push

docker-compose.yml

@@ -2,14 +2,16 @@ services:
   certgen:
     image: alpine:3.20
     command: >
-      sh -c '
+      sh -euc '
         mkdir -p /certs;
-        if [ ! -f /certs/selfsigned.pem ]; then
-          openssl req -x509 -nodes -newkey rsa:2048 -days 825
-            -subj "/CN=*.internal"
+        apk add --no-cache openssl;
+        [ -f /certs/selfsigned.pem ] || {
+          openssl req -x509 -nodes -newkey rsa:2048 -days 825 \
+            -subj "/CN=*.internal" \
+            -addext "subjectAltName=DNS:*.internal,DNS:hosts.internal,DNS:routerosbackup.internal,DNS:routerosupdate.internal,DNS:sslmonitor.internal" \
             -keyout /certs/selfsigned.key -out /certs/selfsigned.crt;
           cat /certs/selfsigned.key /certs/selfsigned.crt > /certs/selfsigned.pem;
-        fi
+        }
       '
     volumes:
       - ./certs:/certs