Skip to content

README.md

Latest commit

 

History

History
53 lines (38 loc) · 2.22 KB

README.md

File metadata and controls

53 lines (38 loc) · 2.22 KB
Raw

Self-signed certificates

  1. Edit the certs/openssl.conf to your needs
  2. Create a intermediate CSR openssl req -new -nodes -keyout server.key -out server.csr -config certs/openssl.conf
  3. Create self-signed cert openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt -extensions v3_req -extfile certs/openssl.conf
  4. Check the generated cert openssl x509 -in server.crt -text -noout

Caddy will automatically generate a self-signed certificate. Try it yourself by commenting the tls {$SSL_CERT_FILE} {$SSL_KEY_FILE} line, where I put my own self-signed certificate.

Podman secrets

  1. Run ./scripts/addsecrets.sh to setup the required secret values (might need chmod +x ./scripts/addsecrets.sh first)
  2. Manually add the server certificate and key to a secret 
    podman secret create server.crt server.crt
podman secret create server.key server.key

    You can now delete the server cert and key files, as they are now stored in a podman secret (podman secret ls)

To view a secret podman secret inspect <secretname> --showsecret

Podman compose systemd

  1. podman-compose up --build # Check for errors and CTRL+C to stop
  2. podman-compose down
  3. podman-compose systemd -a create-unit
  4. podman-compose systemd -a register
  5. systemctl --user daemon-reload
  6. sudo loginctl enable-linger $USER
  7. systemctl --user start 'podman-compose@keycloak-compose'

Download packages for offline use

Download requires packages

  1. dnf download --resolve --destdir=./packages podman podman-compose netavark aardvark-dns

Install required packages

  1. sudo dnf install ./packages/*.rpm

Notes

  • Caddy logging can show:
    "failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details."
    This is a OS kernel specific limitation. To fix this on non-BSD systems (eg linux), you can run: 
    sysctl -w net.core.rmem_max=7500000
sysctl -w net.core.wmem_max=7500000
    This command would increase the maximum send and the receive buffer size to roughly 7.5 MB

    This is not persistent! Write these to your sysctl.conf for permanent changes.