Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Traefik-forward-auth needs step-ca vars in config-hook #238

Open
mcmikemn opened this issue Jun 14, 2024 · 1 comment
Open

Traefik-forward-auth needs step-ca vars in config-hook #238

mcmikemn opened this issue Jun 14, 2024 · 1 comment

Comments

@mcmikemn
Copy link
Collaborator

mcmikemn commented Jun 14, 2024

Traefik-forward-auth uses step-ca vars in .env-dist, but you can only configure them by manually editing your instance's .env file. We should add them to Makefile's config-hook.

Or perhaps instead of asking user to enter them, Makefile can pull the step-ca values from the traefik .env file of the same context-instance, since traefik-forward-auth is being installed on that traefik.

@EnigmaCurry
Copy link
Owner

Having an external step-ca server should be the common scenario, so I don't think it should pull it from the context. Example questions:

? Does the authentication provider require a custom Certificate Authoriy (Step-CA)? (y/N)

TRAEFIK_FORWARD_AUTH_STEP_CA_ENDPOINT: Enter the Step-CA endpoint:
: ca.example.com

TRAEFIK_FORWARD_AUTH_STEP_CA_FINGERPRINT: Enter the Step-CA fingerprint:
: xxxxx

? Should the default Certificate Authority list (system provided) be cleared? (y/N)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants