Please provide client integration options

lizznl

Hi Greg,

Wow this project looks amazing! Clear installation guide also.

Could you please explain me how I could integrate acme client (current OPNSense) and also Traefik instances?

In my current situation I'm using cloudflare DNS challenge to automatically generate the certificates but prefer not to create manual keys/certificates all the time.. Or am i missing something.

I think I am missing a some knowledge or is this product mainly based on creating the keys/certificates manual and retrieving them?

Thanks in advance,

Lizznl

gregtwallace

Hello,

Thanks for the compliment 🙂

The project is designed to provide the cert/key files to consuming applications. How the application consumes the file is application dependant.

For Traefik you'd want to look at this section: https://doc.traefik.io/traefik/https/tls/

For OPNsense, there isn't anything "native" that I'm aware of. I use a custom cron job that picks up the key/cert from Cert Warden and then restarts the web UI when the key/cert changes. It is similar to the pfsense example: https://github.com/gregtwallace/certificate-scripts/blob/master/lego-pfsense.sh

lizznl

gregtwallace

Hi Greg,

Yeah after a night of sleep I understand the concept now. Think I'm gonna make some Ansible playbooks for distributing the certificates.

Just an idea; Will there be POST API capability in future as well to generate the certificates?

Thanks for the nice work!

Regards,

Lizznl

gregtwallace

Technically that would already be possible as the UI is just a react app that sends api commands to the backend. You’d have to send a login command first to get an auth token and then follow up with the create commands.

You can see a list of all of the api routes here: https://github.com/gregtwallace/certwarden-backend/blob/master/pkg/domain/app/router_make.go

I’ve considered making this easier / more well documented but it’s only on my maybe to-do someday list.