35 lines
786 B
Django/Jinja
35 lines
786 B
Django/Jinja
[Quadlet]
|
|
DefaultDependencies=false
|
|
|
|
[Unit]
|
|
Description=CA
|
|
|
|
After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Container]
|
|
Image=docker.io/smallstep/step-ca:{{ version['containers']['step'] }}
|
|
|
|
ContainerName=ca
|
|
HostName=ca
|
|
|
|
PublishPort={{ services['ca']['ports']['https'] }}:9000/tcp
|
|
|
|
Volume=%h/containers/ca/certs:/home/step/certs:ro
|
|
Volume=%h/containers/ca/secrets:/home/step/secrets:ro
|
|
Volume=%h/containers/ca/config:/home/step/config:rw
|
|
Volume=%h/containers/ca/db:/home/step/db:rw
|
|
Volume=%h/containers/ca/templates:/home/step/templates:rw
|
|
|
|
Environment="TZ=Asia/Seoul"
|
|
Environment="PWDPATH=/run/secrets/STEP_CA_PASSWORD"
|
|
|
|
Secret=STEP_CA_PASSWORD,target=/run/secrets/STEP_CA_PASSWORD
|
|
|
|
[Service]
|
|
Restart=always
|
|
RestartSec=10s
|
|
TimeoutStopSec=120
|
|
|
|
[Install]
|
|
WantedBy=default.target |