Interanet/jitsi-meet-deployment
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

web: install acme certs to persistent storage

Browse Source
This commit is contained in:
Saúl Ibarra Corretgé
2020-12-04 15:17:48 +01:00
parent 1d2c68a32f
commit 4cb181c1b2
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
web/rootfs/defaults/ssl.conf
View File

@@ -5,8 +5,8 @@ ssl_session_tickets off;
# ssl certs # ssl certs
{{ if .Env.ENABLE_LETSENCRYPT | default "0" | toBool }} {{ if .Env.ENABLE_LETSENCRYPT | default "0" | toBool }}
ssl_certificate /etc/nginx/acme/{{ .Env.LETSENCRYPT_DOMAIN }}/fullchain.pem; ssl_certificate /config/acme-certs/{{ .Env.LETSENCRYPT_DOMAIN }}/fullchain.pem;
ssl_certificate_key /etc/nginx/acme/{{ .Env.LETSENCRYPT_DOMAIN }}/key.pem; ssl_certificate_key /config/acme-certs/{{ .Env.LETSENCRYPT_DOMAIN }}/key.pem;
{{ else }} {{ else }}
ssl_certificate /config/keys/cert.crt; ssl_certificate /config/keys/cert.crt;
ssl_certificate_key /config/keys/cert.key; ssl_certificate_key /config/keys/cert.key;

8
web/rootfs/etc/cont-init.d/10-config
View File

@@ -16,7 +16,7 @@ if [[ $DISABLE_HTTPS -ne 1 ]]; then
sh ./acme.sh --install --home /config/acme.sh --accountemail $LETSENCRYPT_EMAIL sh ./acme.sh --install --home /config/acme.sh --accountemail $LETSENCRYPT_EMAIL
popd popd
fi fi
if [[ ! -f /etc/nginx/acme/$LETSENCRYPT_DOMAIN/fullchain.pem ]]; then if [[ ! -f /config/acme-certs/$LETSENCRYPT_DOMAIN/fullchain.pem ]]; then
STAGING="" STAGING=""
if [[ $LETSENCRYPT_USE_STAGING -eq 1 ]]; then if [[ $LETSENCRYPT_USE_STAGING -eq 1 ]]; then
STAGING="--staging" STAGING="--staging"
@@ -37,11 +37,11 @@ if [[ $DISABLE_HTTPS -ne 1 ]]; then
echo "Exiting." echo "Exiting."
exit 1 exit 1
fi fi
mkdir -p /etc/nginx/acme/$LETSENCRYPT_DOMAIN mkdir -p /config/acme-certs/$LETSENCRYPT_DOMAIN
if ! /config/acme.sh/acme.sh \ if ! /config/acme.sh/acme.sh \
--install-cert -d $LETSENCRYPT_DOMAIN \ --install-cert -d $LETSENCRYPT_DOMAIN \
--key-file /etc/nginx/acme/$LETSENCRYPT_DOMAIN/key.pem \ --key-file /config/acme-certs/$LETSENCRYPT_DOMAIN/key.pem \
--fullchain-file /etc/nginx/acme/$LETSENCRYPT_DOMAIN/fullchain.pem ; then --fullchain-file /config/acme-certs/$LETSENCRYPT_DOMAIN/fullchain.pem ; then
echo "Failed to install certificate." echo "Failed to install certificate."
# this tries to get the user's attention and to spare the # this tries to get the user's attention and to spare the
# authority's rate limit: # authority's rate limit: