Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating readme to include additional steps required for use on a sto… #8

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

jpreston84
Copy link

…ck FreeIPA install.

Copy link
Contributor

@nicki-krizek nicki-krizek left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi, thanks for improving the readme. I left a couple of inline comments.

* run setup-le.sh script once to prepare the machine. The script will:
* install Let's Encrypt client package
* install Let's Encrypt CA certificates into FreeIPA certificate store
* requests new certificate for FreeIPA web interface
* run renew-le.sh script once a day: it will renew the cert as necessary
* run "crontab -e" as root
* add the line "* * * * * /root/ipa-le/renew-le.sh"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This runs the script every minute, which is probably overkill and isn't in line with "run it once a day" mentioned previously.

* clone/unpack all scripts including "ca" subdirectory somewhere (/root/ipa-le is the default)
* set WORKDIR variable to the directory you cloned the repository to in scripts setup-le.sh and renew-le.sh
* set EMAIL variable in script renew-le.sh
* run "yum install dnf" (a stock FreeIPA machine doesn't have dnf installed)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fedora has dnf by default. Perhaps this could be changed to "make sure you have dnf installed"?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants