I like to setup a 2Tier Windows CA and deploy the certs with Nethserver as a Webserver.
I put the certs under /var/www/html/CertEnroll/ and they are reachable from the Internet via port 80.
On Nethserver I just have one (green) Interface. Do I have to use a 2nd (red) Interface to get a firewall and how must the folder and files (certs) be modified to get it most secure?
P.S. How to create a cert-request under CLI for Nethserver (Webserver)?