Interanet/jitsi-meet-deployment
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

web: add builtin Let's Encrypt support

Browse Source
This commit is contained in:
Saúl Ibarra Corretgé
2018-11-07 11:23:08 +01:00
parent 2115bc0ed3
commit f61ef3f093
11 changed files with 78 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
web/rootfs/defaults/letsencrypt-renew Executable file
View File

@@ -0,0 +1,10 @@
#!/bin/bash
# stop nginx
s6-svc -u /var/run/s6/services/nginx
# renew cert
certbot -n renew >> /config/le-renew.log
# start nginx
s6-svc -u /var/run/s6/services/nginx

5
web/rootfs/defaults/ssl.conf
View File

@@ -7,8 +7,13 @@ ssl_session_tickets off;
ssl_dhparam /config/nginx/dhparams.pem;
# ssl certs
{{ if .Env.ENABLE_LETSENCRYPT }}
ssl_certificate /etc/letsencrypt/live/{{ .Env.LETSENCRYPT_DOMAIN }}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{ .Env.LETSENCRYPT_DOMAIN }}/privkey.pem;
{{ else }}
ssl_certificate /config/keys/cert.crt;
ssl_certificate_key /config/keys/cert.key;
{{ end }}
# protocols
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;