push

docker-compose.yml

@@ -7,13 +7,17 @@ services:
       sh -euc '
         mkdir -p /certs;
         apk add --no-cache openssl;
-        [ -f /certs/selfsigned.pem ] || {
+        gen() {
           openssl req -x509 -nodes -newkey rsa:2048 -days 825 \
             -subj "/CN=*.internal" \
             -addext "subjectAltName=DNS:*.internal,DNS:hosts.internal,DNS:routerosbackup.internal,DNS:routerosupdate.internal,DNS:sslmonitor.internal" \
             -keyout /certs/selfsigned.key -out /certs/selfsigned.crt;
-          cat /certs/selfsigned.key /certs/selfsigned.crt > /certs/selfsigned.pem;
+          cat /certs/selfsigned.crt /certs/selfsigned.key > /certs/selfsigned.pem;  # CERT -> KEY
         }
+        # jeśli brak lub nieprawidłowy PEM to wygeneruj
+        if ! [ -f /certs/selfsigned.pem ] || ! openssl x509 -in /certs/selfsigned.pem -noout >/dev/null 2>&1; then
+          gen
+        fi
       '
     volumes:
       - ./certs:/certs