• 0 Posts
  • 253 Comments
Joined 3 years ago
cake
Cake day: July 22nd, 2023

help-circle
  • I have no clue as I’ve not set this up myself unfortunately. :(

    There are also certain Linux distros have SElinux enabled ( like red hat or fedora ). This could also block docker from accessing the file if it is enabled.

    You’d have to search online how to set a policy in selinux to allow it.

    SElinux does not appear in Ubuntu/Debian based distros.

    Easiest check would be to run getenforce. If it works and it returns 1 it’s enabled and possibly the culprit. You can try running your docker after running setenforce 0. This will temporarily disable it until a restart IIRC. You can enable it again by setting it to 1.

    I wouldn’t recommend disablint it permanently














  • Personally? No I’ve never bought a cert before. Given there’s free alternatives and it’s a homelab it doesn’t make sense. Otherwise I’ve used them on AWS, where ACM also just provides them for free.

    What you’re saying is that certificate providers will still charge you and provide certificates for a year, but just provide you with N certificates to span that year?

    E.g. if the duration is 45 days then they will give you 365/45 certificates ?