1
0
Commit Graph

148 Commits

Author SHA1 Message Date
Nicolas Duchon
3c35d72ae1 Update and clarify documentation 2017-12-07 14:28:20 +01:00
Nicolas Duchon
1bb6e861bf Don't pass --email to simp_le if no address is set
Prevents issues similar to #263
2017-12-07 14:24:08 +01:00
Nicolas Duchon
065c387d24 Treat use of LE staging API like test cert
This make the container behave exactly the same wether test certificates
are requested with the LETSENCRYPT_TEST env var or by setting ACME_CA_URI
to the Let's Encrypt stating API endpoint.
2017-12-07 13:48:58 +01:00
Nicolas Duchon
63403f7ec4 Change REUSE_KEY to REUSE_PRIVATE_KEYS
REUSE_KEY might be confusing now that there is a REUSE_ACCOUNT_KEYS env var
2017-12-07 13:36:49 +01:00
Nicolas Duchon
9ecde384bb Small README.md edits
Replace Docker version badge with GitHub release.
2017-12-07 13:24:57 +01:00
Nicolas Duchon
7f66758f01 Improve handling of ACME account keys
This commit enable the two strategies outlined on
https://letsencrypt.org/docs/integration-guide/
under the "One Account or Many?" paragraph, with
the single account key being the default.
2017-12-07 13:24:57 +01:00
Nicolas Duchon
bc88204a2d
Merge pull request #297 from JrCs/doc-separate
Do not tag separate containers as recommended
2017-12-07 13:23:30 +01:00
Nicolas Duchon
00c558186b
Do not tag separate containers as recommended
Peoples seems to often run into misconfiguration issues with this method.
2017-12-05 20:49:13 +01:00
Nicolas Duchon
405cffa64d
Merge pull request #292 from michaelsmithson/master
Correct typo in parameter documentation
2017-12-04 09:19:43 +01:00
Michael Smithson
e7bca40f3c
Correct typo in parameter documentation 2017-12-04 20:41:52 +13:00
Nicolas Duchon
92ca57211b
Merge pull request #289 from JrCs/fix-unsecure-rm
Fix endless loops caused by empty domains
2017-11-24 14:39:54 +01:00
Nicolas Duchon
4085f64c46 Fix trimming on the docker-gen template
Incorrect trimming did lead to empty domains being created on space separated domains
or with comma trailed LETSENCRYPT_HOST environment variable. This in turns led to the
container being caught in an endless loop trying to delete /etc/nginx/certs #254 #288
2017-11-24 14:23:19 +01:00
Nicolas Duchon
8bc51778b5 Do not rm -rf with a trailing empty var 2017-11-24 14:23:19 +01:00
Nicolas Duchon
cb40686fca
Merge pull request #287 from JrCs/dev
Update base image to Alpine 3.6
2017-11-23 21:08:32 +01:00
Nicolas Duchon
f7436f7f37 Update Alpine base image to 3.6
The dockerfile was also streamlined.
Two unneeded -already in Alpine- packages (procps and tar) were removed.
The MAINTAINER statment has been deprecated in favor of the maintainer LABEL.
2017-11-22 23:19:51 +01:00
Nicolas Duchon
a9c91da07e Fix update_certs for busybox pkill
As of Alpine 3.4 the procps package does not provide pkill.
Busybox's pkill usage is slightly different.
2017-11-22 22:48:42 +01:00
Nicolas Duchon
83174ed375 Shell linting
https://github.com/koalaman/shellcheck/wiki

start.sh:
Fix SC2173 on line 14.

letsencrypt_service:
Ignore SC2120 and SC1090.
Fix SC1087 on line 54, SC2068 on lines 54 and 124.
Fix SC2034 on lines 12, 13, 19 and 20.
+ use pushd / popd to change the CWD back to /etc/nginx/certs after simp_le execution.

functions.sh:
Ignore SC2155.
Add the missing shebang.

