feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00
1 parent fe45272f7c
commit 8d3469d10a
@@ -8,13 +8,13 @@ connections {

    local {
      auth = pubkey
-      certs = server.pem
+      certs = vpn-server.pem
      id = @{{ local_fqdn }}
    }

    remote {
      auth = eap-tls
-      cacerts = ca.pem
+      cacerts = p2s.pem
      eap_id = %any
    }