From 71dfb4e3aedc68d2137ab2e1deca01310d60c2e5 Mon Sep 17 00:00:00 2001 From: Klaas Freitag Date: Sun, 24 Jan 2021 14:33:57 +0100 Subject: [PATCH] Make cert handling in the docs more clear. --- docs/ocis/deployment/basic-remote-setup.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/docs/ocis/deployment/basic-remote-setup.md b/docs/ocis/deployment/basic-remote-setup.md index 7d93936f29e..a3fcac6a49c 100644 --- a/docs/ocis/deployment/basic-remote-setup.md +++ b/docs/ocis/deployment/basic-remote-setup.md @@ -56,11 +56,11 @@ In this example we do not change the default port (`9200`). But this could be ch You need to configure `your-host` in some services to provide the needed public resources. +This snippet will start the ocis server with auto generated self signed certificates: + ```bash PROXY_HTTP_ADDR=0.0.0.0:9200 \ OCIS_URL=https://your-server:9200 \ -PROXY_TRANSPORT_TLS_KEY=./certs/your-host.key \ -PROXY_TRANSPORT_TLS_CERT=./certs/your-host.crt \ KONNECTD_TLS=0 \ ./bin/ocis server ``` @@ -69,7 +69,11 @@ For more configuration options check the configuration section in [ocis](https:/ {{< hint info >}} **TLS Certificate**\ -In this example, we are replacing the default self-signed cert with a CA signed one to avoid the certificate warning when accessing the login page. +If you have a CA signed certificate for your domain, add the following configurations: +``` +PROXY_TRANSPORT_TLS_KEY=./certs/your-host.key \ +PROXY_TRANSPORT_TLS_CERT=./certs/your-host.crt \ +``` {{< /hint >}} ## Use Docker Compose