coreos-home-server/config/service/letsencrypt/Containerfile

FROM docker.io/goacme/lego:v4.4.0

RUN addgroup --system --gid 10000 letsencrypt
RUN adduser --system --uid 10000 --ingroup letsencrypt --home /var/lib/letsencrypt letsencrypt

RUN apk --no-cache --no-progress add su-exec
COPY container/run-lego /run-lego

ENTRYPOINT ["/run-lego"]
Simplify systemd services, use volumes This commit represents a large amount of work toward moving services to a more standard approach to storing data, and a simplification in how networks are managed. 2021-06-27 11:52:47 +00:00			`FROM docker.io/goacme/lego:v4.4.0`
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values. 2021-09-22 20:21:21 +00:00
			`RUN addgroup --system --gid 10000 letsencrypt`
			`RUN adduser --system --uid 10000 --ingroup letsencrypt --home /var/lib/letsencrypt letsencrypt`

letsencrypt: Use `su-exec` instead of `gosu` 2021-09-22 21:27:59 +00:00			`RUN apk --no-cache --no-progress add su-exec`
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values. 2021-09-22 20:21:21 +00:00			`COPY container/run-lego /run-lego`

			`ENTRYPOINT ["/run-lego"]`