41 lines
1.8 KiB
Markdown
41 lines
1.8 KiB
Markdown
# step-ca
|
|
step-ca (by [smallstep](https://smallstep.com/certificates/)) ready to go for your internal network.
|
|
|
|
this project was set up for use with nginx-proxy in a local network environment to run several services with hopefully network-wide trusted certificates.
|
|
|
|
if you have any questions or found a bug feel free to get in touch with me.
|
|
|
|
# configuration
|
|
there's not much to configure with step-ca. to setup a new `.env` file you can either run the `setup.sh` script or just copy the `env.sample` file to `.env` and configure the values the way you like. if you do the configuration manually don't forget to create the data directory.
|
|
|
|
the default port is 9000 and does not have to be changed except that port is already in use on your system.
|
|
|
|
all the rest is default step-ca configuration (see the [docs](https://smallstep.com/docs/step-ca/)).
|
|
|
|
# initialization
|
|
after running the container you may want enable acme as this is not the case by default. just run the following command
|
|
|
|
docker compose exec step-ca step ca provisioner add acme --type ACME
|
|
|
|
or connect to a container shell and run the command there.
|
|
|
|
after that you should be able to use your own ca with an acme client.
|
|
|
|
details: https://smallstep.com/docs/step-ca/provisioners#acme
|
|
|
|
# links
|
|
* this repo
|
|
https://gitea.wululu.de/dede/step-ca
|
|
* step-ca docs
|
|
https://smallstep.com/docs/step-ca/
|
|
* docker tls ca
|
|
https://smallstep.com/docs/tutorials/docker-tls-certificate-authority
|
|
* github
|
|
https://github.com/smallstep/certificates
|
|
|
|
# disclaimer
|
|
step-ca is an open source project by smallstep and not associated with this repository. this repository aims to provide a preconfigured and git-enabled way of configuration management for step-ca including some features that i found useful.
|
|
|
|
2022-11-04
|
|
dede
|