diff --git a/doc/faq.md b/doc/faq.md index ab6dc75297..238b0797e6 100644 --- a/doc/faq.md +++ b/doc/faq.md @@ -69,6 +69,7 @@ Various configuration files are stored in that directory, for example: - `client.crt`: client certificate (generated on demand) - `client.key`: client key (generated on demand) - `config.yml`: configuration file (info about `remotes`, `aliases`, etc.) +- `clientcerts/`: directory with per-remote client certificates - `servercerts/`: directory with server certificates belonging to `remotes` ## Why can I not ping my Incus instance from another host? diff --git a/doc/remotes.md b/doc/remotes.md index d9379d1bef..1d151843d9 100644 --- a/doc/remotes.md +++ b/doc/remotes.md @@ -58,6 +58,9 @@ To configure a global remote, create or edit a `config.yml` file that is located Certificates for the remotes must be stored in the `servercerts` directory in the same location (for example, `/etc/incus/servercerts/`). They must match the remote name (for example, `foo.crt`). +It's also possible to provide per-remote client certificates by placing them in the `clientcerts` directory. +The similarly must match the remote name (for example, `foo.crt` and `foo.key`). + See the following example configuration: ```