This commit is contained in:
Mateusz Gruszczyński
2025-09-22 09:20:43 +02:00
parent 7af4ce13ac
commit 626990a77b

View File

@@ -2,14 +2,16 @@ services:
certgen: certgen:
image: alpine:3.20 image: alpine:3.20
command: > command: >
sh -c ' sh -euc '
mkdir -p /certs; mkdir -p /certs;
if [ ! -f /certs/selfsigned.pem ]; then apk add --no-cache openssl;
openssl req -x509 -nodes -newkey rsa:2048 -days 825 [ -f /certs/selfsigned.pem ] || {
-subj "/CN=*.internal" openssl req -x509 -nodes -newkey rsa:2048 -days 825 \
-subj "/CN=*.internal" \
-addext "subjectAltName=DNS:*.internal,DNS:hosts.internal,DNS:routerosbackup.internal,DNS:routerosupdate.internal,DNS:sslmonitor.internal" \
-keyout /certs/selfsigned.key -out /certs/selfsigned.crt; -keyout /certs/selfsigned.key -out /certs/selfsigned.crt;
cat /certs/selfsigned.key /certs/selfsigned.crt > /certs/selfsigned.pem; cat /certs/selfsigned.key /certs/selfsigned.crt > /certs/selfsigned.pem;
fi }
' '
volumes: volumes:
- ./certs:/certs - ./certs:/certs