TARDIS Project

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
[[meta:autogen:start|]]
===== Smallstep CA =====
^ Name | Smallstep CA |
^ Ports | 443 (tcp) |
^  | [[https://netbox.tardisproject.uk/ipam/services/17/|View in NetBox.]] |
[[meta:autogen:end|]]

Provides internal certificates through ACME. As our network is trusted, this is mostly unused, and only exists for a few services that refuse to run properly without .

===== Data directories =====

  * ''/var/lib/step-ca/''

Here is our CA certificate:

<code>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</code>

===== Configuration locations =====

Handled declaratively by [[https://git.tardisproject.uk/tardis/nix/-/tree/main/profiles/services/pki|Nix]]