Docker Auto SSL-Certs

A docker container to automatize the certification and renewal of Let's Encrypt SSL certificates with the help of letsencrypt's certbot and (possibly your own) acme-dns.

Usage

Note: Replace '[...]' with all required enviroment variables.

Ad-hoc

To try it out juse run:

$ docker pull astzweig/letsencrypt
$ cd $HOME;
$ docker [...] run -v ./certs:/etc/letsencrypt -t -i /etc/periodic/daily/certbot.sh

If successful you can find you certificates inside $HOME/certs/live.

Docker Compose

Inside docker-compose.yml:

version: "3.7"
services:
  ssl:
    image: astzweig/letsencrypt
    volumes:
        - ~/certs:/etc/letsencrypt
    environment:
        - EMAIL=your@email.com
        - [...]

Environment Variables

The following table presents a list of variables that you can tweak in order to modify the container's runtime behaviour. You must supply a value for variables in a bold font. For the others you can supply a value:

Variable name	Meaning
EMAIL	Your email where you want to receive important information regarding your certificates from Let's Encrypt CA.
DOMAINS	A colon (;) separated list of domain names that you want to get a SSL certificate for. Wildcard domains are supported. If you want multiple domains inside one certificate (SAN certificates) separate the domains with a colon. E.g. 'astzweig.de,sub.astzweig.de;*.example.com'.
ACMEDNS_URL	The url to your acme dns server. Default value is: http://acmedns
STAGING	If you set any value, certbot will use the staging environment of letsencrypt. This environment variable is unset by default.

Note: You will need to restart the container every time you change one of these environment variables.

Caveats

• This container will renew certificates automatically every day and overwrite the old ones.

License

• Licensed under the EUPL.
• Logo: certification by Creaticca Creative Agency from the Noun Project.