Clean up README and test configs (#4185)
- docker-rebuild isn't needed now that boulder and bhsm containers run directly off the boulder-tools image. - Remove DNS options from RA config. - Remove GSB options from VA config.
This commit is contained in:
		
							parent
							
								
									b24fe7c3ea
								
							
						
					
					
						commit
						0c700143bb
					
				|  | @ -106,10 +106,6 @@ Alternatively, you can override the docker-compose.yml default with an environme | ||||||
| 
 | 
 | ||||||
| Boulder's default VA configuration (`test/config/va.json`) is configured to connect to port 5002 to validate HTTP-01 challenges and port 5001 to validate TLS-ALPN-01 challenges. If you want to solve challenges with a client running on your host you should make sure it uses these ports to respond to validation requests, or update the VA configuration's `portConfig` to use ports 80 and 443 to match how the VA operates in production and staging environments. If you use a host-based firewall (e.g. `ufw` or `iptables`) make sure you allow connections from the Docker instance to your host on the required ports. | Boulder's default VA configuration (`test/config/va.json`) is configured to connect to port 5002 to validate HTTP-01 challenges and port 5001 to validate TLS-ALPN-01 challenges. If you want to solve challenges with a client running on your host you should make sure it uses these ports to respond to validation requests, or update the VA configuration's `portConfig` to use ports 80 and 443 to match how the VA operates in production and staging environments. If you use a host-based firewall (e.g. `ufw` or `iptables`) make sure you allow connections from the Docker instance to your host on the required ports. | ||||||
| 
 | 
 | ||||||
| If a base image changes (i.e. `letsencrypt/boulder-tools`) you will need to rebuild images for both the boulder and bhsm containers and re-create them. The quickest way to do this is with this command: |  | ||||||
| 
 |  | ||||||
|     ./docker-rebuild.sh |  | ||||||
| 
 |  | ||||||
| 
 | 
 | ||||||
| ### Working with Certbot | ### Working with Certbot | ||||||
| 
 | 
 | ||||||
|  |  | ||||||
|  | @ -182,14 +182,6 @@ type OCSPUpdaterConfig struct { | ||||||
| 	Features map[string]bool | 	Features map[string]bool | ||||||
| } | } | ||||||
| 
 | 
 | ||||||
| // GoogleSafeBrowsingConfig is the JSON config struct for the VA's use of the
 |  | ||||||
| // Google Safe Browsing API.
 |  | ||||||
| type GoogleSafeBrowsingConfig struct { |  | ||||||
| 	APIKey    string |  | ||||||
| 	DataDir   string |  | ||||||
| 	ServerURL string |  | ||||||
| } |  | ||||||
| 
 |  | ||||||
| // SyslogConfig defines the config for syslogging.
 | // SyslogConfig defines the config for syslogging.
 | ||||||
| type SyslogConfig struct { | type SyslogConfig struct { | ||||||
| 	StdoutLevel int | 	StdoutLevel int | ||||||
|  |  | ||||||
|  | @ -1,11 +0,0 @@ | ||||||
| #!/bin/bash -ex |  | ||||||
| # Stop any running boulder containers |  | ||||||
| docker-compose stop |  | ||||||
| # Rebuild anything that has changed since the last run |  | ||||||
| docker-compose build |  | ||||||
| # If docker-compose run is used before using `up -d` docker will |  | ||||||
| # default to using old containers built from previous images |  | ||||||
| # (if anything has changed). `up` takes any changes in configuration |  | ||||||
| # or image into consideration when choosing which containers to |  | ||||||
| # bring back up and will recreate any that are out of date |  | ||||||
| docker-compose up -d |  | ||||||
|  | @ -122,10 +122,5 @@ | ||||||
|   "syslog": { |   "syslog": { | ||||||
|     "stdoutlevel": 6, |     "stdoutlevel": 6, | ||||||
|     "sysloglevel": 4 |     "sysloglevel": 4 | ||||||
|   }, |  | ||||||
| 
 |  | ||||||
|   "common": { |  | ||||||
|     "dnsTimeout": "1s", |  | ||||||
|     "dnsAllowLoopbackAddresses": true |  | ||||||
|   } |   } | ||||||
| } | } | ||||||
|  |  | ||||||
|  | @ -26,11 +26,6 @@ | ||||||
|         "ra.boulder" |         "ra.boulder" | ||||||
|       ] |       ] | ||||||
|     }, |     }, | ||||||
|     "GoogleSafeBrowsing": { |  | ||||||
|       "APIKey": "my-voice-is-my-passport", |  | ||||||
|       "DataDir": "/tmp", |  | ||||||
|       "ServerURL": "http://va1.boulder:6000" |  | ||||||
|     }, |  | ||||||
|     "features": { |     "features": { | ||||||
|       "CAAValidationMethods": true, |       "CAAValidationMethods": true, | ||||||
|       "CAAAccountURI": true, |       "CAAAccountURI": true, | ||||||
|  |  | ||||||
|  | @ -3,11 +3,6 @@ | ||||||
|     "rateLimitPoliciesFilename": "test/rate-limit-policies.yml", |     "rateLimitPoliciesFilename": "test/rate-limit-policies.yml", | ||||||
|     "maxConcurrentRPCServerRequests": 100000, |     "maxConcurrentRPCServerRequests": 100000, | ||||||
|     "maxContactsPerRegistration": 100, |     "maxContactsPerRegistration": 100, | ||||||
|     "dnsTries": 3, |  | ||||||
|     "dnsResolvers": [ |  | ||||||
|       "127.0.0.1:8053", |  | ||||||
|       "127.0.0.1:8054" |  | ||||||
|     ], |  | ||||||
|     "debugAddr": ":8002", |     "debugAddr": ":8002", | ||||||
|     "hostnamePolicyFile": "test/hostname-policy.json", |     "hostnamePolicyFile": "test/hostname-policy.json", | ||||||
|     "maxNames": 100, |     "maxNames": 100, | ||||||
|  | @ -100,10 +95,5 @@ | ||||||
|   "syslog": { |   "syslog": { | ||||||
|     "stdoutlevel": 6, |     "stdoutlevel": 6, | ||||||
|     "sysloglevel": 4 |     "sysloglevel": 4 | ||||||
|   }, |  | ||||||
| 
 |  | ||||||
|   "common": { |  | ||||||
|     "dnsTimeout": "1s", |  | ||||||
|     "dnsAllowLoopbackAddresses": true |  | ||||||
|   } |   } | ||||||
| } | } | ||||||
|  |  | ||||||
|  | @ -26,11 +26,6 @@ | ||||||
|         "ra.boulder" |         "ra.boulder" | ||||||
|       ] |       ] | ||||||
|     }, |     }, | ||||||
|     "GoogleSafeBrowsing": { |  | ||||||
|       "APIKey": "my-voice-is-my-passport", |  | ||||||
|       "DataDir": "/tmp", |  | ||||||
|       "ServerURL": "http://va1.boulder:6000" |  | ||||||
|     }, |  | ||||||
|     "features": { |     "features": { | ||||||
|     } |     } | ||||||
|   }, |   }, | ||||||
|  |  | ||||||
		Loading…
	
		Reference in New Issue