coreos-home-server/config/service/letsencrypt/Containerfile
Alex Palaistras d5d75b3995 letsencrypt: Use dedicated user for ACME process
This improves security and ensures that files end up under a consistent
set of UID and GID values.
2021-09-22 21:21:21 +01:00

10 lines
279 B
Docker

FROM docker.io/goacme/lego:v4.4.0
RUN addgroup --system --gid 10000 letsencrypt
RUN adduser --system --uid 10000 --ingroup letsencrypt --home /var/lib/letsencrypt letsencrypt
RUN apk --no-cache --no-progress add gosu
COPY container/run-lego /run-lego
ENTRYPOINT ["/run-lego"]