From 03a66e469086b98aac38b9f831d4ce8eb34e4837 Mon Sep 17 00:00:00 2001 From: Julien Fontanet Date: Wed, 22 Jun 2022 10:41:14 +0200 Subject: [PATCH] docs(configuration/custom ca): use separate systemd file This is better as it avoids conflicts with existing config and is compatible with the way XO Proxy service is handled. --- docs/configuration.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/configuration.md b/docs/configuration.md index 2b27d286f..0dda864dd 100644 --- a/docs/configuration.md +++ b/docs/configuration.md @@ -68,9 +68,10 @@ You shouldn't have to change this. It's the path where `xo-web` files are served If you use certificates signed by an in-house CA for your XCP-ng or XenServer hosts, and want to have Xen Orchestra connect to them without rejection, you can use the [`NODE_EXTRA_CA_CERTS`](https://nodejs.org/api/cli.html#cli_node_extra_ca_certs_file) environment variable. -To enable this option in your XOA, edit the `/etc/systemd/system/xo-server.service` file and add this: +To enable this option in your XOA, create `/etc/systemd/system/xo-server.service/ca.conf` with the following content: ``` +[Service] Environment=NODE_EXTRA_CA_CERTS=/usr/local/share/ca-certificates/my-cert.crt ```