step-ca
step-ca (by smallstep) ready to go for your internal network.
this project was set up for use with nginx-proxy in a local network environment to run several services with hopefully network-wide trusted certificates.
if you have any questions or found a bug feel free to get in touch with me.
configuration
there's not much to configure with step-ca. to setup a new .env file you can either run the setup.sh script or just copy the env.sample file to .env and configure the values the way you like. if you do the configuration manually don't forget to create the data directory.
the default port is 9000 and does not have to be changed except that port is already in use on your system.
all the rest is default step-ca configuration (see the docs).
initialization
after running the container you may want enable acme as this is not the case by default. just run the following command
docker compose exec step-ca step ca provisioner add acme --type ACME
or connect to a container shell and run the command there.
after that you should be able to use your own ca with an acme client.
details: https://smallstep.com/docs/step-ca/provisioners#acme
links
- this repo
https://gitea.wululu.de/dede/step-ca - step-ca docs
https://smallstep.com/docs/step-ca/ - docker tls ca
https://smallstep.com/docs/tutorials/docker-tls-certificate-authority - github
https://github.com/smallstep/certificates
disclaimer
step-ca is an open source project by smallstep and not associated with this repository. this repository aims to provide a preconfigured and git-enabled way of configuration management for step-ca including some features that i found useful.
2022-11-04
dede