nemonik / hands-on-devops-gen2 Goto Github PK

Hi nemonik, thanks your book, it's very helpful.

I tried to make my domain certificate, but the firefox show "Warning: Potential Security Risk Ahead"

the wildcard domain keys, fullchain.pem and privkey.pem:

/etc/letsencrypt/live/example.com/fullchain.pem

-----BEGIN CERTIFICATE-----
1xxxxxx
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
2xxxxxx
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
3xxxxxx
-----END CERTIFICATE-----

/etc/letsencrypt/live/example.com/privkey.pem

-----BEGIN CERTIFICATE-----
4xxxxxx
-----END CERTIFICATE-----

I made the vault file and got a traefik-cert-secrets.yaml:

...
data:
  tls.crt: |
    1xxxxxx
  tls.key: |
    4xxxxxx

There are 3 keys in fullchain.pem, I don't known the content of tls.crt should be (just wrotre the first 1xxxxxx in tls.crt).

Thanks for any opinions :)