sthope/sthope-examples
1
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update 'docker_portainer_stacks/portainer/setup-dockerapi-slave-withtls'

Browse Source
This commit is contained in:
sthope 2021-09-02 23:56:43 +02:00
parent 1cc0328f3c
commit 2b0948ffce
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
docker_portainer_stacks/portainer/setup-dockerapi-slave-withtls
View File

@ -4,7 +4,7 @@
################################### ###################################
#### USAGE #### USAGE
# clear;bash -c "$(wget -qLO - https://git.sthope.dev/sthope/sthope-examples/raw/branch/master/docker_portainer_stacks/portainer/setup-dockerapi-notls)" # clear;bash -c "$(wget -qLO - https://git.sthope.dev/sthope/sthope-examples/raw/branch/master/docker_portainer_stacks/portainer/setup-dockerapi-slave-withtls)"
# #
openssl genrsa -out key.pem 4096 openssl genrsa -out key.pem 4096
@ -18,13 +18,13 @@ echo extendedKeyUsage = clientAuth > extfile-client.cnf
openssl x509 -req -days 365 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem \ openssl x509 -req -days 365 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem \
-CAcreateserial -out cert.pem -extfile extfile-client.cnf -CAcreateserial -out cert.pem -extfile extfile-client.cnf
chmod -v 0400 ca-key.pem key.pem server-key.pem # chmod -v 0400 ca-key.pem key.pem server-key.pem
chmod -v 0444 ca.pem server-cert.pem cert.pem # chmod -v 0444 ca.pem server-cert.pem cert.pem
mkdir ~/.certs mkdir -p /certs/
cp ca.pem ~/.certs cp ca.pem /certs/
cp server-cert.pem ~/.certs cp server-cert.pem /certs/
cp server-key.pem ~/.certs cp server-key.pem /certs/
p(){ p(){
port=$(( 100+( $(od -An -N2 -i /dev/random) )%(1023+1) )) port=$(( 100+( $(od -An -N2 -i /dev/random) )%(1023+1) ))
@ -41,7 +41,7 @@ cat << EOF > /etc/systemd/system/docker.service.d/startup_options.conf
# /etc/systemd/system/docker.service.d/override.conf # /etc/systemd/system/docker.service.d/override.conf
[Service] [Service]
ExecStart= ExecStart=
ExecStart=/usr/bin/dockerd --tlsverify --tlscacert=/home/pi/.certs/ca.pem --tlscert=/home/pi/.certs/server-cert.pem --tlskey=/home/pi/.certs/server-key.pem -H fd:// -H tcp://0.0.0.0:$(p) ExecStart=/usr/bin/dockerd --tlsverify --tlscacert=/certs/ca.pem --tlscert=/certs/server-cert.pem --tlskey=/certs/server-key.pem -H fd:// -H tcp://0.0.0.0:$(p)
EOF EOF
systemctl daemon-reload systemctl daemon-reload