Commit Graph

181 Commits

Author SHA1 Message Date
Arjan H
8a0dbdd8a6 Update README files to make docker-only the primary setup
The install script method is now considered a legacy method
2025-05-31 12:32:14 +02:00
Arjan H
0febdd24e6 Bump boulder version to release-2025-05-27 2025-05-31 12:29:07 +02:00
Arjan H
273b2b83ff Replace acme_tiny.py with certbot as ACME client 2025-05-31 11:21:08 +02:00
Arjan H
4339cdd0c3 Fix cleanup of now obsolete bpkilint container 2025-03-21 20:58:34 +01:00
Arjan H
82f4cf9721 Prevent huge MySQL slow queries log file (#168)
No longer write slow queries to the log file, plus cleanup existing
log files from the install script.
2025-03-21 20:55:14 +01:00
Arjan H
7d518d7ea4 Bump boulder version to release-2025-03-18 2025-03-20 19:57:14 +01:00
Arjan H
407a08a1a3 Bump boulder version to release-2025-03-10 2025-03-13 21:20:26 +01:00
Arjan H
9f69c497c7 Create home dir for edge case where it was removed (#157) 2025-02-25 20:59:59 +01:00
Arjan H
57a2da41b9 Bump boulder version to release-2025-02-14 2025-02-22 09:50:37 +01:00
Arjan H
6f66bc73ac Fix issuer and CRL URLs in certificates 2025-02-16 17:08:44 +01:00
Arjan H
f14a2636c5 Bump boulder version to release-2025-02-04; add redis container
Let's Encrypt has changed the rate limiter to require redis, so we can
no longer remove it from the docker compose filei completely. But at
least we can run it once instead of four instances.
2025-02-10 19:38:38 +01:00
Arjan H
0d985d6b3f Several fixes and tweaks 2025-02-01 17:45:19 +01:00
Arjan H
6d72d32398 Use ceremony tool for generating keys and certs; store keys on SoftHSM
Replace openssl certificate / CRL generation with the tool as used by
Let's Encrypt, storing the keys on SoftHSMv2, a simulated HSM (Hardware
Security Module).
Include migration of old setups where key files were also stored on
disk.
2025-01-31 20:44:48 +01:00
Arjan H
3116c85c2c Bump boulder version to release-2025-01-06 2025-01-12 11:43:41 +01:00
Arjan H
6c40fc1940 Cosmetic: bump year 2025-01-12 10:17:33 +01:00
Arjan H
120048ff30 Bump boulder version to release-2024-12-10 2024-12-13 18:00:40 +01:00
Arjan H
4c842e8977 Bump boulder version to release-2024-10-28 2024-11-01 19:09:54 +01:00
Arjan H
cab022a4c8 Bump boulder version to release-2024-08-30a 2024-08-31 16:04:55 +02:00
Arjan H
cab563d1d7 Bump boulder version to release-2024-07-29 2024-08-30 16:31:07 +02:00
Arjan H
575f738443 Bump boulder version to release-2024-07-10 2024-08-29 18:54:36 +02:00
Arjan H
18b53030a1 Bump boulder version to release-2024-06-10 2024-08-26 20:16:12 +02:00
Arjan H
ddbaa63b5b Bump boulder version to release-2024-05-20 2024-08-24 15:15:21 +02:00
Arjan H
4eb3ad877c Bump boulder version to release-2024-05-06 2024-07-02 19:47:47 +02:00
Arjan H
5d27e00fa4 Bump boulder version to release-2024-04-30 2024-05-04 21:26:13 +02:00
Arjan H
8b116d08e2 Bump boulder version to release-2024-04-08 2024-04-09 21:00:36 +02:00
Arjan H
cbe2f4089c Bump boulder version to release-2024-04-01 2024-04-07 13:47:10 +02:00
Arjan H
df520e64f7 Bump boulder version to release-2024-02-26 2024-03-03 11:41:24 +01:00
Arjan H
df3d112d42 Bump boulder version to release-2024-02-20 2024-02-23 20:18:53 +01:00
Arjan H
e88b72bb2f Bump boulder version to release-2024-02-06 2024-02-06 20:25:29 +01:00
Arjan H
bef3544d5e Bump boulder version to release-2024-01-22 2024-01-26 20:08:22 +01:00
Arjan H
65e4ac1944 Set correct tag for boulder-tools image in install 2024-01-13 11:48:07 +01:00
Arjan H
dec3a1b822 Bump boulder version to release-2024-01-08 2024-01-12 20:37:34 +01:00
Arjan H
0adcce1f1f Cosmetic: bump year 2024-01-07 20:25:43 +01:00
Arjan H
33208bf347 Add way to renew (extend lifetime of) CA certificates (#74) 2023-12-26 11:56:45 +01:00
Arjan H
88899cbd67 Bump boulder version to release-2023-12-04 2023-12-09 14:39:50 +01:00
Arjan H
8ba3b97bbb Bump boulder version to release-2023-11-20 2023-11-23 20:20:59 +01:00
Arjan H
c32f653adb Bump boulder version to release-2023-10-30 2023-11-03 20:09:56 +01:00
Arjan H
abab3a892d Bump boulder version to release-2023-10-04 2023-10-05 19:05:52 +02:00
Arjan H
bef2668f80 Fix issue with some previous remains of older versions 2023-09-24 16:46:20 +02:00
Arjan H
c04e4ffdbc Bump boulder version to release-2023-09-19 2023-09-24 12:54:50 +02:00
ka2er
b0a299ca46 fix missing lab-release dep in some lxc debian 12 container (#91) 2023-09-21 19:00:33 +02:00
Arjan H
736b361228 Bump boulder version to release-2023-09-11 2023-09-20 19:26:33 +02:00
Arjan H
0cc6fb6b93 Bump boulder version to release-2023-08-14 2023-08-17 19:35:56 +02:00
Arjan H
a8a91a36a7 Force recreating containers after docker-compose-plugin downgrade (#76) 2023-07-18 19:26:27 +02:00
Arjan H
7dba946e9a Downgrade docker-compose-plugin v2.19.x to v2.18 (#76) 2023-07-15 18:57:23 +02:00
Arjan H
5fecf57d62 Include optional custom nginx config files (#72)
If you want to control e.g. the ssl_protocols or ssl_ciphers settings,
create a file named 'custom-ssl.inc' in the /home/labca/nginx_data/conf.d/
directory (or when using the docker-only setup, either add a volume mount
or edit the labca_nginx_conf volume to include the file). Similarly,
'custom-base.inc' can be created to e.g. define a custom log format, and
'custom.inc' could be created for any settings on the plain HTTP server
context.
2023-07-15 16:46:49 +02:00
Arjan H
c8afcad3c7 Fix issue with version number on fresh installation 2023-07-12 21:38:47 +02:00
Arjan H
8be46cda73 Bump boulder version to release-2023-07-11 2023-07-12 20:20:38 +02:00
Arjan H
012a7a5d53 Switch from docker-compose to docker compose plugin (#73)
The standalone docker-compose has been deprecated in favor of a plugin
for the compose binary.
2023-07-02 16:10:38 +02:00
Arjan H
cae7dfc5bb Log name of pre-update database backup file 2023-07-01 11:01:09 +02:00