diff --git a/compose/docker-compose.reference.yml b/compose/docker-compose.reference.yml index 93d53e33..b91c7664 100644 --- a/compose/docker-compose.reference.yml +++ b/compose/docker-compose.reference.yml @@ -57,6 +57,9 @@ services: SERVER_GRPC_WG_PORT: "50555" # Port to use for GRPC WireGuard if enabled SERVER_GRPC_WG_PUBKEY: "SERVER_GRPC_WG_PUBKEY" # PublicKey for GRPC WireGuard interface. Generated if blank. SERVER_GRPC_WG_PRIVKEY: "SERVER_GRPC_WG_PRIVKEY" # PrivateKey for GRPC WireGuard interface. Generated if blank. + GRPC_SSL: "off" # Tells clients to use SSL to connect to GRPC. Switch to on to turn on. + SERVER_API_CONN_STRING: "" # Changes the api connection string. IP:PORT format. By default is empty and uses SERVER_HOST:API_PORT + SERVER_GRPC_CONN_STRING: "" # Changes the grpc connection string. IP:PORT format. By default is empty and uses SERVER_HOST:GRPC_PORT netmaker-ui: # The Netmaker UI Component container_name: netmaker-ui depends_on: diff --git a/docs/_build/html/_sources/quick-start.rst.txt b/docs/_build/html/_sources/quick-start.rst.txt index d76c5ed6..66b5d140 100644 --- a/docs/_build/html/_sources/quick-start.rst.txt +++ b/docs/_build/html/_sources/quick-start.rst.txt @@ -52,7 +52,7 @@ Create Key #. Click ADD NEW ACCESS KEY #. Give it a name (ex: "mykey") and a number of uses (ex: 25) #. Click CREATE KEY (**Important:** Do not click out of the following screen until you have saved your key details. It will appear only once.) -#. Copy the bottom command under "Your agent install command with access token" and save it somewhere locally. E.x: ``curl -sfL https://raw.githubusercontent.com/gravitl/netmaker/v0.3/scripts/netclient-install.sh | KEY=vm3ow4thatogiwnsla3thsl3894ths sh -`` +#. Copy the bottom command under "Your agent install command with access token" and save it somewhere locally. E.x: ``curl -sfL https://raw.githubusercontent.com/gravitl/netmaker/master/scripts/netclient-install.sh | KEY=vm3ow4thatogiwnsla3thsl3894ths sh -`` .. image:: images/access-key.png :width: 80% @@ -77,7 +77,7 @@ Deploy Nodes * ``which wg`` (should show wg binary present) * ``pidof systemd && echo "systemd found" || echo "systemd not found"`` -4. Run the install command, Ex: ``curl -sfL https://raw.githubusercontent.com/gravitl/netmaker/v0.5/scripts/netclient-install.sh | KEY=vm3ow4thatogiwnsla3thsl3894ths sh -`` +4. Run the install command, Ex: ``curl -sfL https://raw.githubusercontent.com/gravitl/netmaker/master/scripts/netclient-install.sh | KEY=vm3ow4thatogiwnsla3thsl3894ths sh -`` You should get output similar to the below. The netclient retrieves local settings, submits them to the server for processing, and retrieves updated settings. Then it sets the local network configuration. For more information about this process, see the :doc:`client installation <./client-installation>` documentation. If this process failed and you do not see your node in the console (see below), then reference the :doc:`troubleshooting <./troubleshoot>` documentation. diff --git a/docs/examplecode/netclient-join.txt b/docs/examplecode/netclient-join.txt index b34e74c2..345c00b2 100644 --- a/docs/examplecode/netclient-join.txt +++ b/docs/examplecode/netclient-join.txt @@ -19,8 +19,8 @@ OPTIONS: --address value, -a value WireGuard address for machine within Netmaker network. [$NETCLIENT_ADDRESS] --addressIPv6 value, --a6 value WireGuard address for machine within Netmaker network. [$NETCLIENT_ADDRESSIPV6] --interface value, -i value WireGuard local network interface name. [$NETCLIENT_INTERFACE] - --apiserver value Address + GRPC Port (e.g. 1.2.3.4:50051) of Netmaker server. [$NETCLIENT_API_SERVER] - --grpcserver value Address + API Port (e.g. 1.2.3.4:8081) of Netmaker server. [$NETCLIENT_GRPC_SERVER] + --apiserver value Address + API Port (e.g. 1.2.3.4:8081) of Netmaker server. [$NETCLIENT_API_SERVER] + --grpcserver value Address + GRPC Port (e.g. 1.2.3.4:50051) of Netmaker server. [$NETCLIENT_GRPC_SERVER] --key value, -k value Access Key for signing up machine with Netmaker server during initial 'add'. [$NETCLIENT_ACCESSKEY] --token value, -t value Access Token for signing up machine with Netmaker server during initial 'add'. [$NETCLIENT_ACCESSTOKEN] --localrange value Local Range if network is local, for instance 192.168.1.0/24. [$NETCLIENT_LOCALRANGE] diff --git a/docs/quick-start.rst b/docs/quick-start.rst index d76c5ed6..94596811 100644 --- a/docs/quick-start.rst +++ b/docs/quick-start.rst @@ -63,8 +63,7 @@ You will use this command to install the netclient on your nodes. There are thre * The **Access Key** value is the secret string that will allow your node to authenticate with the Netmaker network. This can be used with existing netclient installations where additional configurations (such as setting the server IP manually) may be required. This is not typical. E.g. ``netclient -c install -k -s 1.2.3.4 -p 50052`` * The **Access Token** value is a base64 encoded string that contains the server IP and grpc port, as well as the access key. This is decoded by the netclient and can be used with existing netclient installations like this: ``netclient -c install -t ``. You should use this method for adding a network to a node that is already on a network. For instance, Node A is in the **mynet** network and now you are adding it to **default**. -* The **install command** value is a curl command that can be run on Linux systems. It is a simple script that downloads the netclient binary and runs the install command all in one. - + Networks can also be enabled to allow nodes to sign up without keys at all. In this scenario, nodes enter a "pending state" and are not permitted to join the network until an admin approves them. Deploy Nodes diff --git a/docs/server-installation.rst b/docs/server-installation.rst index 8fb448bf..ec32e60d 100644 --- a/docs/server-installation.rst +++ b/docs/server-installation.rst @@ -353,6 +353,20 @@ SERVER_GRPC_WG_KEYREQUIRED **Description:** Determines if an Access Key is required to join the Comms network. Blank (meaning 'no') by default. Set to "yes" to turn on. +GRPC_SSL + **Default:** "" + + **Description:** Specifies if GRPC is going over secure GRPC or SSL. This is a setting for the clients and is passed through the access token. Can be set to "on" and "off". Set to on if SSL is configured for GRPC. + +SERVER_API_CONN_STRING + **Default:** "" + + **Description:** Allows specification of the string used to connect to the server api. Format: IP:PORT or DOMAIN:PORT. Defaults to SERVER_HOST if not specified. + +SERVER_GRPC_CONN_STRING + **Default:** "" + + **Description:** Allows specification of the string used to connect to grpc. Format: IP:PORT or DOMAIN:PORT. Defaults to SERVER_HOST if not specified. Config File Reference ----------------------