1
0
docker-letsencrypt-nginx-pr.../docs/Container-configuration.md
Nicolas Duchon c27e66ef80
Update doc
2020-11-27 14:45:41 +01:00

1.9 KiB

Optional container environment variables for custom configuration.

  • ACME_CA_URI - Directory URI for the CA ACME API endpoint (defaults to https://acme-v02.api.letsencrypt.org/directory).

If you set this environment variable value to https://acme-staging-v02.api.letsencrypt.org/directory the container will obtain its certificates from Let's Encrypt test API endpoint that don't have the 5 certs/week/domain limit (but are not trusted by browsers).

For example

$ docker run --detach \
    --name nginx-proxy-letsencrypt \
    --volumes-from nginx-proxy \
    --volume /path/to/certs:/etc/nginx/certs:rw \
    --volume /var/run/docker.sock:/var/run/docker.sock:ro \
    --env "ACME_CA_URI=https://acme-staging-v02.api.letsencrypt.org/directory" \
    jrcs/letsencrypt-nginx-proxy-companion

You can also create test certificates per container (see Test certificates)

  • DEBUG - Set it to 1 to enable debugging of the entrypoint script and generation of LetsEncrypt certificates, which could help you pin point any configuration issues.

  • REUSE_ACCOUNT_KEYS - Set it to false to disable the account keys and account registrations reutilization (see ACME account keys).

  • RENEW_PRIVATE_KEYS - Set it to false to make acme.sh reuse previously generated private key for each certificate instead of creating a new one on certificate renewal. Recommended if you intend to use HPKP (please not however that HPKP has been deprecated by Google's Chrome and that its use is therefore not recommended).

  • DHPARAM_BITS - Change the size of the Diffie-Hellman key generated by the container from the default value of 2048 bits. For example --env DHPARAM_BITS=1024 to support some older clients like Java 6 and 7.