Compare commits
29 Commits
1.1.2
...
ada326f2d8
| Author | SHA1 | Date | |
|---|---|---|---|
| ada326f2d8 | |||
| 5d14d166eb | |||
| 3a6466612b | |||
| 36b71a0ebb | |||
| e0da513893 | |||
| df56fcf997 | |||
| 3c3cc47d32 | |||
| 053cef4c31 | |||
| b6d93c1164 | |||
| a41c409f9d | |||
| e859aa7218 | |||
| a4b59c360e | |||
| e7bd87d5bd | |||
| 6ef0abfd6b | |||
| 868eb4eb59 | |||
| 578284bb10 | |||
| e10bdd741d | |||
| 0aa35c3ef6 | |||
| 90f5095eef | |||
| 3daee369ca | |||
| 6a27c9232c | |||
| e130fc041e | |||
| 591e35c91a | |||
| 375cf5da74 | |||
| 09eb18adda | |||
| d09988c241 | |||
| 6d696dd4b2 | |||
| c23657ce01 | |||
| 634f0cac4a |
@ -17,7 +17,6 @@ ENV PGID=1000
|
|||||||
ENV TZ=UTC
|
ENV TZ=UTC
|
||||||
ENV GENERATE_DHPARAM=true
|
ENV GENERATE_DHPARAM=true
|
||||||
ENV INTERVAL="0 */6 * * *"
|
ENV INTERVAL="0 */6 * * *"
|
||||||
ENV ONE_SHOT=false
|
|
||||||
|
|
||||||
# Single domain
|
# Single domain
|
||||||
ENV DOMAINS=
|
ENV DOMAINS=
|
||||||
@ -56,10 +55,7 @@ ENV S6_BEHAVIOUR_IF_STAGE2_FAILS=2 S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0 S6_VERBOSI
|
|||||||
RUN python3 -m venv /app/certbot/ && /app/certbot/bin/pip install --upgrade pip
|
RUN python3 -m venv /app/certbot/ && /app/certbot/bin/pip install --upgrade pip
|
||||||
|
|
||||||
#Get required packages for building, build, then cleanup
|
#Get required packages for building, build, then cleanup
|
||||||
#Added additional pip steps to fix cython 3.0.0 issue - https://github.com/yaml/pyyaml/issues/601
|
|
||||||
RUN apk add --no-cache --virtual .deps gcc python3-dev libc-dev libffi-dev && \
|
RUN apk add --no-cache --virtual .deps gcc python3-dev libc-dev libffi-dev && \
|
||||||
/app/certbot/bin/pip install wheel && \
|
|
||||||
/app/certbot/bin/pip install "Cython<3.0" pyyaml --no-build-isolation && \
|
|
||||||
/app/certbot/bin/pip install certbot certbot-dns-cloudflare && \
|
/app/certbot/bin/pip install certbot certbot-dns-cloudflare && \
|
||||||
ln -s /app/certbot/bin/certbot /usr/bin/certbot &&\
|
ln -s /app/certbot/bin/certbot /usr/bin/certbot &&\
|
||||||
apk del .deps
|
apk del .deps
|
||||||
@ -69,7 +65,6 @@ COPY root /
|
|||||||
RUN chmod +x /container-init.sh && \
|
RUN chmod +x /container-init.sh && \
|
||||||
chmod +x /certbot-prepare.sh && \
|
chmod +x /certbot-prepare.sh && \
|
||||||
chmod +x /certbot-renew.sh && \
|
chmod +x /certbot-renew.sh && \
|
||||||
chmod +x /check-one-shot.sh && \
|
|
||||||
chown -R ${PUID}:${PGID} /app /config
|
chown -R ${PUID}:${PGID} /app /config
|
||||||
|
|
||||||
ENTRYPOINT [ "/init" ]
|
ENTRYPOINT [ "/init" ]
|
||||||
|
|||||||
@ -52,7 +52,6 @@ Core options to the container
|
|||||||
|PUID |int |1000 |Sets the UID of the user certbot runs under |
|
|PUID |int |1000 |Sets the UID of the user certbot runs under |
|
||||||
|PGID |int |1000 |Sets the GID of the user certbot runs under |
|
|PGID |int |1000 |Sets the GID of the user certbot runs under |
|
||||||
|TZ |[List of valid TZs](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) |UTC |Sets the timezone of the container |
|
