moony/dockerfiles
1
2
Fork 0
mirror of https://github.com/vimagick/dockerfiles synced 2024-06-25 00:08:49 +00:00
Code Issues Releases Wiki Activity

update letsencrypt

Browse Source
This commit is contained in:
kev 2016-01-16 13:39:09 +08:00
parent ba32d9bb45
commit b83c9aabdb
2 changed files with 18 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
letsencrypt/README.md
View File

@ -14,42 +14,42 @@ letsencrypt:
- "80:80"
- "443:443"
volumes:
- "/etc/letsencrypt:/etc/letsencrypt"
- "/var/lib/letsencrypt:/var/lib/letsencrypt"
- "./etc/letsencrypt:/etc/letsencrypt"
- "./var/lib/letsencrypt:/var/lib/letsencrypt"
```
## up and running
```
# stop nginx
# stop nginx (release 80/tcp and 443/tcp)
$ systemctl stop nginx
# generate keys
$ docker-compose run --rm --service-ports letsencrypt
>>> email: admin@datageek.info
>>> domains: datageek.info blog.datageek.info
>>> domains: datageek.info,bbs.datageek.info,blog.datageek.info,wiki.datageek.info
# copy keys
$ mkdir -p /etc/nginx/ssl/
$ cp /etc/letsencrypt/live/datageek.info/fullchain.pem /etc/nginx/ssl/datageek.info.crt
$ cp /etc/letsencrypt/live/datageek.info/privkey.pem /etc/nginx/ssl/datageek.info.key
$ cp ./etc/letsencrypt/live/datageek.info/fullchain.pem /etc/nginx/ssl/datageek.info.crt
$ cp ./etc/letsencrypt/live/datageek.info/privkey.pem /etc/nginx/ssl/datageek.info.key
# reconfig nginx
$ vi /etc/nginx/sites-enabled/default
server {
listen 80 default;
server_name _;
return 301 https://$host$request_uri;
listen 80 default;
server_name _;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
server_name datageek.info blog.datageek.info;
ssl_certificate ssl/datageek.info.crt;
ssl_certificate_key ssl/datageek.info.key;
location / {
proxy_pass http://127.0.0.1:8000;
}
listen 443 ssl;
server_name datageek.info blog.datageek.info;
ssl_certificate ssl/datageek.info.crt;
ssl_certificate_key ssl/datageek.info.key;
location / {
proxy_pass http://127.0.0.1:8000;
}
}
# start nginx

4
letsencrypt/docker-compose.yml
View File

@ -5,5 +5,5 @@ letsencrypt:
- "80:80"
- "443:443"
volumes:
- "/etc/letsencrypt:/etc/letsencrypt"
- "/var/lib/letsencrypt:/var/lib/letsencrypt"
- "./etc/letsencrypt:/etc/letsencrypt"
- "./var/lib/letsencrypt:/var/lib/letsencrypt"