commit 15edd774a96a8d310ed4bde0458925924d745975
author Nico Huber <nico.h@gmx.de> Sat Jul 01 18:16:50 2023 +0000
committer Nico Huber <nico.h@gmx.de> Fri Jul 21 22:34:24 2023 +0000
tree 476cf08d66c25049b8adcfeaba6f54b990dafa4a
parent aa15aeed4eae414ef87726d262ef9661dd9c569e

Use certbot for let's encrypt certificate

nginx/Dockerfile.entrypoint

diff --git a/nginx/Dockerfile.entrypoint b/nginx/Dockerfile.entrypoint
index 0c2ff96..515301c 100644
--- a/nginx/Dockerfile.entrypoint
+++ b/nginx/Dockerfile.entrypoint
@@ -4,8 +4,17 @@
 
 {
     domain=${SA_PUBLIC_DOMAIN_NAME:-miau.local}
+    live=/etc/nginx/certs/live
     html=/var/www/html
 
+    if [ ! -f ${live}/${domain}/privkey.pem ]; then
+        mkdir -p ${live}/${domain}
+        cp /etc/ssl/private/sa-selfsigned.key ${live}/${domain}/privkey.pem
+        cp /etc/ssl/certs/sa-selfsigned.crt ${live}/${domain}/fullchain.pem
+        cp /etc/ssl/certs/sa-selfsigned.crt ${live}/${domain}/chain.pem
+        cp /etc/ssl/certs/sa-selfsigned.crt ${live}/${domain}/cert.pem
+    fi
+
     rm -rf ${html}
     cp -a /var/www/simpleid ${html}
 
@@ -22,6 +31,6 @@
 
 chown -R nginx:nginx /var/www/html/
 
-chmod -R a-w /etc/nginx/conf.d/sa.conf /var/www/html/
+chmod -R a-w /etc/nginx/certs/ /etc/nginx/conf.d/sa.conf /var/www/html/
 
 exec /docker-entrypoint.sh "$@"