arno/gencert
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

update readme

Browse Source
This commit is contained in:
Andy 2018-07-12 00:26:13 +02:00
parent 235e22d423
commit fdf9ae9723
Signed by: arno
GPG Key ID: 9076D5E6B31AE99C
1 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
README.md
View File

@ -55,7 +55,9 @@ services:
volumes:
- /srv/data/minio/certs:/root/.minio/certs
- /srv/services/gencert/gencert.sh:/gencert.sh:ro
entrypoint: sh -c "cd /root/.minio/certs && /gencert.sh --cn minio.example.com && minio server /data"
entrypoint: sh -c "cd /root/.minio/certs &&
/gencert.sh --cn minio.example.com &&
minio server /data"
environment:
- "MINIO_ACCESS_KEY=redacted"
- "MINIO_SECRET_KEY=redacted"
@ -65,7 +67,9 @@ services:
volumes:
- /srv/services/gencert/gencert.sh:/gencert.sh:ro
- /srv/data/registry/certs:/certs
entrypoint: sh -c "cd /certs && /gencert.sh --cn registry.example.com && registry serve /etc/docker/registry/config.yml"
entrypoint: sh -c "cd /certs &&
/gencert.sh --cn registry.example.com &&
registry serve /etc/docker/registry/config.yml"
environment:
REGISTRY_HTTP_TLS_CERTIFICATE: '/certs/public.crt'
REGISTRY_HTTP_TLS_KEY: '/certs/private.key'
@ -93,7 +97,14 @@ services:
image: dockercloud/hello-world
volumes:
- /srv/services/gencert/gencert.sh:/gencert.sh:ro
entrypoint: sh -c "mkdir /certs && cd /certs && /gencert.sh --cn helloworld && apk --update add socat && ( nohup /run.sh & ) && echo '@edge http://nl.alpinelinux.org/alpine/edge/main' | tee -a /etc/apk/repositories && apk --update add socat@edge && socat -v -v -d -d OPENSSL-LISTEN:443,reuseaddr,verify=0,cafile=./ca.crt,cert=./public.crt,key=./private.key,fork tcp4-connect:127.0.0.1:80"
entrypoint: sh -c "mkdir /certs &&
cd /certs &&
/gencert.sh --cn helloworld &&
apk --update add socat &&
( nohup /run.sh & ) &&
echo '@edge http://nl.alpinelinux.org/alpine/edge/main' | tee -a /etc/apk/repositories &&
apk --update add socat@edge &&
socat -v -v -d -d OPENSSL-LISTEN:443,reuseaddr,verify=0,cafile=./ca.crt,cert=./public.crt,key=./private.key,fork TCP4-CONNECT:127.0.0.1:80"
labels:
traefik.enable: 'true'
traefik.frontend.rule: 'Host: hello.example.com'