Add letsencryptclient and configuration file

This commit is contained in:
David Parrish 2015-11-16 01:28:47 -05:00
parent 205b391677
commit bc56da5224
2 changed files with 30 additions and 0 deletions

View file

@ -6,9 +6,15 @@ RUN apt-get update \
&& apt-get install -y -q --no-install-recommends \
ca-certificates \
wget \
git \
&& apt-get clean \
&& rm -r /var/lib/apt/lists/*
# Get Let's Encrypt client
RUN git -C /opt clone https://github.com/letsencrypt/letsencrypt
#RUN cd /opt/letsencrypt && ./letsencrypt-auto
COPY letsencrypt.ini /etc/letsencrypt/cli.ini
# Configure Nginx and apply fix for very long server names
RUN echo "daemon off;" >> /etc/nginx/nginx.conf \
&& sed -i 's/^http {/&\n server_names_hash_bucket_size 128;/g' /etc/nginx/nginx.conf

24
letsencrypt.ini Normal file
View file

@ -0,0 +1,24 @@
# This is an example of the kind of things you can do in a configuration file.
# All flags used by the client can be configured here. Run Let's Encrypt with
# "--help" to learn more about the available options.
# Use a 4096 bit RSA key instead of 2048
rsa-key-size = 4096
# Always use the staging/testing server
server = https://acme-staging.api.letsencrypt.org/directory
# Uncomment and update to register with the specified e-mail address
# email = foo@example.com
# Uncomment to use a text interface instead of ncurses
text = True
# Uncomment to use the standalone authenticator on port 443
# authenticator = standalone
# standalone-supported-challenges = tls-sni-01
# Uncomment to use the webroot authenticator. Replace webroot-path with the
# path to the public_html / webroot folder being served by your web server.
authenticator = webroot
webroot-path = /usr/share/nginx/html