mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
doc: added guide for configuring certs
This commit is contained in:
@@ -77,11 +77,12 @@ description: "How to sync secrets from Infisical to GitLab"
|
||||
</Steps>
|
||||
</Accordion>
|
||||
</AccordionGroup>
|
||||
|
||||
</Tab>
|
||||
<Tab title="Self-Hosted Setup">
|
||||
Using the GitLab integration on a self-hosted instance of Infisical requires configuring an application in GitLab
|
||||
and registering your instance with it.
|
||||
|
||||
<Tip>If you're self-hosting Gitlab with custom certificates, you will have to configure your Infisical instance to [trust these certificates](../../self-hosting/guides/custom-certificates).</Tip>
|
||||
<Steps>
|
||||
<Step title="Create an OAuth application in GitLab">
|
||||
Navigate to your user Settings > Applications to create a new GitLab application.
|
||||
@@ -91,8 +92,8 @@ description: "How to sync secrets from Infisical to GitLab"
|
||||
|
||||
Create the application. As part of the form, set the **Redirect URI** to `https://your-domain.com/integrations/gitlab/oauth2/callback`.
|
||||
|
||||

|
||||
|
||||

|
||||
|
||||
<Note>
|
||||
If you have a GitLab group, you can create an OAuth application under it
|
||||
in your group Settings > Applications.
|
||||
@@ -100,17 +101,17 @@ description: "How to sync secrets from Infisical to GitLab"
|
||||
</Step>
|
||||
<Step title="Add your OAuth application credentials to Infisical">
|
||||
Obtain the **Application ID** and **Secret** for your GitLab application.
|
||||
|
||||

|
||||
|
||||
|
||||

|
||||
|
||||
Back in your Infisical instance, add two new environment variables for the credentials of your GitLab application:
|
||||
|
||||
- `CLIENT_ID_GITLAB`: The **Client ID** of your GitLab application.
|
||||
- `CLIENT_SECRET_GITLAB`: The **Secret** of your GitLab application.
|
||||
|
||||
|
||||
Once added, restart your Infisical instance and use the GitLab integration.
|
||||
</Step>
|
||||
</Steps>
|
||||
|
||||
</Tab>
|
||||
</Tabs>
|
||||
|
||||
|
||||
@@ -222,7 +222,8 @@
|
||||
"group": "Guides",
|
||||
"pages": [
|
||||
"self-hosting/configuration/schema-migrations",
|
||||
"self-hosting/guides/mongo-to-postgres"
|
||||
"self-hosting/guides/mongo-to-postgres",
|
||||
"self-hosting/guides/custom-certificates"
|
||||
]
|
||||
},
|
||||
{
|
||||
|
||||
24
docs/self-hosting/guides/custom-certificates.mdx
Normal file
24
docs/self-hosting/guides/custom-certificates.mdx
Normal file
@@ -0,0 +1,24 @@
|
||||
---
|
||||
title: "Adding Custom Certificates"
|
||||
description: "Learn how to Configure Infisical with Custom Certificates"
|
||||
---
|
||||
|
||||
Follow these steps to configure trust for custom certificates. This is helpful for connecting Infisical with self-hosted services like GitLab.
|
||||
|
||||
## Prerequisites
|
||||
|
||||
- Docker
|
||||
- Standalone Infisical image
|
||||
- Certificate public key `.pem` files
|
||||
|
||||
## Setup
|
||||
|
||||
1. Place all your public key `.pem` files in a single directory.
|
||||
2. Mount the directory containing the `.pem` files to the `usr/local/share/ca-certificates/` path in the Infisical container.
|
||||
3. Add the following environment variable to the Infisical container's configuration:
|
||||
```
|
||||
NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
|
||||
```
|
||||
4. Start the Infisical container.
|
||||
|
||||
By following these steps, your Infisical container will trust the specified certificates, allowing you to securely connect Infisical to your other services.
|
||||
Reference in New Issue
Block a user