From e359f3cd23150cba03eed46c3dc54089171c5f15 Mon Sep 17 00:00:00 2001
From: Dean Sheather <dean@deansheather.com>
Date: Tue, 20 Dec 2022 05:14:37 +1000
Subject: [PATCH] fix: change TLS client auth default to "none" (#5468)

---
 cli/deployment/config.go                | 2 +-
 cli/testdata/coder_server_--help.golden | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/cli/deployment/config.go b/cli/deployment/config.go
index 8d206ba0ed..97177d2359 100644
--- a/cli/deployment/config.go
+++ b/cli/deployment/config.go
@@ -303,7 +303,7 @@ func newConfig() *codersdk.DeploymentConfig {
 				Name:    "TLS Client Auth",
 				Usage:   "Policy the server will follow for TLS Client Authentication. Accepted values are \"none\", \"request\", \"require-any\", \"verify-if-given\", or \"require-and-verify\".",
 				Flag:    "tls-client-auth",
-				Default: "request",
+				Default: "none",
 			},
 			KeyFiles: &codersdk.DeploymentConfigField[[]string]{
 				Name:  "TLS Key Files",
diff --git a/cli/testdata/coder_server_--help.golden b/cli/testdata/coder_server_--help.golden
index 7f5b40a581..43b97ccb21 100644
--- a/cli/testdata/coder_server_--help.golden
+++ b/cli/testdata/coder_server_--help.golden
@@ -198,7 +198,7 @@ Flags:
                                                      "verify-if-given", or
                                                      "require-and-verify".
                                                      Consumes $CODER_TLS_CLIENT_AUTH (default
-                                                     "request")
+                                                     "none")
       --tls-client-ca-file string                    PEM-encoded Certificate Authority file
                                                      used for checking the authenticity of
                                                      client