habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add section about webhook cert config

Browse Source
This commit is contained in:
Tana M Berry
2024-08-09 15:39:31 -05:00
parent 25a06716ff
commit d4012df59d
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
website/docs/core/certificates.md
View File

@ -9,6 +9,7 @@ Certificates in authentik are used for the following use cases:
- Connecting to remote docker hosts using the Docker integration - Connecting to remote docker hosts using the Docker integration
- Verifying LDAP Servers' certificates - Verifying LDAP Servers' certificates
- Encrypting outposts' endpoints - Encrypting outposts' endpoints
- Configure a webhook to use uploaded SSL certificates
## Default certificate ## Default certificate
@ -69,6 +70,24 @@ ak import_certificate --certificate /certs/mycert.pem --private-key /certs/somet
This will import the certificate into authentik under the given name. This command is safe to run as a cron job; authentik will only re-import the certificate if it changes. This will import the certificate into authentik under the given name. This command is safe to run as a cron job; authentik will only re-import the certificate if it changes.
## Configure a webhook to use uploaded SSL certificates
When communicating with an external API, you will need to configure a generic webhook to utilize uploaded SSL certificates.
1. Create a custom image with a Docker file that looks something like this:
```
FROM ghcr.io/goauthentik/server
USER root
COPY /ak-root/venv/lib/python3.12/site-packages/certifi/cacert.pem /etc/ssl/certs
RUN update-ca-certificates
USER authentik
```
2. Add your custom CA to /etc/ssl/certs
3. Run `update-ca-certificates` as root to add the SSL certificates (CA) to the environment
## Web certificates ## Web certificates
Starting with authentik 2021.12.4, you can configure the certificate authentik uses for its core webserver. For most deployments this will not be relevant and reverse proxies are used, but this can be used to create a very compact and self-contained authentik install. Starting with authentik 2021.12.4, you can configure the certificate authentik uses for its core webserver. For most deployments this will not be relevant and reverse proxies are used, but this can be used to create a very compact and self-contained authentik install.