gistfile1.txt

ipa host-add server-1.example.com


ipa service-add HTTP/server-1.example.com


ipa-getkeytab -s ipa.example.com \
  -p HTTP/server-1.example.com \
  -k /etc/http.keytab


sudo systemctl enable --now certmonger


ipa-getcert request \
  -f /etc/pki/tls/certs/nginx.pem \
  -k /etc/pki/tls/private/nginx.key \
  -K HTTP/[email protected] \
  -D server-1.example.com \
  -D software.example.com
  
getcert list


server {
    listen 443 ssl;
    server_name server-1.example.com software.example.com;

    ssl_certificate     /etc/pki/tls/certs/nginx.pem;
    ssl_certificate_key /etc/pki/tls/private/nginx.key;

    location / {
        proxy_pass http://backend;
    }
}

systemctl reload nginx