716 B
716 B
Instructions
docker-compose
- copy
config.env.exmaple
toconfig.env
and edit - copy
include.conf.example
tocustom/include.conf
- follow steps from [#easyrsa] section
docker-compose build
docker-compose up -d
easyrsa
On the hub:
- cd to
easyrsa3
directory ./easyrsa init-pki
./easyrsa build-ca
./easyrsa build-server-full hub.stuff.ts.net
./easyrsa gen-crl
./easyrsa gen-dh
The .gitignore
takes care of keeping secrets out of the git repo:
- copy
ca.crt
,crl.pem
, anddh.pem
tocustom/
chown -R 999 custom/
- copy hub cert and key to
custom/server.crt
andcustom/server.key
- manually copy certs and keys as well as
dh.pem
to each leaf.