sbrl/docker-images
sbrl/docker-images
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

certbot: use certbot-auto & pip instead to get the latest version

Browse source 
we need this, because otherwise we don't get Cloudflare token support 
:-/
This commit is contained in:
Starbeamrainbowlabs 2020-11-29 01:35:24 +00:00
parent 1e486f312d
commit 9ea5be22cb
Signed by: sbrl
GPG key ID: 1BE5172E637709C2
2 changed files with 17 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -42,4 +42,4 @@ UID | GID | Container | Notes
70 | 70 | etherpad | 70 | 70 | etherpad |
80 | 80 | serve | Static HTTP Server based on Node.js 80 | 80 | serve | Static HTTP Server based on Node.js
90 | 90 | jellyfin | 90 | 90 | jellyfin |
100 | 100 | certbot | 2000 | 2000 | certbot |

18
images/certbot/Dockerfile
View file

@ -1,15 +1,29 @@
ARG REPO_LOCATION ARG REPO_LOCATION
# ARG BASE_VERSION # ARG BASE_VERSION
FROM ${REPO_LOCATION}minideb AS builder
RUN install_packages curl ca-certificates && \
curl -sS https://dl.eff.org/certbot-auto -o /srv/certbot-auto
FROM ${REPO_LOCATION}minideb FROM ${REPO_LOCATION}minideb
RUN install_packages certbot python3-certbot-dns-cloudflare COPY --from=builder /srv/certbot-auto /srv/certbot-auto
RUN /srv/certbot-auto --debug --noninteractive --install-only && \
install_packages python3-pip
WORKDIR /opt/eff.org/certbot/venv
RUN source bin/activate \
&& pip install certbot-dns-cloudflare \
&& deactivate
# Only required if we use acme.sh instead of certbot: openssl openssh-client coreutils dnsutils curl socat tzdata tar oathtool # Only required if we use acme.sh instead of certbot: openssl openssh-client coreutils dnsutils curl socat tzdata tar oathtool
VOLUME /srv/configdir /srv/workdir /srv/logsdir VOLUME /srv/configdir /srv/workdir /srv/logsdir
USER 100:100 USER 2000:2000
ENTRYPOINT [ "/usr/bin/certbot", \ ENTRYPOINT [ "/usr/bin/certbot", \
"--config-dir", "/srv/configdir", \ "--config-dir", "/srv/configdir", \
"--work-dir", "/srv/workdir", \ "--work-dir", "/srv/workdir", \