dcape-app-step-ca

step-ca application package for dcape.

Docker image used

• smallstep/step-ca

Requirements

• linux 64bit (git, make, wget, gawk, openssl)
• docker
• dcape with prepared traefik
• Git service (github, gitea or gogs)

Traefik config

traefik.yml

certificatesResolvers:
  stepca:
    acme:
      email: USER@EMAIL
      storage: /etc/traefik/acme.json
      caServer: "https://APP_SITE:9000/acme/acme/directory"
      certificatesDuration: 2160 # 90 days
      tlsChallenge: true
      dnsChallenge:
        provider: pdns
      httpChallenge:
        entryPoint: web

traefik.env

# https://smallstep.com/docs/tutorials/acme-protocol-acme-clients/#traefik
LEGO_CA_CERTIFICATES=/etc/traefik/root_ca.crt

Usage

• Fork this repo in your Git service
• Setup deploy hook
• Run "Test delivery" (config sample will be created in dcape)
• Edit and save config (enable deploy etc)
• Run "Test delivery" again (app will be installed and started on webhook host)

See also: Deploy setup (in Russian)

License

The MIT License (MIT), see LICENSE.

Copyright (c) 2023 Alexey Kovrizhkin lekovr+dopos@gmail.com