deuill/coreos-home-server
1
0
Fork 0
mirror of https://github.com/deuill/coreos-home-server.git synced 2024-09-21 05:30:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
c496425203
coreos-home-server/service/letsencrypt/Containerfile

21 lines
904 B
Plaintext
Raw Normal View History

letsencrypt: Move to binary build Upstream provides binary builds, which are generally faster to install compared to source builds.
2024-01-03 18:51:12 +00:00
FROM docker.io/debian:bookworm-slim@sha256:f80c45482c8d147da87613cb6878a7238b8642bcc24fc11bad78c7bec726f340 AS builder
ARG VERSION=4.14.2 # renovate: datasource=github-releases depName=go-acme/lego extractVersion=^v(?<version>.*)$
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
letsencrypt: Move to binary build Upstream provides binary builds, which are generally faster to install compared to source builds.
2024-01-03 18:51:12 +00:00
WORKDIR /src
ADD https://github.com/go-acme/lego/releases/download/v${VERSION}/lego_v${VERSION}_linux_amd64.tar.gz /src.tar.gz
RUN tar --no-same-owner -xvzf /src.tar.gz && \
install -D --mode 0755 /src/lego /build/usr/bin/lego
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases.
2023-12-30 16:29:12 +00:00
FROM docker.io/debian:bookworm-slim@sha256:f80c45482c8d147da87613cb6878a7238b8642bcc24fc11bad78c7bec726f340
RUN apt-get update -y && apt-get upgrade -y && \
apt-get install -y --no-install-recommends ca-certificates gettext gosu
RUN adduser --system --group --uid 10000 --home /var/lib/letsencrypt letsencrypt
COPY --from=builder /build /
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
COPY container/run-lego /run-lego
letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases.
2023-12-30 16:29:12 +00:00
COPY container/run-hook /run-hook
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
ENTRYPOINT ["/run-lego"]
Reference in New Issue Copy Permalink