coreos-home-server/service/letsencrypt/container/run-lego

#!/bin/sh

set -eu

# Correct permissions where needed.
chown -R letsencrypt:letsencrypt /var/lib/letsencrypt

# Run ACME verification with parameters given.
exec gosu letsencrypt /usr/bin/lego "$@"
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values. 2021-09-22 20:21:21 +00:00			`#!/bin/sh`

letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases. 2023-12-30 16:29:12 +00:00			`set -eu`

letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values. 2021-09-22 20:21:21 +00:00			`# Correct permissions where needed.`
			`chown -R letsencrypt:letsencrypt /var/lib/letsencrypt`

			`# Run ACME verification with parameters given.`
letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases. 2023-12-30 16:29:12 +00:00			`exec gosu letsencrypt /usr/bin/lego "$@"`