Add initial compose file for step-ca

This commit is contained in:
Patrik Lundin 2024-10-08 10:02:48 +02:00
parent 828f9a899d
commit 1803d1c69a
Signed by: patlu
GPG key ID: A0A812BA2249F294
2 changed files with 12 additions and 0 deletions

View file

@ -1,5 +1,6 @@
# Configure a SUNET CDN CA server # Configure a SUNET CDN CA server
class cdn::ca( class cdn::ca(
String $step_ca_version = '0.27.4',
) )
{ {

View file

@ -0,0 +1,11 @@
services:
ca:
image: "smallstep/step-ca:<%= @step_ca_version %>"
volumes:
- /opt/step-ca/data:/home/step
- /opt/step-ca/init/secrets:/init-secrets
environment:
- DOCKER_STEPCA_INIT_NAME=sunet-cdn-ca
- DOCKER_STEPCA_INIT_DNS_NAMES=localhost,<%= @networking['fqdn'] %>
- DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT=true
- DOCKER_STEPCA_INIT_PASSWORD_FILE=/init-secrets/key-password