services:
  ca:
    image: "smallstep/step-ca:<%= @step_ca_version %>"
    volumes:
      - /opt/step-ca/data:/home/step
      - /opt/step-ca/init/secrets:/init-secrets
    ports:
      - 9000:9000
    environment:
      - DOCKER_STEPCA_INIT_NAME=sunet-cdn-ca
      - DOCKER_STEPCA_INIT_DNS_NAMES=localhost,<%= @networking['fqdn'] %>
      - DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT=true
      - DOCKER_STEPCA_INIT_PASSWORD_FILE=/init-secrets/key-password
      - DOCKER_STEPCA_INIT_ACME=true