The *dch-webhooks* tool now provides an operation for hosts to request a signed SSH certificate from the SSH CA. It's primarily useful for unattended deployments like CoreOS Ignition, where hosts do not have any credentials to authenticate with the CA directly.
10 lines
466 B
Bash
10 lines
466 B
Bash
FIREFLY_URL=http://firefly-iii.firefly-iii.svc.cluster.local:8080
|
|
FIREFLY_AUTH_TOKEN=/run/secrets/du5t1n.me/firefly/firefly.token
|
|
PAPERLESS_URL=http://paperless-ngx.paperless-ngx.svc.cluster.local:8000
|
|
PAPERLESS_AUTH_TOKEN=/run/secrets/du5t1n.me/paperless/paperless.token
|
|
|
|
STEP_CA_URL=https://ca.pyrocufflink.blue:32599
|
|
STEP_ROOT=/run/dch-root-ca.crt
|
|
STEP_PROVISIONER=host-bootstrap
|
|
STEP_PROVISIONER_PASSWORD_FILE=/run/secrets/du5t1n.me/step-ca/provisioner.password
|