Dockerfile and docker-compose

[ldez]

Dockerfile and docker-compose

[abate]

yes indeed. for the first one is not necessary : for the second one I need a different file name.

[ldez]

Thanks 😸 !

I added a Dockerfile inside the project and the images are available here: https://hub.docker.com/r/ldez/traefik-certs-dumper

[abate]

this is great ! This is a small script to create certificates to be used with tvial/docker-mailserver I just tested.

I love when a plan comes together

#!/bin/sh

/usr/bin/traefik-certs-dumper dump \
        --domain-subdir=true \
        --source /acme.json \
        --dest /dump/live

for f in in $(find /dump -name certificate.crt); do
        cd $(dirname $f)
        ln -s certificate.crt fullchain.pem
        ln -s privatekey.key privkey.pem
        cd -
done

Dockerfile :

FROM ldez/traefik-certs-dumper

COPY dump.sh /
RUN chmod +x /dump.sh

ENTRYPOINT [ "/dump.sh"]

and the associated docker-compose.yml

volumes:
  - certs:

services:
  certdump:
    build: .
    volumes:
      - ./acme.json:/acme.json:ro
      - certs:/dump
    restart: "no"

the certs volume can be mount as /etc/letsencrypt/live

[ldez]

@abate I see that you change the extension.

for f in in $(find /dump -name certificate.crt); do
        cd $(dirname $f)
        ln -s certificate.crt fullchain.pem
        ln -s privatekey.key privkey.pem
        cd -

Have you try this:

$ traefik-certs-dumper dump --domain-subdir=true --dest /dump/live --crt-ext=.pem --key-ext=.pem
dump
├──my.domain.com
│  ├──certificate.pem
│  └──privatekey.pem
└──private
   └──letsencrypt.key

[ldez]

@abate I added an option to change the names (v1.5.0)

$ traefik-certs-dumper dump --dest /dump/live --domain-subdir=true --crt-name=fullchain --key-name=privkey -crt-ext=.pem --key-ext=.pem 
live
├──my.domain.com
│  ├──fullchain.pem
│  └──privkey.pem
└──private
   └──letsencrypt.key