entrypoint.sh:
Ignore SC2155.
2017-11-22 18:27:39 +01:00
Ali
d42c846d8e Removed -only-exposed from from docker-gen calls (#281)
Remove the last remaining -only-exposed on /app/function.sh after #230
2017-11-20 19:59:51 +01:00
Nicolas Duchon
94c2416906
Merge pull request #285 from buchdag/travis-ci
Add Travis CI automated testing
2017-11-20 11:55:07 +01:00
Nicolas Duchon
43b913e616
Merge pull request #230 from thmhoag/master
Remove -only-exposed from docker-gen statement so that it will pick u…
2017-11-20 01:06:54 +01:00
mjmayer
58cf2b377a Add example for static names in README.md (#257)
* Updates README.md
2017-11-20 01:02:18 +01:00
Nicolas Duchon
859c3e89ce Add Travis build status to README 2017-11-19 23:55:00 +01:00
Nicolas Duchon
6def510e70 Add Travis CI test suite 2017-11-19 22:58:54 +01:00
Yves Blusseau
f289fba723
Merge pull request #276 from revolunet/master
add some documentation
v1.6
2017-11-19 12:15:28 +01:00
Yves Blusseau
f4b4e00eb2
Merge pull request #282 from buchdag/tos-fix
Fix TOS hash mismatch breakage
2017-11-19 12:12:31 +01:00
Nicolas Duchon
ef79d3b1ca Do not use hardcoded ACME ToS hash 2017-11-16 09:33:47 +01:00
Nicolas Duchon
10791baa21 Update simp_le to 0.6.2 2017-11-16 09:23:19 +01:00
Julien Bouquillon
2172866aa6 readme: add note about reachability 2017-11-15 10:25:22 +01:00
Julien Bouquillon
65ea2aec6e add schema 2017-11-15 10:21:29 +01:00
Yves Blusseau
12e674899d
Merge pull request #270 from buchdag/patch-1
Fix forced renewal of certificates
2017-11-09 08:45:35 +01:00
Nicolas Duchon
420d32d397
Fix forced renewal of certificates 2017-11-01 18:21:47 +01:00
Yves Blusseau
2974fc183d Merge pull request #249 from buchdag/force-renew
Add the ability to force the renewal of all certificates
2017-09-22 13:06:21 +02:00
Nicolas Duchon
ebe87bf00b update README.md with script usage 2017-09-06 16:27:33 +02:00
Yves Blusseau
23dca2322f Merge pull request #253 from rathko/patch-1
Added jenkins nginx letsencrypt example
2017-08-28 12:47:22 +02:00
Radek Maciaszek
ba551f14f5 Added jenkins nginx letsencrypt example 2017-08-28 01:40:56 +03:00
Nicolas Duchon
deaf20f71d add force_renew script 2017-08-12 12:41:39 +02:00
Nicolas Duchon
f6f2874003 add --force-renew arg to update_cert
Sets a minimum certificate validity of 90 days, meaning forced renewal for LE certificates.
2017-08-12 12:41:39 +02:00
Nicolas Duchon
86eef9ffb9 allow letsencrypt_service to be sourced 2017-08-12 12:41:39 +02:00
Yves Blusseau
8d10a41013 Merge pull request #248 from buchdag/simp_le-0.5.1
Bump simp_le to 0.5.1 (acme 0.17)
2017-08-12 11:46:19 +02:00
Nicolas Duchon
1746af10b0 bump simp_le to 0.5.1 (acme 0.17) 2017-08-11 20:33:48 +02:00
Yves Blusseau
51e9f888f1 Merge pull request #232 from buchdag/disable-auth
Disable auth for the acme-challenge location
2017-08-06 09:01:13 +02:00
Yves Blusseau
e596ca19cd Merge pull request #237 from buchdag/patch-1
bump simp_le to 0.4.0 (acme 0.16)
2017-07-20 08:40:32 +02:00
Nicolas Duchon
a5066201d8 bump simp_le to 0.4.0 (acme 0.16)
Self explanatory.
2017-07-17 14:02:02 +02:00
Helder Correia
27d433cb63 Complete support for dynamic container names (#231)
* Allow setting NGINX_DOCKER_GEN_CONTAINER from a label
* Find labeled cid in runtime instead of startup time
2017-07-13 12:44:02 +02:00
Nicolas Duchon
429673197d disable auth for the acme-challenge location 2017-07-08 16:59:20 +02:00
Thomas Hoag
899376943f Remove -only-exposed from docker-gen statement so that it will pick up containers on internal networks 2017-07-05 21:51:22 -04:00
Yves Blusseau
1f678ed2c2 Revert "Set /.well-known/acme-challenge nginx location path as prefix string (#192)"
Don't need to use a regexp because the vhost.d/default configuration must be include
specificaly in each server configurations by the nginx.tmpl template file.
Something like:

{{ if (exists (printf "/etc/nginx/vhost.d/%s" $host)) }}
include {{ printf "/etc/nginx/vhost.d/%s" $host }};
{{ else if (exists "/etc/nginx/vhost.d/default") }}
include /etc/nginx/vhost.d/default;
{{ end }}
2017-07-02 11:26:10 +02:00
Yves Blusseau
0b5b2ec5df Merge pull request #229 from ecobytes/master
use tagged 0.3.0 simp_le release

Clode #227
2017-07-02 11:24:18 +02:00
yalamerde
8517136fe5 use tagged 0.3.0 simp_le release 2017-07-01 01:15:32 +01:00
Yves Blusseau
8e36734eaa Merge pull request #218 from buchdag/reuse-key
enable simp_le private key reutilisation
2017-06-30 13:42:05 +02:00