AS1024
/
Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add SSL functionality to docker

This commit is contained in:
Roelof Rietbroek (@grace) 2018-04-23 15:54:17 +02:00 committed by Frédéric Guillot
parent 0b475c1850
commit 93846ee990
3 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Dockerfile
View File

@ -2,13 +2,14 @@ FROM alpine:3.7
VOLUME /var/www/app/data VOLUME /var/www/app/data
VOLUME /var/www/app/plugins VOLUME /var/www/app/plugins
VOLUME /etc/nginx/ssl
EXPOSE 80 443
EXPOSE 80
ARG VERSION ARG VERSION
RUN apk update && \ RUN apk update && \
apk add unzip nginx bash ca-certificates s6 curl ssmtp mailx php7 php7-phar php7-curl \ apk add openssl unzip nginx bash ca-certificates s6 curl ssmtp mailx php7 php7-phar php7-curl \
php7-fpm php7-json php7-zlib php7-xml php7-dom php7-ctype php7-opcache php7-zip php7-iconv \ php7-fpm php7-json php7-zlib php7-xml php7-dom php7-ctype php7-opcache php7-zip php7-iconv \
php7-pdo php7-pdo_mysql php7-pdo_sqlite php7-pdo_pgsql php7-mbstring php7-session \ php7-pdo php7-pdo_mysql php7-pdo_sqlite php7-pdo_pgsql php7-mbstring php7-session \
php7-gd php7-mcrypt php7-openssl php7-sockets php7-posix php7-ldap php7-simplexml && \ php7-gd php7-mcrypt php7-openssl php7-sockets php7-posix php7-ldap php7-simplexml && \
@ -26,5 +27,8 @@ RUN cd /tmp \
ADD docker/ / ADD docker/ /
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"] ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
CMD [] CMD []

3
docker/etc/nginx/nginx.conf
View File

@ -20,6 +20,9 @@ http {
server { server {
listen 80; listen 80;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/kanboard.crt;
ssl_certificate_key /etc/nginx/ssl/kanboard.key;
server_name localhost; server_name localhost;
index index.php; index index.php;
root /var/www/app; root /var/www/app;

6
docker/usr/local/bin/entrypoint.sh
View File

@ -1,5 +1,11 @@
#!/bin/bash #!/bin/bash
#generate a new self signed SSL certificate when none is provided in the volume
if [ ! -f /etc/nginx/ssl/kanboard.key ] || [ ! -f /etc/nginx/ssl/kanboard.crt ]
then
openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/nginx/ssl/kanboard.key -out /etc/nginx/ssl/kanboard.crt -subj "/C=GB/ST=London/L=London/O=Self Signed/OU=IT Department/CN=kanboard.org"
fi
chown -R nginx:nginx /var/www/app/data chown -R nginx:nginx /var/www/app/data
chown -R nginx:nginx /var/www/app/plugins chown -R nginx:nginx /var/www/app/plugins