2025-01-10 23:14:23 +00:00
|
|
|
#!/usr/bin/env bash
|
|
|
|
|
|
|
|
|
|
# Copyright (c) 2021-2025 community-scripts ORG
|
|
|
|
|
# Author: FWiegerinck
|
|
|
|
|
# License: MIT
|
|
|
|
|
# Source: https://github.com/smallstep/certificates
|
|
|
|
|
|
|
|
|
|
# Import Functions und Setup
|
|
|
|
|
source /dev/stdin <<< "$FUNCTIONS_FILE_PATH"
|
|
|
|
|
color
|
|
|
|
|
verb_ip6
|
|
|
|
|
catch_errors
|
|
|
|
|
setting_up_container
|
|
|
|
|
network_check
|
|
|
|
|
update_os
|
|
|
|
|
|
2025-01-11 00:10:13 +00:00
|
|
|
# Installing Dependencies
|
2025-01-10 23:14:23 +00:00
|
|
|
#msg_info "Installing Dependencies"
|
2025-01-11 00:10:13 +00:00
|
|
|
$STD apk add newt
|
|
|
|
|
$STD apk add openssl
|
2025-01-10 23:14:23 +00:00
|
|
|
#msg_ok "Installed Dependencies"
|
|
|
|
|
|
2025-01-11 22:19:59 +00:00
|
|
|
msg_info "Preparing environment"
|
|
|
|
|
$STD echo "export STEPPATH=/etc/step-ca" > ~/.profile
|
2025-01-13 23:14:55 +00:00
|
|
|
$STD export STEPPATH=/etc/step-ca
|
|
|
|
|
|
|
|
|
|
if [ "$VERBOSE" = "yes" ]; then
|
|
|
|
|
env #Display environment details
|
|
|
|
|
fi
|
2025-01-11 22:19:59 +00:00
|
|
|
msg_ok "Environment prepared"
|
|
|
|
|
|
2025-01-10 23:14:23 +00:00
|
|
|
msg_info "Installing Alpine Step-CA"
|
|
|
|
|
$STD apk add step-cli step-certificates
|
|
|
|
|
msg_ok "Installed Alpine Step-CA"
|
|
|
|
|
|
|
|
|
|
# Initialize CA
|
|
|
|
|
config_dir="/etc/step-ca"
|
|
|
|
|
passwd_file="${config_dir}/password.txt"
|
|
|
|
|
|
2025-01-11 00:16:27 +00:00
|
|
|
msg_info "Generate CA secret"
|
|
|
|
|
CA_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
|
|
|
|
|
$STD cat <<EOF >${passwd_file}
|
2025-01-10 23:14:23 +00:00
|
|
|
${CA_PASS}
|
|
|
|
|
EOF
|
2025-01-13 23:14:55 +00:00
|
|
|
msg_ok "Generated CA secret stored in ${passwd_file}"
|
2025-01-10 23:14:23 +00:00
|
|
|
|
2025-01-11 22:19:59 +00:00
|
|
|
|
|
|
|
|
msg_info "Initialize CA"
|
2025-01-13 23:14:55 +00:00
|
|
|
$STD step ca init --name="$CA_NAME" $CA_DNS --password-file=/etc/step-ca/password.txt --acme --deployment-type=standalone --address=0.0.0.0:443 --provisioner=acme
|
2025-01-11 22:19:59 +00:00
|
|
|
$STD step ca provisioner update acme --x509-min-dur=20m --x509-max-dur=32h --x509-default-dur=24h
|
|
|
|
|
msg_ok "Finished initialization of CA"
|
|
|
|
|
|
2025-01-10 23:14:23 +00:00
|
|
|
# Start application
|
|
|
|
|
msg_info "Starting Alpine Step-CA"
|
|
|
|
|
$STD rc-service step-ca start
|
|
|
|
|
$STD rc-update add step-ca default
|
|
|
|
|
msg_ok "Started Alpine Step-CA"
|
|
|
|
|
|
|
|
|
|
motd_ssh
|
|
|
|
|
customize
|
