server content

This commit is contained in:
John Lancaster
2025-12-28 15:32:46 -06:00
parent 202c8f302e
commit aa7f8ff548

View File

@@ -21,7 +21,7 @@ Connect solely through wireguard to `192.168.1.142` and serve the REST server wi
Generate a new private key and (public) certificate
```
step ca certificate soteria.john-stream.com certs/foo.crt certs/foo.key --provisioner admin
step ca certificate soteria.john-stream.com certs/soteria.crt certs/soteria.key --provisioner admin
```
One-time setup for Caddy to be able to trust the Janus CA. This creates a symlink for the root CA.
@@ -32,11 +32,11 @@ ln -s $(step path)/certs/root_ca.crt certs/root_ca.crt
Check certificate
```
openssl x509 -in certs/foo.crt -noout -subject -issuer -ext extendedKeyUsage
openssl x509 -noout -subject -issuer -ext extendedKeyUsage -in certs/soteria.crt
```
```
cat certs/foo.crt certs/foo.key > $(step path)/certs/soteria.pem
cat certs/soteria.crt certs/soteria.key > $(step path)/certs/soteria.pem
```
Add to ~/.bashrc to trust the Janus CA: