added setup script, modified README accordingly

This commit is contained in:
2023-01-07 10:58:31 +01:00
parent 4fec865e87
commit 5d635c5cb6
3 changed files with 58 additions and 7 deletions

View File

@@ -4,25 +4,30 @@ step-ca ready to go for your internal network.
this project was setup for use with nginx-proxy in a local network environment to run several services with hopefully network-wide trusted certificates.
# configuration
there's not much to configure with step-ca. just copy the env.sample file to .env and configure the values the way you like. since port 443 is in use on a monolithic setup very likely, you may want to set a different port there.
there's not much to configure with step-ca. to setup a new `.env` file you can either run the `setup.sh` script or just copy the `env.sample` file to `.env` and configure the values the way you like. if you do the configuration manually don't forget to create the data directory.
all the rest is default step-ca configuration.
the default port is 9000 and does not have to be changed except that port is already in use on your system.
all the rest is default step-ca configuration (see the [docs](https://smallstep.com/docs/step-ca/)).
# initialization
after running the container you may want enable acme as this is not the case by default. just run the following command
`docker compose exec step-ca step ca provisioner add acme --type ACME`
docker compose exec step-ca step ca provisioner add acme --type ACME
or connect to a container shell and run the `step-ca` command there.
or connect to a container shell and run the command there.
after that you should be able to use your own ca with an acme client.
details: https://smallstep.com/docs/step-ca/provisioners#acme
# links
* step-ca https://smallstep.com/docs/step-ca/
* docker tls ca https://smallstep.com/docs/tutorials/docker-tls-certificate-authority
* github https://github.com/smallstep/certificates
* step-ca docs
https://smallstep.com/docs/step-ca/
* docker tls ca
https://smallstep.com/docs/tutorials/docker-tls-certificate-authority
* github
https://github.com/smallstep/certificates
2022-11-04
dede