sunet-cdn/cdn-ops
2
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Enable ACME provisioner at init

Browse source
This commit is contained in:
Patrik Lundin 2024-10-08 16:50:46 +02:00
parent 6354f6faaa
commit 22a2029cf9
Signed by: patlu
GPG key ID: A0A812BA2249F294
2 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
global/overlay/etc/puppet/modules/cdn/manifests/ca.pp
View file

@ -116,7 +116,4 @@ class cdn::ca(
creates => '/root/.step/config/defaults.json', creates => '/root/.step/config/defaults.json',
onlyif => 'test -f /opt/step-ca/data/certs/root_ca.crt' onlyif => 'test -f /opt/step-ca/data/certs/root_ca.crt'
} }
# Enable acme
# step ca provisioner add acme --type ACME --admin-subject=step --admin-password-file=/opt/step-ca/init/secrets/provisioner-password
} }

1
global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb
View file

@ -11,3 +11,4 @@ services:
- DOCKER_STEPCA_INIT_DNS_NAMES=localhost,<%= @networking['fqdn'] %> - DOCKER_STEPCA_INIT_DNS_NAMES=localhost,<%= @networking['fqdn'] %>
- DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT=true - DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT=true
- DOCKER_STEPCA_INIT_PASSWORD_FILE=/init-secrets/key-password - DOCKER_STEPCA_INIT_PASSWORD_FILE=/init-secrets/key-password
- DOCKER_STEPCA_INIT_ACME=true