Commander1024
c018bfe361
Improve CSP and favicon handling while preventing terminal resize loops. Configure mbedTLS allocations in external PSRAM and document its security implications.
37 lines
1.3 KiB
Plaintext
37 lines
1.3 KiB
Plaintext
# ESP32-S3-WROOM-1-N16R8 hardware configuration
|
|
CONFIG_ESPTOOLPY_FLASHSIZE_16MB=y
|
|
CONFIG_SPIRAM=y
|
|
CONFIG_SPIRAM_MODE_OCT=y
|
|
CONFIG_SPIRAM_SPEED_80M=y
|
|
CONFIG_SPIRAM_BOOT_INIT=y
|
|
CONFIG_SPIRAM_USE_CAPS_ALLOC=y
|
|
|
|
# Keep concurrent HTTPS handshakes from exhausting scarce internal DRAM.
|
|
# Active TLS material remains unencrypted in PSRAM until the hardening phase.
|
|
CONFIG_MBEDTLS_EXTERNAL_MEM_ALLOC=y
|
|
# CONFIG_MBEDTLS_INTERNAL_MEM_ALLOC is not set
|
|
|
|
# Native USB OTG presents one CDC-ACM interface on the ESP32-S3 USB port.
|
|
CONFIG_TINYUSB_CDC_ENABLED=y
|
|
CONFIG_TINYUSB_CDC_COUNT=1
|
|
CONFIG_TINYUSB_CDC_RX_BUFSIZE=1024
|
|
CONFIG_TINYUSB_CDC_TX_BUFSIZE=1024
|
|
CONFIG_TINYUSB_CDC_EP_BUFSIZE=512
|
|
|
|
# Enable the TLS-only administration server; no plaintext HTTP listener is created.
|
|
CONFIG_ESP_HTTPS_SERVER_ENABLE=y
|
|
CONFIG_HTTPD_WS_SUPPORT=y
|
|
# Keep work submission bounded; one-second socket timeouts limit shared-task stalls.
|
|
# CONFIG_HTTPD_QUEUE_WORK_BLOCKING is not set
|
|
|
|
# Certificate generation and HTTPS startup use nested cryptographic buffers.
|
|
CONFIG_ESP_MAIN_TASK_STACK_SIZE=8192
|
|
|
|
# Support WPA3-SAE for station profiles and the WPA2/WPA3 fallback AP.
|
|
CONFIG_ESP_WIFI_ENABLE_WPA3_SAE=y
|
|
CONFIG_ESP_WIFI_ENABLE_SAE_H2E=y
|
|
CONFIG_ESP_WIFI_SOFTAP_SAE_SUPPORT=y
|
|
|
|
# Keep diagnostic and interactive-console logging concise but useful.
|
|
CONFIG_LOG_DEFAULT_LEVEL_INFO=y
|