home.social

#uacme — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #uacme, aggregated by home.social.

  1. Felix Palmen 📯 @zirias ·

    @jhx For writing some kind of "howto", I'll have to find a sane scope ... otherwise there would be just too much to describe I guess 😮

    I could of course assume you already have

    - network segmentation with a
    - a working "domain" setup with a directory and (e.g. , but could be with as well)
    - (virtual) machines providing (with in case of or )
    - a working mechanism to distribute X.509 (I request them from using and distribute them with simple shell scripts using special-purpose restricted keys)

    With all that in place, it would "just" be describing the setup of in a , enabling on all connection paths...

    #dmz #dns #samba #openldap #bind9 #rdp
  2. Felix Palmen 📯 @[email protected] ·

    @jhx For writing some kind of "howto", I'll have to find a sane scope ... otherwise there would be just too much to describe I guess 😮

    I could of course assume you already have

    - network segmentation with a #DMZ
    - a working "domain" setup with a directory and #DNS (e.g. #samba, but could be #OpenLDAP with #bind9 as well)
    - (virtual) machines providing #RDP (with #xrdp in case of #Linux or #FreeBSD)
    - a working mechanism to distribute X.509 #TLS #certificates (I request them from #letsencrypt using #uacme and distribute them with simple shell scripts using special-purpose restricted #SSH keys)

    With all that in place, it would "just" be describing the setup of #guacamole in a #FreeBSD #jail, enabling #TLS on all connection paths...

    #dmz #dns #samba #openldap #bind9 #rdp