generated from GamingChaos/docker-compose
GamingChaos
c8118ee474
- Use ssl/ certificates for gRPC and HTTP TLS - Add Prometheus scrape configs for local and gitea targets Keep matrix and caddy scrape targets commented for future use - Switch exporters to OTLP gRPC and enable TLS certs - Remove Tempo, Mimir, Loki exporters - Use batch + resource_detection/docker in all pipelines - Enable telemetry metrics - Remove top-level volumes from docker-compose - Mount docker socket and add docker group - Drop unused depends_on entries - Fix cert script to chown ssl dir with sudo -R
29 lines
915 B
Bash
Executable File
29 lines
915 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
[ -d ssl ] || mkdir ssl
|
|
cd ssl
|
|
|
|
hostname=$(hostname)
|
|
lgtm_ssl=/home/vst/lgtm-stack/ssl
|
|
function request-certificate {
|
|
type=$1
|
|
scsr=$lgtm_ssl/$hostname.$type.csr
|
|
scrt=$lgtm_ssl/$hostname.$type.crt
|
|
|
|
openssl req -new -newkey rsa:2048 -nodes -keyout $type.key -out $type.csr -subj "/CN=$hostname.stuyckv.local"
|
|
scp $type.csr vst@shion.stuyckv.local:$scsr
|
|
|
|
ssh vst@shion.stuyckv.local openssl x509 -req -in $scsr -CA $lgtm_ssl/ca.crt -CAkey $lgtm_ssl/ca.key -CAcreateserial -out $scrt -days 365
|
|
scp vst@shion.stuyckv.local:$scrt $type.crt
|
|
rm $type.csr
|
|
}
|
|
|
|
request-certificate client
|
|
request-certificate server
|
|
# openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -subj "/CN=$(hostname).stuyckv.local"
|
|
# openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 365
|
|
|
|
cd ..
|
|
|
|
sudo chown -R 10001:10001 ./ssl
|