Update readme to include additional options. Update env variable for

additional directives in location declaration naming.
This commit is contained in:
William Dix 2014-12-16 20:48:37 -05:00
parent f27be7b348
commit 517807dd2c
2 changed files with 10 additions and 1 deletions

View file

@ -66,6 +66,15 @@ hosts in use. The certificate and keys should be named after the virtual host w
`.key` extension. For example, a container with `VIRTUAL_HOST=foo.bar.com` should have a
`foo.bar.com.crt` and `foo.bar.com.key` file in the certs directory.
#### Further Nginx configuration
In order to enable SSL client verification, start the containers with `SSL_VERIFY_CLIENT` environment variable and use
`CLIENT_CA_NAME` to specify the name of the SSL Client Certificate Authority file to use.
You can also specify additional configuration information to be used within the location declaration, by specifying the
`LOCATION_OPTIONS` environment variable. Directives are separated with commas.
#### Wildcard Certificates
Wildcard certificates and keys should be name after the domain name with a `.crt` and `.key` extension.

View file

@ -72,7 +72,7 @@ upstream {{ $host }} {
{{ $certName := (first (groupByKeys $containers "Env.CERT_NAME")) }}
{{ $clientCAName := (first (groupByKeys $containers "Env.CLIENT_CA_NAME")) }}
{{ $locationOptions := (split (trimSuffix "]" (trimPrefix "[" (first (groupByKeys $containers "Env.SSL_LOCATION_OPTIONS")))) ",") }}
{{ $locationOptions := (split (trimSuffix "]" (trimPrefix "[" (first (groupByKeys $containers "Env.LOCATION_OPTIONS")))) ",") }}
{{/* Get the first SSL_VERIFY_CLIENT defined by containers w/ the same vhost */}}
{{ $sslVerifyClient := (first (groupByKeys $containers "Env.SSL_VERIFY_CLIENT")) }}