6e3742ba106e3862dd16586b5fb23ac9837f3fed
services/Distributed-Wiki.md
... | ... | @@ -65,11 +65,11 @@ exit 0 |
65 | 65 | |
66 | 66 | Read/write (SSL only): |
67 | 67 | ``` |
68 | -RACK_ENV=production gollum --css <path>/custom.css --gollum-path <path> --host 127.0.0.1 --port 4568 |
|
68 | +RACK_ENV=production gollum --css --host 127.0.0.1 --port 4568 <path> |
|
69 | 69 | ``` |
70 | 70 | Read-only: |
71 | 71 | ``` |
72 | -RACK_ENV=production gollum --css <path>/custom.css --gollum-path <path> --host 127.0.0.1 --port 4567 --no-edit |
|
72 | +RACK_ENV=production gollum --css --host 127.0.0.1 --port 4567 --no-edit <path> |
|
73 | 73 | ``` |
74 | 74 | |
75 | 75 | Set `<path>` to the location where wiki Git repo was cloned. |
... | ... | @@ -83,10 +83,10 @@ RACK_ENV=production gollum --css <path>/custom.css --gollum-path <path> --host 1 |
83 | 83 | |
84 | 84 | ``` |
85 | 85 | ./ca.dn42 tls-gen \ |
86 | - wiki.dn42 \ |
|
87 | - MIC92-MNT \ |
|
88 | ||
89 | - DNS:wiki.dn42,DNS:www.wiki.dn42,DNS:internal.dn42,DNS:www.internal.dn42,DNS:<AS>-<CC->.wiki.dn42 |
|
86 | + <AS>-<CC>(-<UID>).wiki.dn42 \ |
|
87 | + EXAMPLE-MNT \ |
|
88 | ||
89 | + DNS:<AS>-<CC>(-<ID>).wiki.dn42,DNS:wiki.dn42,DNS:www.wiki.dn42,DNS:internal.dn42,DNS:www.internal.dn42 |
|
90 | 90 | ``` |
91 | 91 | |
92 | 92 | Wait for a reply and then sign the certificate: |
... | ... | @@ -116,7 +116,7 @@ add_header Public-Key-Pins pin-sha256="<primary>"; pin-sha256="<backup>"; max-a |
116 | 116 | ``` |
117 | 117 | |
118 | 118 | + `<primary>` - the fingerprint extracted from `wiki.key` |
119 | - + `<backup>` - the CA fingerprint: `mJ1xUCzfru8Ckq2+M6VkNKGOGgSETImRAHBF24mjalw=` |
|
119 | + + `<backup>` - the CA fingerprint: `of00RDinhPeVRNnXm1jXQDagktOL75qQo1pT+xc7VIE=` |
|
120 | 120 | |
121 | 121 | Read more about this [here](https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning). |
122 | 122 | |
... | ... | @@ -129,7 +129,7 @@ The proxy should accept the following domain names: |
129 | 129 | |
130 | 130 | Nginx should listen on a unicast address as well, so your site can be reached exclusively. Assign an IP address for the occasion and send it to [XUU-DN42](https://io.nixnodes.net?t=person&l=XUU-DN42) including your AS `<aut-num>` and the country code `<CC>` where your site is located. A forward DNS record will be created, pointing to the unicast IP address: |
131 | 131 | |
132 | - - as`<aut-num>`-`<CC>`.wiki.dn42 |
|
132 | + - `<aut-num>`-`<CC>``(-<UID>)`.wiki.dn42 |
|
133 | 133 | |
134 | 134 | #### Config example |
135 | 135 |