brain initiation

20230420014604-letsencrypt_helper.org

@@ -0,0 +1,21 @@
+:PROPERTIES:
+:ID:       83ce6fe7-aadc-4f2f-9c1e-bc73ba7590b8
+:END:
+#+title:  letsencrypt-helper
+[[id:df046fd7-1f82-4e12-9065-56d222f56408][docker]] [[id:936191f2-696b-4d9a-96ad-c8449778ae26][container]] that lets you use [[id:95c8982d-e104-43a2-9bb2-fd7e1c3204f2][SSL]] [[id:e28dfeaa-876b-4255-a25e-dcc0c909d08a][certificates]].  works good with [[id:0b50e19a-0608-434c-a57c-fd719e3bb8bf][nginx]] and [[id:90e3b8a2-b523-4044-af6f-fd4a559b2d7f][traefik]] as [[id:98642623-d85a-432c-90d5-bfff7ead8c7b][reverse proxies]].  If you self sign your ssl [[id:e28dfeaa-876b-4255-a25e-dcc0c909d08a][certificate]]certificates you could use this code in [[id:fcbfabfa-4a8c-4826-8b57-5dce05965c76][docker-compose]] (not tested):
+#+begin_src bash
+ # self signed
+  omgwtfssl:
+    image: paulczar/omgwtfssl
+    restart: "no"
+    volumes:
+      - certs:/certs
+    environment:
+      - SSL_SUBJECT=servhostname.local
+      - CA_SUBJECT=my@example.com
+      - SSL_KEY=/certs/servhostname.local.key
+      - SSL_CSR=/certs/servhostname.local.csr
+      - SSL_CERT=/certs/servhostname.local.crt
+    networks:
+      - proxy-tier 
+#+end_src