1.1 KiB
step-ca
step-ca ready to go for your internal network.
this project was setup for use with nginx-proxy in a local network environment to run several services with hopefully network-wide trusted certificates.
configuration
there's not much to configure with step-ca. just copy the env.sample file to .env and configure the values the way you like. since port 443 is in use on a monolithic setup very likely, you may want to set a different port there.
all the rest is default step-ca configuration.
initialization
after running the container you may want enable acme as this is not the case by default. just run the following command
docker compose exec step-ca step ca provisioner add acme --type ACME
or connect to a container shell and run the step-ca command there.
after that you should be able to use your own ca with an acme client.
details: https://smallstep.com/docs/step-ca/provisioners#acme
links
- step-ca https://smallstep.com/docs/step-ca/
- docker tls ca https://smallstep.com/docs/tutorials/docker-tls-certificate-authority
- github https://github.com/smallstep/certificates
2022-11-04 dede