services/Distributed-Wiki.md
... ...
@@ -65,11 +65,11 @@ exit 0
65 65
66 66
Read/write (SSL only):
67 67
```
68
-RACK_ENV=production gollum --css <path>/custom.css --gollum-path <path> --host 127.0.0.1 --port 4568
68
+RACK_ENV=production gollum --css --host 127.0.0.1 --port 4568 <path>
69 69
```
70 70
Read-only:
71 71
```
72
-RACK_ENV=production gollum --css <path>/custom.css --gollum-path <path> --host 127.0.0.1 --port 4567 --no-edit
72
+RACK_ENV=production gollum --css --host 127.0.0.1 --port 4567 --no-edit <path>
73 73
```
74 74
75 75
Set `<path>` to the location where wiki Git repo was cloned.
... ...
@@ -83,10 +83,10 @@ RACK_ENV=production gollum --css <path>/custom.css --gollum-path <path> --host 1
83 83
84 84
```
85 85
./ca.dn42 tls-gen \
86
- wiki.dn42 \
87
- MIC92-MNT \
88
- [email protected] \
89
- DNS:wiki.dn42,DNS:www.wiki.dn42,DNS:internal.dn42,DNS:www.internal.dn42,DNS:<AS>-<CC->.wiki.dn42
86
+ <AS>-<CC>(-<UID>).wiki.dn42 \
87
+ EXAMPLE-MNT \
88
+ [email protected] \
89
+ DNS:<AS>-<CC>(-<ID>).wiki.dn42,DNS:wiki.dn42,DNS:www.wiki.dn42,DNS:internal.dn42,DNS:www.internal.dn42
90 90
```
91 91
92 92
Wait for a reply and then sign the certificate:
... ...
@@ -116,7 +116,7 @@ add_header Public-Key-Pins pin-sha256="<primary>"; pin-sha256="<backup>"; max-a
116 116
```
117 117
118 118
+ `<primary>` - the fingerprint extracted from `wiki.key`
119
- + `<backup>` - the CA fingerprint: `mJ1xUCzfru8Ckq2+M6VkNKGOGgSETImRAHBF24mjalw=`
119
+ + `<backup>` - the CA fingerprint: `of00RDinhPeVRNnXm1jXQDagktOL75qQo1pT+xc7VIE=`
120 120
121 121
Read more about this [here](https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning).
122 122
... ...
@@ -129,7 +129,7 @@ The proxy should accept the following domain names:
129 129
130 130
Nginx should listen on a unicast address as well, so your site can be reached exclusively. Assign an IP address for the occasion and send it to [XUU-DN42](https://io.nixnodes.net?t=person&l=XUU-DN42) including your AS `<aut-num>` and the country code `<CC>` where your site is located. A forward DNS record will be created, pointing to the unicast IP address:
131 131
132
- - as`<aut-num>`-`<CC>`.wiki.dn42
132
+ - `<aut-num>`-`<CC>``(-<UID>)`.wiki.dn42
133 133
134 134
#### Config example
135 135