Commit Graph

257 Commits

Author SHA1 Message Date
Nicolas Duchon
1e9dca8a5a
Test unit for standalone certificates 2018-11-23 21:25:35 +01:00
Nicolas Duchon
e0492cfd5b
Add standalone certificate feature
Standalone certificates are generated from a static user provided
configuration file rather than from the dynamicaly generated (from
running containers environment variables) letsencrypt_service_data file.
2018-11-23 21:10:26 +01:00
Nicolas Duchon
f936be75a3
Merge pull request #472 from buchdag/fix-465
Follow certificates managed by the companion with a dot file
2018-11-23 17:02:20 +01:00
Nicolas Duchon
2ea189c165
Shorten the test functions timeout 2018-11-23 15:26:13 +01:00
Nicolas Duchon
b3e7741c1c
Enhancement on the symlinks test unit 2018-11-23 15:26:13 +01:00
Nicolas Duchon
bb0d7d8575
Use dotfile to identify managed certs
fix #465
2018-11-23 15:24:56 +01:00
Nicolas Duchon
9781ed0b0e
Merge pull request #463 from buchdag/permissions
Ownership and permissions configuration
2018-10-31 09:14:22 +01:00
Nicolas Duchon
5fd27be860
Merge pull request #458 from JrCs/simp_le-0.11
Update simp_le to 0.11.0
2018-10-30 22:19:38 +01:00
Nicolas Duchon
5e10577638
Change ownership of public files too 2018-10-29 13:32:37 +01:00
Nicolas Duchon
2864909ad1
Add test unit for non default permissions 2018-10-29 10:49:38 +01:00
Nicolas Duchon
28b8bde6e5
Pass cli args to run_le_container test functon 2018-10-29 10:32:18 +01:00
Nicolas Duchon
d277e66089
Check perms only on simp_le non error exit 2018-10-29 10:32:17 +01:00
Nicolas Duchon
7fe8dd27f1
Check if path exist before perm check 2018-10-29 10:32:17 +01:00
Nicolas Duchon
a8f906b9ca
Default perms 755 (folders) - 644 (files) 2018-10-29 10:32:12 +01:00
Nicolas Duchon
c5d59e0c45
Ownership and permissions configuration 2018-10-29 00:43:45 +01:00
Nicolas Duchon
ea98b4686e
Update simp_le to 0.11.0 2018-10-18 12:45:38 +02:00
Nicolas Duchon
212e25134a
Merge pull request #436 from buchdag/fix-perms
Restrain permissions on sensitive files
2018-09-23 10:39:46 +02:00
Nicolas Duchon
c2c264cb60
Typo in docker_api test unit
Introduced by 234c906
2018-09-16 09:20:58 +02:00
Nicolas Duchon
6d2f4ddb12
Add test unit for permissions 2018-09-16 09:20:58 +02:00
Nicolas Duchon
cd5729ce02
Check & enforce perms on sensitive files
fix #412
2018-09-16 09:20:58 +02:00
Nicolas Duchon
2adfddc486
Run test containers on boulder network
In preparation for upcoming permissions and account_keys test units
2018-09-03 10:39:02 +02:00
Nicolas Duchon
51a48eedf0
Merge pull request #429 from buchdag/ci-tests-cleanup
Ci tests cleanup
2018-08-20 19:25:57 +02:00
Nicolas Duchon
9e73b262a4
Use bash with docker execs 2018-08-20 17:31:32 +02:00
Nicolas Duchon
f15dbc6a73
Minor typos 2018-08-20 17:31:31 +02:00
Nicolas Duchon
234c9065de
Use trapped cleanup on CI tests 2018-08-20 17:31:31 +02:00
Nicolas Duchon
7a3b918a41
Merge pull request #424 from JrCs/cleanup_links-patch
Only consider links in cleanup_links function
2018-08-13 10:26:06 +02:00
Nicolas Duchon
d36e1d3b8b
Add missing test logs on CI failure 2018-08-12 23:57:29 +02:00
Nicolas Duchon
782763bec5
Always reload_nginx during init
This ensure that nginx always use latest certs, keys, etc even on 
container restart.
2018-08-12 23:56:31 +02:00
Nicolas Duchon
97361c2081
Only consider links in cleanup_links function
Instead of considering any regular file matching /etc/nginx/certs/*.crt
2018-08-12 22:56:06 +02:00
Nicolas Duchon
eaec60411a
Merge pull request #423 from buchdag/default-cert-key
Automatic creation of default cert and private key
2018-08-12 14:50:44 +02:00
Nicolas Duchon
a0afb09ebb
Update documentation 2018-08-12 12:18:33 +02:00
Nicolas Duchon
1a294ac9c8
Update simp_le to 0.10.0 (#422) 2018-08-12 10:16:57 +02:00
Nicolas Duchon
8633ac83bb
Add default certificate test unit 2018-08-04 19:08:56 +02:00
Nicolas Duchon
483c78063b
Fix test breakage with default cert
And prepare functions for the default certificate test unit.
2018-08-04 19:08:55 +02:00
Nicolas Duchon
7ac961b092
Create default cert and key if absent 2018-08-02 22:56:59 +02:00
Nicolas Duchon
8dc65787d5
Remove set -x for debug (#403) 2018-08-02 00:01:21 +02:00
Nicolas Duchon
d33a403d09
Silence docker_exec noisy output after #401 (#402)
Going through /app/docker-entrypoint.sh in the nginx-proxy
container generate some unwanted noise to std out.
2018-07-08 14:10:10 +02:00
Nicolas Duchon
2291bfde4a
Upgrade to alpine 3.8 (#414) 2018-07-06 19:27:27 +02:00
Nicolas Duchon
2700c8ff1f
Add a test unit for /app/force_renew (#407) 2018-06-16 19:50:46 +02:00
Nicolas Duchon
09ade6f845
Hardcode path to /app/letsencrypt_service_data (#404) 2018-06-15 08:45:52 +02:00
Nicolas Duchon
11ce7d1c98
Compare DH param with sha256 instead of md5 (#406) 2018-06-15 08:45:20 +02:00
Nicolas Duchon
fa5baf54cc
Merge pull request #401 from thomseddon/fix/nginx-proxy-reload
invoke /app/docker-entrypoint.sh when reloading nginx-proxy
2018-06-14 15:13:11 +02:00
Thom Seddon
060365a672 invoke /app/docker-entrypoint.sh when reloading nginx-proxy 2018-06-14 13:19:47 +01:00
Nicolas Duchon
2228154591
Remove old procps specific pkill command (#400)
We don't use procps anymore.
2018-06-13 14:12:29 +02:00
Nicolas Duchon
e823bdcc99
Update simp_le to 0.9.0 (#399)
Fix an installation bug with pip.
2018-06-13 13:47:05 +02:00
Nicolas Duchon
7c07356e42
Use background DH group creation (#394)
Credits to @kamermans for most of the idea
2018-06-08 15:09:50 +02:00
Nicolas Duchon
e88a5a72d4
Error message enhancement to #321 (#393)
Output a different message when the
check_nginx_proxy_container_run
function can't get a container ID.
2018-06-05 09:44:16 +02:00
Nicolas Duchon
af48249ede
Check deprecated env var at container init only (#392) 2018-06-05 09:43:24 +02:00
Nicolas Duchon
9d8f112c02
Use multi-stage build (#391)
Allows to build for any arch
Credits to @wiget for the idea
2018-06-05 09:37:32 +02:00
Nicolas Duchon
0d052a84ee
README: warn about ACME v2 not being supported (#390) 2018-06-04 10:45:11 +02:00