Differences

This shows you the differences between two versions of the page.

--- hosts:virtual_machines:enclave:smallstep_ca [2023/02/21 01:30] – created netbox
+++ hosts:virtual_machines:enclave:smallstep_ca [2023/02/23 01:45] (current) – tcmal
@@ Line 1: / Line 1: @@
 [[meta:autogen:start|]]
+===== Smallstep CA =====
 ^ Name | Smallstep CA |
 ^ Ports | 443 (tcp) |
 ^  | [[https://netbox.tardisproject.uk/ipam/services/17/|View in NetBox.]] |
 [[meta:autogen:end|]]
-====== NAME ======
-^ Port(s) |  |
+Provides internal certificates through ACME. As our network is trusted, this is mostly unused, and only exists for a few services that refuse to run properly without .
-^ Publicly Accessible?   |  |
-^ Upstream       |  |
-Brief description of what the service is.
 ===== Data directories =====
-  * ''/var/lib/...''
+  * ''/var/lib/step-ca/''
-===== Configuration locations =====
+Here is our CA certificate:
-  * ''/etc/...''
+<code>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+</code>
+===== Configuration locations =====
+Handled declaratively by [[https://git.tardisproject.uk/tardis/nix/-/tree/main/profiles/services/pki|Nix]]