Kaynağa Gözat

jakies drobne zmiany

master
Lukasz Jarosz 7 yıl önce
ebeveyn
işleme
02fe87463c
2 değiştirilmiş dosya ile 5 ekleme ve 2 silme
  1. 4
    1
      README.md
  2. 1
    1
      files/usr/bin/ssl-auto-renew

+ 4
- 1
README.md Dosyayı Görüntüle

11
 
11
 
12
 ## SSL
12
 ## SSL
13
 Image supports using SSL with nginx which acts as reverse proxy for Gitea. It has embedded Lets Encrypt support with auto renewal. If you don't have account.key script will generate it for you.
13
 Image supports using SSL with nginx which acts as reverse proxy for Gitea. It has embedded Lets Encrypt support with auto renewal. If you don't have account.key script will generate it for you.
14
-Required files for cert are /data/ssl/cert.crt /data/ssl/cert.key . 
14
+Required files for cert are /data/ssl/cert.crt /data/ssl/cert.key .
15
+
16
+## Gitea
17
+There are a few tweaks to app.ini template. Most of them are around disabling unecessary logs and features that may lead to potentional exploit of installation.  

+ 1
- 1
files/usr/bin/ssl-auto-renew Dosyayı Görüntüle

5
     [[ ! -f $file ]] && exit
5
     [[ ! -f $file ]] && exit
6
   done
6
   done
7
 
7
 
8
-  python3 -m acme_tiny --account-key /data/ssl/account.key --csr /data/ssl/domain.csr --acme-dir /run/nginx/challenges > /data/ssl/cert.crt
8
+  python3 -m acme_tiny --account-key /data/ssl/account.key --csr /data/ssl/domain.csr --acme-dir /run/nginx/challenges > /tmp/cert.crt && mv /tmp/cert.crt /data/ssl/cert.crt
9
   s6-svc -du /etc/s6/nginx
9
   s6-svc -du /etc/s6/nginx
10
 fi
10
 fi

Loading…
İptal
Kaydet