SSL-Cert-Generator

This is a fork of Acme's SSL cert geneator.

Follow these steps to generate a self-signed cert:

1. generate an ephemeral AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and AWS_SESSION_TOKEN in the Okta console
2. build the Dockerfile docker build -t guild/ssl .
3. run this command to generate a cert for the SMTP relay

docker run --rm -it --env AWS_ACCESS_KEY_ID=REPLACE --env AWS_SECRET_ACCESS_KEY=REPLACE --env AWS_SESSION_TOKEN=REPLACE -v "$(pwd)/out":/acme.sh --net=host guild/ssl --issue --dns dns_aws -d smtp-relay.guild-cloud.com -d smtp-relay.guild-cloud.com

After running this command - you will need to move the cert and key manually into AWS and restart the fargate tasks in the production AWS account.

1. Move the top two certificates in fullchain.cert to smtp-relay-cert-prod in SSM in the Production account
2. Move the smtp-relay.guild-cloud.key to smtp-relay-key-prod in SSM in the Production account
3. Stop both running tasks in the SMTP-Relay fargate cluster in production