servnest/servnest-containers
1
0
Fork 0
Code Issues Pull requests Activity

readme: document profiles

Browse source
This commit is contained in:
Miraty 2025-01-22 19:14:30 +01:00
parent 6332458101
commit bf2cf5539a
2 changed files with 9 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -27,7 +27,7 @@ podman-compose build # build every other service images
Optionally, to enable the `knot-secondary` service:
```shell
# uncomment "notify:" lines in knot.conf, then:
podman-compose up knot knot-secondary # generate QUIC keys
podman-compose --profile=secondary up knot knot-secondary # generate QUIC keys
./setup-xoq.sh # setup mutual XFR over QUIC
```

16
setup-xoq.sh
View file

@ -2,12 +2,12 @@
ENGINE="podman" # "podman" or "docker"
$ENGINE-compose exec knot-secondary knotc conf-begin
$ENGINE-compose exec knot-secondary knotc conf-unset remote[primary].cert-key
$ENGINE-compose exec knot-secondary knotc conf-set remote[primary].cert-key "$($ENGINE-compose exec knot cat /var/log/knot/knot.log | grep "certificate public key" | cut -d " " -f 7 | tail -1 | tr -d "\r")"
$ENGINE-compose exec knot-secondary knotc conf-commit
$ENGINE-compose --profile=secondary exec knot-secondary knotc conf-begin
$ENGINE-compose --profile=secondary exec knot-secondary knotc conf-unset remote[primary].cert-key
$ENGINE-compose --profile=secondary exec knot-secondary knotc conf-set remote[primary].cert-key "$($ENGINE-compose --profile=secondary exec knot cat /var/log/knot/knot.log | grep "certificate public key" | cut -d " " -f 7 | tail -1 | tr -d "\r")"
$ENGINE-compose --profile=secondary exec knot-secondary knotc conf-commit
$ENGINE-compose exec knot knotc conf-begin
$ENGINE-compose exec knot knotc conf-unset remote[secondary].cert-key
$ENGINE-compose exec knot knotc conf-set remote[secondary].cert-key "$($ENGINE-compose exec knot-secondary cat /var/log/knot/knot.log | grep "certificate public key" | cut -d " " -f 7 | tail -1 | tr -d "\r")"
$ENGINE-compose exec knot knotc conf-commit
$ENGINE-compose --profile=secondary exec knot knotc conf-begin
$ENGINE-compose --profile=secondary exec knot knotc conf-unset remote[secondary].cert-key
$ENGINE-compose --profile=secondary exec knot knotc conf-set remote[secondary].cert-key "$($ENGINE-compose --profile=secondary exec knot-secondary cat /var/log/knot/knot.log | grep "certificate public key" | cut -d " " -f 7 | tail -1 | tr -d "\r")"
$ENGINE-compose --profile=secondary exec knot knotc conf-commit