doc/_includes/_multi_host_install_custom_certificates.liquid

   1 {% comment %}
   2 Copyright (C) The Arvados Authors. All rights reserved.
   3
   4 SPDX-License-Identifier: CC-BY-SA-3.0
   5 {% endcomment %}
   6
   7 Copy your certificates to the directory specified with the variable @CUSTOM_CERTS_DIR@ in the remote directory where you copied the @provision.sh@ script. The provision script will find the certificates there.
   8
   9 The script expects cert/key files with these basenames (matching the role except for <i>keepweb</i>, which is split in both <i>download / collections</i>):
  10
  11 * "controller"
  12 * "websocket"
  13 * "workbench"
  14 * "workbench2"
  15 * "webshell"
  16 * "download"         # Part of keepweb
  17 * "collections"      # Part of keepweb
  18 * "keepproxy"
  19
  20 E.g. for 'keepproxy', the script will look for
  21
  22 <notextile>
  23 <pre><code>${CUSTOM_CERTS_DIR}/keepproxy.crt
  24 ${CUSTOM_CERTS_DIR}/keepproxy.key
  25 </code></pre>
  26 </notextile>
  27
  28 Make sure that all the FQDNs that you will use for the public-facing applications (API/controller, Workbench, Keepproxy/Keepweb) are reachable.