From 0cb35addf3f71b3bf5ec5030ace67a5772014b21 Mon Sep 17 00:00:00 2001 From: Tai Dao Date: Fri, 25 Feb 2022 12:10:41 -0800 Subject: [PATCH] Fixed Meshcentral Config --- meshcentral/README.md | 10 ++-------- meshcentral/config.json.template | 14 +++++++------- 2 files changed, 9 insertions(+), 15 deletions(-) diff --git a/meshcentral/README.md b/meshcentral/README.md index 28590d9..742119e 100644 --- a/meshcentral/README.md +++ b/meshcentral/README.md @@ -1,5 +1,5 @@ ### Introduction -THIS IS A WIP DO NOT USE... +This will deploy meshcentral with caddy. ### Minimum File Structure ``` @@ -13,23 +13,17 @@ THIS IS A WIP DO NOT USE... ├── startup.sh ``` -You will need the files in this GitHubs folder to build the meshcentral image and deploy it. +You will need the files in this GitHubs folder (Dockerfile, startup.sh, and config.json.template) to build the meshcentral image and deploy it. ### Add to Caddyfile (from ~/docker/caddy) Remember to `docker exec -w /etc/caddy caddy caddy reload` after editing your Caddyfile. -The `tls_insecure_skip_verify` line is not recommemded. This tutorial is a WIP until I figure out how -to get caddy to work with meshcentral without the `tls_insecure_skip_verify` line. ``` meshcentral.joindigital.com { - tls /certs/cert.pem /certs/key.pem reverse_proxy meshcentral:4430 { header_up Host {http.reverse_proxy.upstream.hostport} header_up X-Real-IP {http.request.remote} header_up X-Forwarded-For {http.request.remote} - transport http { - tls_insecure_skip_verify - } } } ``` diff --git a/meshcentral/config.json.template b/meshcentral/config.json.template index dd6ce33..d1b6cad 100644 --- a/meshcentral/config.json.template +++ b/meshcentral/config.json.template @@ -10,25 +10,25 @@ "redirPort": 80, "_redirAliasPort": 80, "AgentPong": 300, - "TLSOffload": false, + "TLSOffload": true, "SelfUpdate": false, "AllowFraming": false, "WebRTC": false }, "domains": { - "": { - "_title": "MyServer", + "": { + "_title": "MyServer", "_title2": "Servername", "_minify": true, "NewAccounts": true, - "_userNameIsEmail": true, + "_userNameIsEmail": true, "_certUrl": "my.reverse.proxy" - } + } }, "_letsencrypt": { "__comment__": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before>", "_email": "myemail@mydomain.com", "_names": "myserver.mydomain.com", - "production": false + "production": false } -} +} \ No newline at end of file