# What does the quickstart do that I need to do myself? **URL:** \ **Category:** Uncategorized\ **Created:** [September 4, 2023, 5:54pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600 "2023-09-04T17:54:49Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![jptechnical](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jptechnical/32/1089_2.png) [@jptechnical](https://openziti.discourse.group/u/jptechnical)\ **Post date:** [September 4, 2023, 5:54pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600/1 "2023-09-04T17:54:49Z")
So I have heard that the quickstart is opinionated, particularly in relation to the PKI. It also seems to build some config file(s), and init a database. I have outgrown the quickstart, and I need to start identifiying and breaking bottlenecks. I would like to stick with docker containers, but I am beginning to wonder whether or not I need to spend some time with the binary, producing some of the artifacts that the quickstart does. What are the primatives that the quickstart produces that I would need to make myself? Which is the first bottleneck I need to break? ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [September 4, 2023, 6:02pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600/2 "2023-09-04T18:02:05Z")
This is actually what I was working on Saturday for that other thread I was referencing. I'll narrate a video and explain what I'm doing and why... It'll be "quick and dirty" but you'll get what you need from it. Won't take me long... Gimme a few ---
**Author:** ![jptechnical](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jptechnical/32/1089_2.png) [@jptechnical](https://openziti.discourse.group/u/jptechnical)\ **Post date:** [September 4, 2023, 6:22pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600/3 "2023-09-04T18:22:53Z")
I figured, I didn't want to hijack another thread, but would like to make it easy to find for the next guy. No rush, I will be heading away for the next few days... if Starlink works up north in the boonies then I might play with it. ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [September 4, 2023, 7:27pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600/4 "2023-09-04T19:27:50Z")
Here you go. Hopefully it's reasonably thorough for a quick effort (I think it is). Happy to hear feedback and further questions... It's uploading/processing now. Should be live in five-ish minutes... [![](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/e/e56abd93bba889301859f2bdbbefe2bd14f0304f.jpeg "overview of the steps a quickstart bringup completes") ](https://www.youtube.com/watch?v=10KUPH-LwlA) Script I followed (from-scratch.sh) is here [https://raw.githubusercontent.com/dovholuknf/openziti-compose/main/from-scratch.sh](https://raw.githubusercontent.com/dovholuknf/openziti-compose/main/from-scratch.sh) ---
**Author:** ![jptechnical](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jptechnical/32/1089_2.png) [@jptechnical](https://openziti.discourse.group/u/jptechnical)\ **Post date:** [September 26, 2023, 9:45pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600/5 "2023-09-26T21:45:43Z")
Thanks so much for the video @TheLumberjack , that really does help a ton. So I have a couple quick questions. 1. Is this sufficient for a small production service? I am talking a really small business like mine, with a few dozen devices and a handful of users. I would start using this as a production transport for access to all my secure devices. 2. Do I need an external CA? Again, really small production service as above. What does an external CA give me? ---
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [September 26, 2023, 9:50pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600/6 "2023-09-26T21:50:29Z")
> [@jptechnical](#): > > Is this sufficient for a small production service? in my opinion it is, **as long as** you use a static ip/dns name. the IP/DNS can't change after you start it up or your PKI will be busted... ☹ Totally would be fine imo for many, many users (many more than a handful). You'd want to have a "DR/backup" plan is all but you've asked about that before so I figure you're gtg there. > [@jptechnical](#): > > Do I need an external CA? Nope, not one bit. Externa CA doesn't give you anything other than 'vanity'. You _do_ need a wildcard cert for BrowZer, when (if) you ever get around to using that, but you can layer that on after the fact via `alt_server_certs`... ---
**Author:** ![jptechnical](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/jptechnical/32/1089_2.png) [@jptechnical](https://openziti.discourse.group/u/jptechnical)\ **Post date:** [September 26, 2023, 10:04pm UTC](https://openziti.discourse.group/t/what-does-the-quickstart-do-that-i-need-to-do-myself/1600/7 "2023-09-26T22:04:24Z")
I kinda figured those would be the answers. This is great, I am pretty much ready to put a DONE stamp on my zitification of my devices. THANK YOU!!! ![tenor-18405818](https://global.discourse-cdn.com/free1/uploads/netfoundry/original/2X/1/19630d93737dfb79ecf40862ae39b0840b49e13c.gif)