fix: Prevent syntax error and load self-signed certs

This commit is contained in:
2025-08-02 23:38:35 +02:00
parent 04a25ed27d
commit 408a0a41a0
5 changed files with 9 additions and 7 deletions
+1
View File
@@ -14,6 +14,7 @@ FROM nginx:mainline-alpine
COPY nginx.conf /etc/nginx/nginx.conf COPY nginx.conf /etc/nginx/nginx.conf
COPY paths-enabled /etc/nginx/paths-enabled.d COPY paths-enabled /etc/nginx/paths-enabled.d
COPY certificates-available /etc/nginx/certificates-available.d
COPY --from=cert-builder /tmp/ssl/selfsigned.crt /etc/nginx/ssl/selfsigned.crt COPY --from=cert-builder /tmp/ssl/selfsigned.crt /etc/nginx/ssl/selfsigned.crt
COPY --from=cert-builder /tmp/ssl/selfsigned.key /etc/nginx/ssl/selfsigned.key COPY --from=cert-builder /tmp/ssl/selfsigned.key /etc/nginx/ssl/selfsigned.key
@@ -0,0 +1,2 @@
ssl_certificate /etc/letsencrypt/live/api.2martens.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/api.2martens.de/privkey.pem;
@@ -0,0 +1,2 @@
ssl_certificate /etc/nginx/ssl/selfsigned.crt;
ssl_certificate_key /etc/nginx/ssl/selfsigned.key;
+3 -4
View File
@@ -6,11 +6,10 @@ NGINX_CONF="/etc/nginx/nginx.conf"
if [ -f "$CERT_PATH" ] && [ -f "$KEY_PATH" ]; then if [ -f "$CERT_PATH" ] && [ -f "$KEY_PATH" ]; then
echo "✅ Real certificate found — starting full HTTPS Nginx" echo "✅ Real certificate found — starting full HTTPS Nginx"
ln -sf /etc/nginx/certificates-available.d/letsencrypt.conf /etc/nginx/certificates-enabled.d/certificates.conf
else else
echo "⚠️ No certificate found — starting Nginx with self-signed TLS fallback" echo "⚠️ No certificate found — starting Nginx with self-signed TLS fallback"
mkdir -p /etc/letsencrypt/live/api.2martens.de ln -sf /etc/nginx/certificates-available.d/selfsigned.conf /etc/nginx/certificates-enabled.d/certificates.conf
ln -sf /etc/nginx/ssl/selfsigned.crt /etc/letsencrypt/live/api.2martens.de/fullchain.pem
ln -sf /etc/nginx/ssl/selfsigned.key /etc/letsencrypt/live/api.2martens.de/privkey.pem
fi fi
exec /docker-entrypoint.sh "$@ exec /docker-entrypoint.sh "$@"
+1 -3
View File
@@ -21,9 +21,7 @@ http {
listen 443 ssl; listen 443 ssl;
server_name api.2martens.de; server_name api.2martens.de;
ssl_certificate /etc/letsencrypt/live/api.2martens.de/fullchain.pem; include /etc/nginx/certificates-enabled.d/*.conf;
ssl_certificate_key /etc/letsencrypt/live/api.2martens.de/privkey.pem;
include /etc/nginx/paths-enabled.d/*.conf; include /etc/nginx/paths-enabled.d/*.conf;
location / { return 404; } location / { return 404; }