|TZ |[List of valid TZs](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List) |UTC |Sets the timezone of the container |
|
||||||
| ONE_SHOT | false | Whether container exits after first run of certbot, or starts cron-based auto-renewal |
|
|
||||||
| GENERATE_DHPARAM | true (case-sensitive) | Generate Diffie-Hellman keys in /config/letsencrypt/keys |
|
| GENERATE_DHPARAM | true (case-sensitive) | Generate Diffie-Hellman keys in /config/letsencrypt/keys |
|
||||||
| INTERVAL | 0 */6 * * * | How often certbot attempts to renew the certificate. Cron syntax |
|
| INTERVAL | 0 */6 * * * | How often certbot attempts to renew the certificate. Cron syntax |
|
||||||
| CERT_COUNT | 1 | How many certificates certbot will try to issue (more than 1 not yet implemented) |
|
| CERT_COUNT | 1 | How many certificates certbot will try to issue (more than 1 not yet implemented) |
|
||||||
|
|||||||
@ -756,24 +756,13 @@ fi
|
|||||||
|
|
||||||
if [ $GENERATE_DHPARAM = true ] && [ ! -s /config/letsencrypt/keys/ssl-dhparams.pem ]
|
if [ $GENERATE_DHPARAM = true ] && [ ! -s /config/letsencrypt/keys/ssl-dhparams.pem ]
|
||||||
then
|
then
|
||||||
echo ""
|
|
||||||
echo "Generating Diffie-Hellman keys, saved to /config/letsencrypt/keys. This can take a long time!"
|
echo "Generating Diffie-Hellman keys, saved to /config/letsencrypt/keys. This can take a long time!"
|
||||||
openssl dhparam -out /config/letsencrypt/keys/ssl-dhparams.pem 4096
|
openssl dhparam -out /config/letsencrypt/keys/ssl-dhparams.pem 4096
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [ $ONE_SHOT == "true" ]; then
|
echo "$INTERVAL /certbot-renew.sh >> /config/logs/renew.log" > /config/.crontab.txt
|
||||||
|
|
||||||
echo ""
|
echo ""
|
||||||
|
|
||||||
echo "ONE_SHOT is true - exiting container"
|
echo "Starting automatic renewal job. Schedule is $INTERVAL"
|
||||||
|
crontab /config/.crontab.txt
|
||||||
elif [ $ONE_SHOT == "false" ]; then
|
|
||||||
|
|
||||||
echo "$INTERVAL /certbot-renew.sh >> /config/logs/renew.log" > /config/.crontab.txt
|
|
||||||
|
|
||||||
echo ""
|
|
||||||
|
|
||||||
echo "Starting automatic renewal job. Schedule is $INTERVAL"
|
|
||||||
crontab /config/.crontab.txt
|
|
||||||
|
|
||||||
fi
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
#!/command/with-contenv bash
|
|
||||||
# shellcheck shell=bash
|
|
||||||
|
|
||||||
if [ $ONE_SHOT == "true" ]; then
|
|
||||||
|
|
||||||
# Cleanly kill container by sending kill signal to supervisor process
|
|
||||||
kill 1
|
|
||||||
|
|
||||||
fi
|
|
||||||
@ -28,7 +28,6 @@ echo \
|
|||||||
"PUID=${PUID}
|
"PUID=${PUID}
|
||||||
PGID=${PGID}
|
PGID=${PGID}
|
||||||
TZ=${TZ}
|
TZ=${TZ}
|
||||||
ONE_SHOT=${ONE_SHOT}
|
|
||||||
INTERVAL=${INTERVAL}
|
INTERVAL=${INTERVAL}
|
||||||
GENERATE_DHPARAM=${GENERATE_DHPARAM}
|
GENERATE_DHPARAM=${GENERATE_DHPARAM}
|
||||||
CERT_COUNT=${CERT_COUNT}"
|
CERT_COUNT=${CERT_COUNT}"
|
||||||
|
|||||||
@ -1 +0,0 @@
|
|||||||
oneshot
|
|
||||||
@ -1 +0,0 @@
|
|||||||
exec /check-one-shot.sh
|
|
||||||
Reference in New Issue
Block a user