Adding an internal CA for use by LDAP authentication

[rgvanderkleij]

Internal LDAP servers often use internal CA's for increased security. To have wikijs recognize your CA certificate instead of complaining about self-signed certificates you need to make the CA certificate chain available to node.js;

• Create a certs folder on the host and stick a file in it containing your CA certificate chain
• Mount this folder as a volume in the wiki container
• Set the NODE_EXTRA_CA_CERTS variable in the wiki container and point it to the file containing your CS certificate chain.

I use podman in non-root mode on a selinux enabled host (hence the Z at the end), but for docker the process would be similar. Relevant podman-run switches:
-e NODE_EXTRA_CA_CERTS=/certs/internal_ca_chain.pem
-v /home/wiki/certs:/certs:Z \