mirror of
https://github.com/2martens/cloud-configuration.git
synced 2026-10-17 08:37:56 +02:00
fix: Prevent syntax error and load self-signed certs
This commit is contained in:
@@ -14,6 +14,7 @@ FROM nginx:mainline-alpine
|
|||||||
|
|
||||||
COPY nginx.conf /etc/nginx/nginx.conf
|
COPY nginx.conf /etc/nginx/nginx.conf
|
||||||
COPY paths-enabled /etc/nginx/paths-enabled.d
|
COPY paths-enabled /etc/nginx/paths-enabled.d
|
||||||
|
COPY certificates-available /etc/nginx/certificates-available.d
|
||||||
|
|
||||||
COPY --from=cert-builder /tmp/ssl/selfsigned.crt /etc/nginx/ssl/selfsigned.crt
|
COPY --from=cert-builder /tmp/ssl/selfsigned.crt /etc/nginx/ssl/selfsigned.crt
|
||||||
COPY --from=cert-builder /tmp/ssl/selfsigned.key /etc/nginx/ssl/selfsigned.key
|
COPY --from=cert-builder /tmp/ssl/selfsigned.key /etc/nginx/ssl/selfsigned.key
|
||||||
|
|||||||
@@ -0,0 +1,2 @@
|
|||||||
|
ssl_certificate /etc/letsencrypt/live/api.2martens.de/fullchain.pem;
|
||||||
|
ssl_certificate_key /etc/letsencrypt/live/api.2martens.de/privkey.pem;
|
||||||
@@ -0,0 +1,2 @@
|
|||||||
|
ssl_certificate /etc/nginx/ssl/selfsigned.crt;
|
||||||
|
ssl_certificate_key /etc/nginx/ssl/selfsigned.key;
|
||||||
@@ -6,11 +6,10 @@ NGINX_CONF="/etc/nginx/nginx.conf"
|
|||||||
|
|
||||||
if [ -f "$CERT_PATH" ] && [ -f "$KEY_PATH" ]; then
|
if [ -f "$CERT_PATH" ] && [ -f "$KEY_PATH" ]; then
|
||||||
echo "✅ Real certificate found — starting full HTTPS Nginx"
|
echo "✅ Real certificate found — starting full HTTPS Nginx"
|
||||||
|
ln -sf /etc/nginx/certificates-available.d/letsencrypt.conf /etc/nginx/certificates-enabled.d/certificates.conf
|
||||||
else
|
else
|
||||||
echo "⚠️ No certificate found — starting Nginx with self-signed TLS fallback"
|
echo "⚠️ No certificate found — starting Nginx with self-signed TLS fallback"
|
||||||
mkdir -p /etc/letsencrypt/live/api.2martens.de
|
ln -sf /etc/nginx/certificates-available.d/selfsigned.conf /etc/nginx/certificates-enabled.d/certificates.conf
|
||||||
ln -sf /etc/nginx/ssl/selfsigned.crt /etc/letsencrypt/live/api.2martens.de/fullchain.pem
|
|
||||||
ln -sf /etc/nginx/ssl/selfsigned.key /etc/letsencrypt/live/api.2martens.de/privkey.pem
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
exec /docker-entrypoint.sh "$@
|
exec /docker-entrypoint.sh "$@"
|
||||||
|
|||||||
@@ -21,9 +21,7 @@ http {
|
|||||||
listen 443 ssl;
|
listen 443 ssl;
|
||||||
server_name api.2martens.de;
|
server_name api.2martens.de;
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/api.2martens.de/fullchain.pem;
|
include /etc/nginx/certificates-enabled.d/*.conf;
|
||||||
ssl_certificate_key /etc/letsencrypt/live/api.2martens.de/privkey.pem;
|
|
||||||
|
|
||||||
include /etc/nginx/paths-enabled.d/*.conf;
|
include /etc/nginx/paths-enabled.d/*.conf;
|
||||||
|
|
||||||
location / { return 404; }
|
location / { return 404; }
|
||||||
|
|||||||
Reference in New Issue
Block a user