Use public TLS cert for kanidm

servers/kanidm/data/server.toml

@@ -45,8 +45,8 @@ db_path = "/data/kanidm.db"
 # db_arc_size = 2048
 #
 #   TLS chain and key in pem format. Both must be present
-tls_chain = "/data/certs/chain.pem"
-tls_key = "/data/certs/key.pem"
+tls_chain = "/data/certs/idm.ellis.link/cert.pem"
+tls_key = "/data/certs/idm.ellis.link/key.pem"
 #
 #   The log level of the server. May be one of info, debug, trace
 #

servers/kanidm/entrypoint.sh

@@ -2,9 +2,9 @@
 
 set -e
 
-if [ ! -f /data/certs/cert.pem ]; then
-    echo "Generating certs"
-    /sbin/kanidmd cert-generate -c /data/server.toml
-fi
+# if [ ! -f /data/certs/cert.pem ]; then
+#     echo "Generating certs"
+#     /sbin/kanidmd cert-generate -c /data/server.toml
+# fi
 
 /sbin/kanidmd server -c /data/server.toml