mirror of
https://github.com/stellarshenson/stellars-jupyterhub-ds.git
synced 2026-03-09 22:50:29 +00:00
69 lines
1.9 KiB
Bash
Executable File
69 lines
1.9 KiB
Bash
Executable File
#!/bin/bash
|
|
# =============================================================================
|
|
# Generate self-signed wildcard certificate for Traefik
|
|
# =============================================================================
|
|
#
|
|
# Usage: ./generate-certs.sh <domain>
|
|
# Example: ./generate-certs.sh lab.stellars-tech.eu
|
|
#
|
|
# Creates:
|
|
# certs/_.domain/cert.pem - Certificate (import to browser)
|
|
# certs/_.domain/key.pem - Private key
|
|
# certs/tls.yml - Traefik TLS configuration
|
|
#
|
|
# =============================================================================
|
|
|
|
set -e
|
|
|
|
DOMAIN="${1:-}"
|
|
|
|
if [ -z "$DOMAIN" ]; then
|
|
echo "Usage: $0 <domain>"
|
|
echo "Example: $0 lab.stellars-tech.eu"
|
|
exit 1
|
|
fi
|
|
|
|
CERT_DIR="certs/_.${DOMAIN}"
|
|
TLS_CONFIG="certs/tls.yml"
|
|
|
|
echo "Generating self-signed certificate for *.${DOMAIN}"
|
|
|
|
# Create certificate directory
|
|
mkdir -p "$CERT_DIR"
|
|
|
|
# Generate self-signed certificate
|
|
openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
|
|
-keyout "${CERT_DIR}/key.pem" \
|
|
-out "${CERT_DIR}/cert.pem" \
|
|
-subj "/CN=*.${DOMAIN}" \
|
|
-addext "subjectAltName=DNS:*.${DOMAIN},DNS:${DOMAIN},DNS:localhost,DNS:*.localhost"
|
|
|
|
# Generate Traefik TLS configuration
|
|
cat > "$TLS_CONFIG" << EOF
|
|
# TLS Configuration for self-signed certificates
|
|
# Wildcard cert: *.${DOMAIN}
|
|
# Import cert.pem to browser for trusted HTTPS
|
|
|
|
tls:
|
|
certificates:
|
|
- certFile: /certs/_.${DOMAIN}/cert.pem
|
|
keyFile: /certs/_.${DOMAIN}/key.pem
|
|
|
|
stores:
|
|
default:
|
|
defaultCertificate:
|
|
certFile: /certs/_.${DOMAIN}/cert.pem
|
|
keyFile: /certs/_.${DOMAIN}/key.pem
|
|
EOF
|
|
|
|
echo ""
|
|
echo "Certificate generated successfully:"
|
|
echo " - ${CERT_DIR}/cert.pem (import to browser)"
|
|
echo " - ${CERT_DIR}/key.pem"
|
|
echo " - ${TLS_CONFIG}"
|
|
echo ""
|
|
echo "Next steps:"
|
|
echo " 1. Edit compose_override.yml - replace YOURDOMAIN with ${DOMAIN}"
|
|
echo " 2. Import ${CERT_DIR}/cert.pem to your browser"
|
|
echo " 3. Run: make start"
|