brew cask install java

openssl pkcs12 -export -in cert.pem -inkey key.pem -out jenkins.p12

keytool -importkeystore -srckeystore jenkins.p12 -srcstoretype PKCS12 -destkeystore jenkins_keystore.jks -deststoretype JKS

ExecStart=/usr/bin/docker run --rm -a STDIN -a STDOUT -a STDERR \
-u root \
-p 50000:50000 \
-p 443:8443 \
-v /var/jenkins-data:/var/jenkins_home \
--name jenkins \
jenkins/jenkins:lts \
--httpPort=-1 \
--httpsPort=8443 \
--httpsKeyStore=/var/jenkins_home/jenkins_keystore.jks \
--httpsKeyStorePassword=1234

openssl x509 -in <(openssl s_client -connect company.com:443 -prexit 2>/dev/null) > ca.crt

resource "kubernetes_secret" "company-dkr-key" {
  metadata {
    name      = "company-dkr-key"
    namespace = "${kubernetes_namespace.company.metadata.0.name}"
  }

  data = {
    ".dockerconfigjson" = "{\"auths\":{\"${var.company-dkr-url}\":{\"username\":\"${var.company-dkr-user}\",\"password\":\"${var.company-dkr-password}\",\"email\":\"email\",\"auth\":\"${base64encode(format("%s:%s", var.company-dkr-user, var.company-dkr-password))}\"}}}"

  ## OR u can also do this from file
  # ".dockercfg" = "${file("${path.module}/docker.cfg")}"

  }

type = "kubernetes.io/dockercfg"
}

journalctl --vacuum-time=2d
journalctl --vacuum-size=500M