For the complete documentation index, see llms.txt. This page is also available as Markdown.

Network Configuration

Network requirements and configuration for umh-core edge deployments.

Outbound Connections

umh-core requires outbound connectivity to the Management Console:

Destination
Protocol
Port
Purpose

management.umh.app

HTTPS

443

Configuration sync, status reporting, action retrieval

No inbound connections are required from the internet.

Corporate Firewall Configuration

TLS Inspection (MITM)

If your corporate firewall performs TLS inspection, you may see certificate errors. Solutions:

Option 1: Add Corporate CA Certificate (Recommended)

Add your corporate CA certificate to the container's trusted certificates.

Option 2: Disable Certificate Validation (Last Resort)

# config.yaml
agent:
  communicator:
    allowInsecureTLS: true  # WARNING: Only use if corporate firewall blocks secure connections

Or via environment variable:

Security Warning: The allowInsecureTLS option disables certificate validation. Only use this if:

  • You're behind a corporate firewall that you trust

  • You cannot add your corporate CA certificate

  • You understand the security implications

Proxy Configuration

If your network requires a proxy:

Supported environment variables: HTTP_PROXY, HTTPS_PROXY, NO_PROXY (and their lowercase variants).

Authenticated Proxies

Include credentials in the proxy URL:

Supported proxy types: HTTP and HTTPS.

Common Configuration

In most corporate environments, proxy usage and TLS inspection go together. If you need to configure a proxy, you'll likely also need to add your corporate CA certificate to handle TLS inspection.

Last updated