docker-compose/authentik
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix dhparams path; copy certificates instead of linking them

Browse source
This commit is contained in:
Philip Henning 2024-11-19 14:17:44 +01:00
parent e0a7a2f5e9
commit dbed472925
1 changed files with 4 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

13
scripts/init.sh
View file

@ -43,8 +43,8 @@ echo "" >> ./.env
# Generate dhparam, if not existing # Generate dhparam, if not existing
[[ ! -d ./data/nginx/certs ]] && mkdir -p ./data/nginx/certs && chmod 700 ./data/nginx/certs || true [[ ! -d ./data/nginx/certs ]] && mkdir -p ./data/nginx/certs && chmod 700 ./data/nginx/certs || true
[[ ! -f ./data/nginx/certs/dhparams.pem ]] && echo "" && openssl dhparam -out ./data/nginx/certs/dhparams.pem 4096 \ [[ ! -f ./data/nginx/dhparams.pem ]] && echo "" && openssl dhparam -out ./data/nginx/dhparams.pem 4096 \
&& echo "" && echo "Checking generated dhparams" && openssl dhparam -check -in ./data/nginx/certs/dhparams.pem || true && echo "" && echo "Checking generated dhparams" && openssl dhparam -check -in ./data/nginx/dhparams.pem || true
# Create certificate # Create certificate
if [[ ! -d ./data/.lego ]]; then if [[ ! -d ./data/.lego ]]; then
@ -55,13 +55,8 @@ if [[ ! -d ./data/.lego ]]; then
--accept-tos \ --accept-tos \
--email="acme@base23.de" \ --email="acme@base23.de" \
--domains="sso.base23.de" \ --domains="sso.base23.de" \
--http run --http run \
&& install -m 400 -o 101 -g 101 "./data/.lego/certificates"/{sso.base23.de.crt,sso.base23.de.issuer.crt,sso.base23.de.key} "./data/nginx/certs"
# Link certificates to correct directory
ln -s ../../.lego/certificates/sso.base23.de.crt ./data/nginx/certs/sso.base23.de.crt
ln -s ../../.lego/certificates/sso.base23.de.issuer.crt ./data/nginx/certs/sso.base23.de.issuer.crt
ln -s ../../.lego/certificates/sso.base23.de.key ./data/nginx/certs/sso.base23.de.key
fi fi
# Setup directory for acme cheallenges # Setup directory for acme cheallenges