2024-10-27 22:32:45 +00:00
|
|
|
# Instructions
|
|
|
|
|
|
2024-10-27 23:57:25 +00:00
|
|
|
## docker-compose
|
2024-11-06 23:14:10 +00:00
|
|
|
1. copy `config.env.exmaple` to `config.env` and edit
|
|
|
|
|
2. copy `include.conf.example` to `custom/include.conf`
|
|
|
|
|
3. follow steps from [#easyrsa] section
|
|
|
|
|
4. `docker-compose build`
|
|
|
|
|
5. `docker-compose up -d`
|
2024-11-06 20:16:51 +00:00
|
|
|
|
|
|
|
|
# easyrsa
|
|
|
|
|
On the hub:
|
2024-11-06 23:14:44 +00:00
|
|
|
- cd to `easyrsa3` directory
|
2024-11-06 20:16:51 +00:00
|
|
|
- `./easyrsa init-pki`
|
|
|
|
|
- `./easyrsa build-ca`
|
|
|
|
|
- `./easyrsa build-server-full hub.stuff.ts.net`
|
|
|
|
|
- `./easyrsa gen-crl`
|
|
|
|
|
- `./easyrsa gen-dh`
|
|
|
|
|
|
|
|
|
|
The `.gitignore` takes care of keeping secrets out of the git repo:
|
|
|
|
|
|
|
|
|
|
- copy `ca.crt`, `crl.pem`, and `dh.pem` to `custom/`
|
|
|
|
|
- `chown -R 999 custom/`
|
|
|
|
|
- copy hub cert and key to `custom/server.crt` and `custom/server.key`
|
|
|
|
|
- manually copy certs and keys as well as `dh.pem` to each leaf.
|
