EnigmaCurry / d.rymcg.tech

A collection of self-hosted docker-compose projects with Traefik reverse proxy, integrated auth, and administrative Makefiles for easy maintainance
MIT License
46 stars 9 forks source link

Remove PostgreSQL adhoc PKI to prefer an external Step-CA instance. #221

Open EnigmaCurry opened 1 month ago

EnigmaCurry commented 1 month ago

Right now, Postgres uses step-ca to create a new CA for each instance, only to sign one key for postgres.

This should be removed, in favor of the external Step-CA instance, allowing it to be common for instances for all/any of your domains.