mirror of
https://github.com/nginx-proxy/nginx-proxy
synced 2025-07-13 07:24:24 +02:00
4c8f22ebcc
Currently any ACME challenge for unknown virtual host returns 503. This is inconvenient because if the user does not use wildcard certificates, then the user must match the configuration of certificate renewal script to what virtual hosts are enabled at the time. This must be done automatically, because due to short certificate lifetime the renewal script runs automatically. Additionally, enabling a previously disabled virtual host forces certificate renewal. Accordingly, it's worthwhile supporting unknown virtual hosts for the purposes of passing ACME challenges. This is done by introducing a global ACME_HTTP_CHALLENGE_ACCEPT_UNKNOWN_HOST variable to control this.
41 lines
770 B
YAML
41 lines
770 B
YAML
services:
|
|
nginx-proxy:
|
|
environment:
|
|
ACME_HTTP_CHALLENGE_ACCEPT_UNKNOWN_HOST: "true"
|
|
|
|
web1:
|
|
image: web
|
|
expose:
|
|
- "81"
|
|
environment:
|
|
WEB_PORTS: "81"
|
|
VIRTUAL_HOST: "web1.nginx-proxy.tld"
|
|
|
|
web2:
|
|
image: web
|
|
expose:
|
|
- "82"
|
|
environment:
|
|
WEB_PORTS: "82"
|
|
VIRTUAL_HOST: "web2.nginx-proxy.tld"
|
|
ACME_HTTP_CHALLENGE_LOCATION: "false"
|
|
|
|
web3:
|
|
image: web
|
|
expose:
|
|
- "83"
|
|
environment:
|
|
WEB_PORTS: "83"
|
|
VIRTUAL_HOST: "web3.nginx-proxy.tld"
|
|
HTTPS_METHOD: noredirect
|
|
|
|
web4:
|
|
image: web
|
|
expose:
|
|
- "84"
|
|
environment:
|
|
WEB_PORTS: "84"
|
|
VIRTUAL_HOST: "web4.nginx-proxy.tld"
|
|
HTTPS_METHOD: noredirect
|
|
ACME_HTTP_CHALLENGE_LOCATION: "false"
|