June 28, 2022

ACME TLS for localhost with traefik and smallstep

If you’re using docker for your local development environment and need to develop against TLS-secured endpoints (which you should as you need to run it in production anyway), you just can leverage traefik with smallstep. In this example, we just use docker as configuration provider by setting labels to container exposed via traefik. The important things are commented inline. --- version: '3.8' services: step-ca: image: smallstep/step-ca:0.24.2 volumes: - step-ca:/home/step # shared volume between step-ca and traefik to access root ca environment: DOCKER_STEPCA_INIT_NAME: "Step CA" DOCKER_STEPCA_INIT_DNS_NAMES: "localhost,step-ca" # must at least include name of step-ca service which is referenced as acme. Read more

September 22, 2020

ngrok alternative: localtunnel + Caddy + Lets Encrypt

Sometimes you want to show localhost to the world or need real world access for testing or callback urls. Usually you’re using ngrok. Thats okay, i’ll do too. But also sometimes, you are a paranoid bastard and there’s no way you’re routing your data through alien infrastructure. This is where localtunnel kicks in. For wildcard subdomains, you’ll also need a wildcard subdomain dns entry and a loadbalancer/reverse proxy. This could be done using e. Read more