path to the HTTPS certificate file (PFX format).
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_HTTPS_CERTIFICATEPATH` |
+| **App config key** | `ServiceControl.Audit/Https.CertificatePath` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| string | None |
+
+### ServiceControl.Audit/Https.CertificatePassword
+
+_Added in version 6.9.0_
+
+The password for the HTTPS certificate file.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_HTTPS_CERTIFICATEPASSWORD` |
+| **App config key** | `ServiceControl.Audit/Https.CertificatePassword` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| string | None |
+
+### ServiceControl.Audit/Https.Hsts.Enabled
+
+_Added in version 6.9.0_
+
+Controls whether HTTP Strict Transport Security (HSTS) headers are sent.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_HTTPS_HSTS_ENABLED` |
+| **App config key** | `ServiceControl.Audit/Https.Hsts.Enabled` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| bool | `false` |
+
+### ServiceControl.Audit/Https.Hsts.MaxAge
+
+_Added in version 6.9.0_
+
+The max-age directive value for the HSTS header.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_HTTPS_HSTS_MAXAGE` |
+| **App config key** | `ServiceControl.Audit/Https.Hsts.MaxAge` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| TimeSpan | `365.00:00:00` (365 days) |
+
+### ServiceControl.Audit/Https.Redirection.Enabled
+
+_Added in version 6.9.0_
+
+Controls whether HTTP requests are redirected to HTTPS.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_HTTPS_REDIRECTION_ENABLED` |
+| **App config key** | `ServiceControl.Audit/Https.Redirection.Enabled` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| bool | `false` |
+
+### ServiceControl.Audit/Https.Redirection.HttpPort
+
+_Added in version 6.9.0_
+
+The HTTP port to listen on for redirecting requests to HTTPS.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_HTTPS_REDIRECTION_HTTPPORT` |
+| **App config key** | `ServiceControl.Audit/Https.Redirection.HttpPort` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| int | None |
+
+## Forwarded headers
+
+These settings configure [forwarded headers](/servicecontrol/security/hosting-guide.md#forwarded-headers) for reverse proxy scenarios.
+
+### ServiceControl.Audit/ForwardedHeaders.Enabled
+
+_Added in version 6.9.0_
+
+Controls whether forwarded headers are processed.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_FORWARDEDHEADERS_ENABLED` |
+| **App config key** | `ServiceControl.Audit/ForwardedHeaders.Enabled` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| bool | `false` |
+
+### ServiceControl.Audit/ForwardedHeaders.AllowedHosts
+
+_Added in version 6.9.0_
+
+A semicolon-separated list of allowed proxy hosts. Use `*` to allow any host.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_FORWARDEDHEADERS_ALLOWEDHOSTS` |
+| **App config key** | `ServiceControl.Audit/ForwardedHeaders.AllowedHosts` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| string | None |
+
+### ServiceControl.Audit/ForwardedHeaders.ForwardLimit
+
+_Added in version 6.9.0_
+
+Limits the number of entries in the forwarded headers that are processed.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_FORWARDEDHEADERS_FORWARDLIMIT` |
+| **App config key** | `ServiceControl.Audit/ForwardedHeaders.ForwardLimit` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| int | `1` |
+
+### ServiceControl.Audit/ForwardedHeaders.KnownProxies
+
+_Added in version 6.9.0_
+
+A semicolon-separated list of known proxy IP addresses.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_FORWARDEDHEADERS_KNOWNPROXIES` |
+| **App config key** | `ServiceControl.Audit/ForwardedHeaders.KnownProxies` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| string | None |
+
+## CORS
+
+These settings configure [Cross-Origin Resource Sharing (CORS)](/servicecontrol/security/hosting-guide.md#cors).
+
+### ServiceControl.Audit/Cors.Enabled
+
+_Added in version 6.9.0_
+
+Controls whether CORS restrictions are enabled.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_CORS_ENABLED` |
+| **App config key** | `ServiceControl.Audit/Cors.Enabled` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| bool | `false` |
+
+### ServiceControl.Audit/Cors.AllowedOrigins
+
+_Added in version 6.9.0_
+
+A semicolon-separated list of allowed CORS origins. Use `*` to allow any origin.
+
+| Context | Name |
+| --- | --- |
+| **Environment variable** | `SERVICECONTROL_AUDIT_CORS_ALLOWEDORIGINS` |
+| **App config key** | `ServiceControl.Audit/Cors.AllowedOrigins` |
+| **SCMU field** | N/A |
+
+| Type | Default value |
+| --- | --- |
+| string | None |
+
 ## Embedded database
 
 These settings are not valid for ServiceControl instances hosted in a container.