Skip to content

Commit 0de83ea

Browse files
committed
removed thumbprint config from install and added note to upgrade guide
1 parent 44e104b commit 0de83ea

File tree

2 files changed

+12
-11
lines changed

2 files changed

+12
-11
lines changed

docs/src/operations/v2.0.0-RC1/install.md

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ In the following installation manual we will show you how you can install your o
2020
* DSF FHIR VM: min. 4 GB RAM, 4 vCPU, 20 GB HDD
2121
* DSF BPE VM: min. 4 GB RAM, 4 vCPU, 20 GB HDD
2222
### Docker / Docker-Compose
23-
Both VMs need latest docker (>= 24.0.0) and docker compose. For the latest install guide see https://docs.docker.com/engine/install.
23+
Both VMs need latest docker and docker compose. For the latest install guide see https://docs.docker.com/engine/install.
2424

2525
```
2626
sudo apt-get update
@@ -112,8 +112,8 @@ Here is a quick overview of the expected network setup.
112112
...
113113
L47: DEV_DSF_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
114114
...
115-
L109: app_client_certificate_private_key.pem.password:
116-
L110: file: ./secrets/client_certificate_private_key.pem.password
115+
L105: app_client_certificate_private_key.pem.password:
116+
L106: file: ./secrets/client_certificate_private_key.pem.password
117117
```
118118
119119
::: tip How to chmod / chown
@@ -145,9 +145,6 @@ Here is a quick overview of the expected network setup.
145145
Set your Organizations DSF identifier, aka the shortest FQDN that resolves to the main homepage of the organization, e.g. `hs-heilbronn.de`
146146
* **DEV_DSF_FHIR_SERVER_BASE_URL**: `https://dsf.todo.organization.com/fhir`
147147
Set your FHIR servers external FQDN, e.g. `foo.bar.de` -> `https://foo.bar.de/fhir`
148-
* **DEV_DSF_FHIR_SERVER_ORGANIZATION_THUMBPRINT**: `f4344032fe77bffb912ff5abfd44da89fe64d355affb8d0f14c9ecb8bdbf92c7fe5f995b1ec0c453e4228b395e331052e4639044df4933d57721de508a84d26f`
149-
Set the SHA-512 Hash (lowercase hex) of your client certificate (Certificate _B_)
150-
Use `certtool --fingerprint --hash=sha512 --infile=client_certificate.pem` to generate the hash.
151148
* **DEV_DSF_FHIR_SERVER_ROLECONFIG**: `|`
152149
(Optional) You can add other client certificates (e.g. personal certificates from admins) to your DSF instance. For additional information, see the FHIR server [Access Control](fhir/access-control) page.
153150
@@ -182,12 +179,12 @@ Here is a quick overview of the expected network setup.
182179
* If the private key is encrypted, add a password file with the password as the only content to **/opt/bpe/secrets/client_certificate_private_key.pem.password**
183180
* If the private key is not encrypted, remove the corresponding docker secret lines from the `docker-compose.yml` file
184181
```
185-
L12: - app_client_certificate_private_key.pem.password
182+
L11: - app_client_certificate_private_key.pem.password
186183
...
187-
L32: DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
184+
L31: DEV_DSF_BPE_FHIR_CLIENT_CERTIFICATE_PRIVATE_KEY_PASSWORD_FILE: /run/secrets/app_client_certificate_private_key.pem.password
188185
...
189-
L83: app_client_certificate_private_key.pem.password:
190-
L84: file: ./secrets/client_certificate_private_key.pem.password
186+
L82: app_client_certificate_private_key.pem.password:
187+
L83: file: ./secrets/client_certificate_private_key.pem.password
191188
```
192189
1. Modify database passwords
193190
* **/opt/bpe/secrets/db_liquibase.password**
@@ -218,7 +215,7 @@ Here is a quick overview of the expected network setup.
218215
219216
220217
### Logs
221-
By default, we will log both to the console (collected by docker) and to files in the log directory, so you can use `docker compose logs -f` in `/opt/bpe` and `/opt/fhir` to view informational, warning and error logs. If you encounter any error and the reported information is not detailled enough, you can also check the logs in the `/opt/fhir/log` and `/opt/bpe/log` directories with debugging logs. There, you will also find older log files. If you have any questions and can't resolve them by yourself please always include the latest logs from `/opt/fhir/log` and `/opt/bpe/log` in your support request.
218+
By default, we will log both to the console (collected by docker) and to files in the log directory, so you can use `docker compose logs -f` in `/opt/bpe` and `/opt/fhir` to view informational, warning and error logs. If you encounter any error and the reported information is not detailed enough, you can also check the logs in the `/opt/fhir/log` and `/opt/bpe/log` directories with debugging logs. There, you will also find older log files. If you have any questions and can't resolve them by yourself please always include the latest logs from `/opt/fhir/log` and `/opt/bpe/log` in your support request.
222219
223220
On a successful BPE start, you should see the following entries in your BPE log:
224221

docs/src/operations/v2.0.0-RC1/upgrade-from-1.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,9 +37,13 @@ When upgrading from DSF version < 1.9.0 it is important to migrate to [DSF 1.9.0
3737
- image: ghcr.io/datasharingframework/fhir:1.9.0
3838
+ image: ghcr.io/datasharingframework/fhir:2.0.0-RC1
3939
restart: on-failure
40+
...
41+
environment:
42+
- DEV_DSF_FHIR_SERVER_ORGANIZATION_THUMBPRINT: f4344032fe77bffb...
4043
...
4144

4245
```
46+
The environment variable `DEV_DSF_FHIR_SERVER_ORGANIZATION_THUMBPRINT` does not need to be specified starting version 2.0.0-RC1. The thumbprint is now calculated based on the client certificate specified via `DEV_DSF_FHIR_CLIENT_CERTIFICATE`.
4347

4448

4549
3. Upgrade the DSF FHIR containers

0 commit comments

Comments
 (0)