added setup script, modified README accordingly
This commit is contained in:
19
README.md
19
README.md
@@ -4,25 +4,30 @@ step-ca ready to go for your internal network.
|
||||
this project was setup for use with nginx-proxy in a local network environment to run several services with hopefully network-wide trusted certificates.
|
||||
|
||||
# configuration
|
||||
there's not much to configure with step-ca. just copy the env.sample file to .env and configure the values the way you like. since port 443 is in use on a monolithic setup very likely, you may want to set a different port there.
|
||||
there's not much to configure with step-ca. to setup a new `.env` file you can either run the `setup.sh` script or just copy the `env.sample` file to `.env` and configure the values the way you like. if you do the configuration manually don't forget to create the data directory.
|
||||
|
||||
all the rest is default step-ca configuration.
|
||||
the default port is 9000 and does not have to be changed except that port is already in use on your system.
|
||||
|
||||
all the rest is default step-ca configuration (see the [docs](https://smallstep.com/docs/step-ca/)).
|
||||
|
||||
# initialization
|
||||
after running the container you may want enable acme as this is not the case by default. just run the following command
|
||||
|
||||
`docker compose exec step-ca step ca provisioner add acme --type ACME`
|
||||
docker compose exec step-ca step ca provisioner add acme --type ACME
|
||||
|
||||
or connect to a container shell and run the `step-ca` command there.
|
||||
or connect to a container shell and run the command there.
|
||||
|
||||
after that you should be able to use your own ca with an acme client.
|
||||
|
||||
details: https://smallstep.com/docs/step-ca/provisioners#acme
|
||||
|
||||
# links
|
||||
* step-ca https://smallstep.com/docs/step-ca/
|
||||
* docker tls ca https://smallstep.com/docs/tutorials/docker-tls-certificate-authority
|
||||
* github https://github.com/smallstep/certificates
|
||||
* step-ca docs
|
||||
https://smallstep.com/docs/step-ca/
|
||||
* docker tls ca
|
||||
https://smallstep.com/docs/tutorials/docker-tls-certificate-authority
|
||||
* github
|
||||
https://github.com/smallstep/certificates
|
||||
|
||||
2022-11-04
|
||||
dede
|
||||
|
||||
Reference in New Issue
Block a user