deuill/coreos-home-server
1
0
Fork 0
mirror of https://github.com/deuill/coreos-home-server.git synced 2024-09-21 13:40:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
eff9e8d048
coreos-home-server/service/letsencrypt/Containerfile

17 lines
726 B
Plaintext
Raw Normal View History

letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases.
2023-12-30 16:29:12 +00:00
FROM docker.io/golang:1.21-bookworm@sha256:1415bb0b25d3bffc0a44dcf9851c20a9f8bbe558095221d931f2e4a4cc3596eb AS builder
ARG VERSION=v4.14.2 # renovate: datasource=github-releases depName=go-acme/lego
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases.
2023-12-30 16:29:12 +00:00
RUN GOBIN=/build/usr/bin go install -v github.com/go-acme/lego/v4/cmd/lego@${VERSION}
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases.
2023-12-30 16:29:12 +00:00
FROM docker.io/debian:bookworm-slim@sha256:f80c45482c8d147da87613cb6878a7238b8642bcc24fc11bad78c7bec726f340
RUN apt-get update -y && apt-get upgrade -y && \
apt-get install -y --no-install-recommends ca-certificates gettext gosu
RUN adduser --system --group --uid 10000 --home /var/lib/letsencrypt letsencrypt
COPY --from=builder /build /
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
COPY container/run-lego /run-lego
letsencrypt: Move to Debian, source-built image This makes container builds more consistent, and therefore more cacheable in relation to other containers. In addition, certificates and keys are now copied to two separate volumes, one containing all certificates (for use in services like `nginx`, which may require unfettered access to certificates) and one containing certificates only for a specific domain, for use in most other cases.
2023-12-30 16:29:12 +00:00
COPY container/run-hook /run-hook
letsencrypt: Use dedicated user for ACME process This improves security and ensures that files end up under a consistent set of UID and GID values.
2021-09-22 20:21:21 +00:00
ENTRYPOINT ["/run-lego"]
Reference in New Issue Copy Permalink