mirror of
https://github.com/balena-io/open-balena.git
synced 2025-01-19 03:06:25 +00:00
99dd615e55
Add a service which will acquire certificates from an ACME cert provider, such as LetsEncrypt (), to allow an openBalena instance to use a publicly trusted certificate instead of the self-signed one it wil generate on setup. Change-type: patch Signed-off-by: Rich Bayliss <rich@balena.io>
20 lines
501 B
Docker
20 lines
501 B
Docker
FROM alpine
|
|
|
|
EXPOSE 80
|
|
WORKDIR /usr/src/app
|
|
VOLUME [ "/usr/src/app/certs" ]
|
|
|
|
RUN apk add --update bash curl git openssl ncurses socat
|
|
|
|
RUN git clone https://github.com/Neilpang/acme.sh.git && \
|
|
cd acme.sh && \
|
|
git checkout 08357e3cb0d80c84bdaf3e42ce0e439665387f57 . && \
|
|
./acme.sh --install \
|
|
--cert-home /usr/src/app/certs
|
|
|
|
COPY entry.sh /entry.sh
|
|
COPY cert-provider.sh ./cert-provider.sh
|
|
COPY fake-le-bundle.pem ./
|
|
|
|
ENTRYPOINT [ "/entry.sh" ]
|
|
CMD [ "/usr/src/app/cert-provider.sh" ] |