mirrors/caddy-website
1
0
Fork 0
mirror of https://github.com/caddyserver/website.git synced 2025-06-22 14:10:32 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

More clarifications

Browse source
This commit is contained in:
Matthew Holt 2022-03-10 12:07:48 -07:00
parent 2f767c2f34
commit ae5cbd00a0
No known key found for this signature in database
GPG key ID: 2A349DD577D586A5
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/docs/markdown/caddyfile/directives/tls.md
View file

@ -198,10 +198,10 @@ These manager modules come standard with the `tls` directive:
Get certificates from a locally-running [Tailscale](https://tailscale.com) instance. [HTTPS must be enabled in your Tailscale account](https://tailscale.com/kb/1153/enabling-https/) (or your open source [Headscale server](https://github.com/juanfont/headscale)); and the Caddy process must either be running as root, or you must configure `tailscaled` to give your Caddy user [permission to fetch certificates](https://github.com/caddyserver/caddy/pull/4541#issuecomment-1021568348). Get certificates from a locally-running [Tailscale](https://tailscale.com) instance. [HTTPS must be enabled in your Tailscale account](https://tailscale.com/kb/1153/enabling-https/) (or your open source [Headscale server](https://github.com/juanfont/headscale)); and the Caddy process must either be running as root, or you must configure `tailscaled` to give your Caddy user [permission to fetch certificates](https://github.com/caddyserver/caddy/pull/4541#issuecomment-1021568348).
**NOTE: This is usually unnecessary! Caddy automatically uses Tailscale for all *.ts.net domains without any configuration.** _**NOTE: This is usually unnecessary!** Caddy automatically uses Tailscale for all `*.ts.net` domains without any extra configuration._
```caddy-d ```caddy-d
get_certificate tailscale get_certificate tailscale # often unnecessary!
``` ```
@ -213,7 +213,7 @@ Get certificates by making an HTTP(S) request. The response must have a 200 stat
get_certificate http <url> get_certificate http <url>
``` ```
- **url** <span id="url"/> is the fully-qualified URL to which to make the request. It is strongly advised that this be a local endpoint for performance reasons. - **url** <span id="url"/> is the fully-qualified URL to which to make the request. It is strongly advised that this be a local endpoint for performance reasons. The URL will be augmented with the following query string parameters: `server_name` = SNI value, `signature_schemes` = comma-separated list of hex IDs of signature algorithms, and `cipher_suites` = comma-separated list of hex IDS of cipher suites.
@ -253,11 +253,11 @@ tls {
} }
``` ```
Get the certificate from Tailscale, instead of having Caddy manage it: Get the certificate chain via HTTP, instead of having Caddy manage it:
```caddy-d ```caddy-d
tls { tls {
get_certificate tailscale get_certificate http http://localhost:9007/certs
} }
``` ```