doc: added guide for configuring certs

This commit is contained in:
Sheen Capadngan
2024-06-27 03:00:15 +08:00
parent 84d8879177
commit cff20eb621
3 changed files with 35 additions and 9 deletions

View File

@@ -77,11 +77,12 @@ description: "How to sync secrets from Infisical to GitLab"
</Steps>
</Accordion>
</AccordionGroup>
</Tab>
<Tab title="Self-Hosted Setup">
Using the GitLab integration on a self-hosted instance of Infisical requires configuring an application in GitLab
and registering your instance with it.
<Tip>If you're self-hosting Gitlab with custom certificates, you will have to configure your Infisical instance to [trust these certificates](../../self-hosting/guides/custom-certificates).</Tip>
<Steps>
<Step title="Create an OAuth application in GitLab">
Navigate to your user Settings > Applications to create a new GitLab application.
@@ -91,8 +92,8 @@ description: "How to sync secrets from Infisical to GitLab"
Create the application. As part of the form, set the **Redirect URI** to `https://your-domain.com/integrations/gitlab/oauth2/callback`.
![integrations gitlab config](../../images/integrations/gitlab/integrations-gitlab-config-new-app-form.png)
![integrations gitlab config](../../images/integrations/gitlab/integrations-gitlab-config-new-app-form.png)
<Note>
If you have a GitLab group, you can create an OAuth application under it
in your group Settings > Applications.
@@ -100,17 +101,17 @@ description: "How to sync secrets from Infisical to GitLab"
</Step>
<Step title="Add your OAuth application credentials to Infisical">
Obtain the **Application ID** and **Secret** for your GitLab application.
![integrations gitlab config](../../images/integrations/gitlab/integrations-gitlab-config-credentials.png)
![integrations gitlab config](../../images/integrations/gitlab/integrations-gitlab-config-credentials.png)
Back in your Infisical instance, add two new environment variables for the credentials of your GitLab application:
- `CLIENT_ID_GITLAB`: The **Client ID** of your GitLab application.
- `CLIENT_SECRET_GITLAB`: The **Secret** of your GitLab application.
Once added, restart your Infisical instance and use the GitLab integration.
</Step>
</Steps>
</Tab>
</Tabs>

View File

@@ -222,7 +222,8 @@
"group": "Guides",
"pages": [
"self-hosting/configuration/schema-migrations",
"self-hosting/guides/mongo-to-postgres"
"self-hosting/guides/mongo-to-postgres",
"self-hosting/guides/custom-certificates"
]
},
{

View File

@@ -0,0 +1,24 @@
---
title: "Adding Custom Certificates"
description: "Learn how to Configure Infisical with Custom Certificates"
---
Follow these steps to configure trust for custom certificates. This is helpful for connecting Infisical with self-hosted services like GitLab.
## Prerequisites
- Docker
- Standalone Infisical image
- Certificate public key `.pem` files
## Setup
1. Place all your public key `.pem` files in a single directory.
2. Mount the directory containing the `.pem` files to the `usr/local/share/ca-certificates/` path in the Infisical container.
3. Add the following environment variable to the Infisical container's configuration:
```
NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
```
4. Start the Infisical container.
By following these steps, your Infisical container will trust the specified certificates, allowing you to securely connect Infisical to your other services.