debops.pki

• Introduction
  • Installation
• Getting started
  • Initial configuration
  • Useful global parameters
  • Example inventory
  • Example playbook
• PKI realms structure
  • PKI realm overview
  • The application view
  • Example nginx configuration
  • The PKI realm directory structure
  • How a PKI realm is created
• Internal Certificate Authorities
  • Layout of Certificate Authorities
  • Security of an internal CA
• ACME Integration
  • Prerequisites
  • Let's Encrypt rate limits
  • How ACME certificates are managed
  • Certificate renewal
  • Example: Certificate for apex domain and subdomains
  • Example: Certificate for subdomains excluding the apex domain
  • ACME configuration variables
• External certificates
  • Required files
  • Static private keys and certificates
  • Certificates managed by a custom script
• debops.pki default variables
  • Global PKI configuration
  • Automatic Certificate Management Environment
  • Required software packages
  • Directory, file and user/group configuration
  • Certificate sign times
  • Configuration of PKI Realms
  • Internal Certificate Authorities
  • Custom file management
  • System-wide CA Certificates
• Default variable details
  • pki_private_groups_present
  • pki_realms
  • pki_authorities
• System CA certificates
  • Configuration of system CA certificates
  • Local Root CA certificates
• Custom file management
  • Examples
• Custom hook scripts
  • Execution environment
  • Known script states
  • Example nginx hook
• Ansible integration
• Copyright