mirror of
https://github.com/rustfs/rustfs.git
synced 2026-01-17 09:40:32 +00:00
b3ec2325ed
* refactor(config): Unify S3 API and Console ports This commit streamlines the server configuration by unifying the S3 API and the WebUI (Console) to serve on a single port. Previously, the console was managed by separate configuration options (`RUSTFS_CONSOLE_ENABLE` and `RUSTFS_CONSOLE_ADDRESS`), requiring a distinct port. This added complexity to deployment and configuration. With this change: - The `RUSTFS_CONSOLE_ADDRESS` and `RUSTFS_CONSOLE_FS_ENDPOINT` environment variables are removed. - The WebUI is now always available and served directly from the main application port defined by `RUSTFS_ADDRESS`. - This simplifies setup, reduces the number of exposed ports, and makes the application easier to manage and deploy, especially in containerized environments. Users should update their startup scripts and remove the deprecated `RUSTFS_CONSOLE_*` variables. * improve docker comprose config file and remove docs dir
48 lines
1.5 KiB
Markdown
48 lines
1.5 KiB
Markdown
## Certs
|
||
|
||
### Generate a self-signed certificate
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes
|
||
```
|
||
|
||
### Generate a self-signed certificate with a specific subject
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes \
|
||
-subj "/C=US/ST=California/L=San Francisco/O=My Company/CN=mydomain.com"
|
||
```
|
||
|
||
### Generate a self-signed certificate with a specific subject and SAN
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes \
|
||
-subj "/C=US/ST=California/L=San Francisco/O=My Company/CN=mydomain.com" \
|
||
-addext "subjectAltName=DNS:mydomain.com,DNS:www.mydomain.com"
|
||
```
|
||
|
||
### Generate a self-signed certificate with a specific subject and SAN (multiple SANs)
|
||
|
||
```bash
|
||
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes \
|
||
-subj "/C=US/ST=California/L=San Francisco/O=My Company/CN=mydomain.com" \
|
||
-addext "subjectAltName=DNS:mydomain.com,DNS:www.mydomain.com,DNS:api.mydomain.com"
|
||
```
|
||
|
||
### TLS File
|
||
|
||
```text
|
||
cd deploy/certs/
|
||
ls -la
|
||
├── rustfs_cert.pem // Default｜fallback certificate
|
||
├── rustfs_key.pem // Default｜fallback private key
|
||
├── rustfs.com/ // certificate directory of specific domain names
|
||
│ ├── rustfs_cert.pem
|
||
│ └── rustfs_key.pem
|
||
├── api.rustfs.com/
|
||
│ ├── rustfs_cert.pem
|
||
│ └── rustfs_key.pem
|
||
└── cdn.rustfs.com/
|
||
├── rustfs_cert.pem
|
||
└── rustfs_key.pem
|
||
``` |