https://github.com/devops-works/docker-certspotter
This is an (unofficial) image for SSLMate/certspotter (https://github.com/SSLMate/certspotter)
https://github.com/devops-works/docker-certspotter
Last synced: about 1 year ago
JSON representation
This is an (unofficial) image for SSLMate/certspotter (https://github.com/SSLMate/certspotter)
- Host: GitHub
- URL: https://github.com/devops-works/docker-certspotter
- Owner: devops-works
- Created: 2018-11-12T14:12:31.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2024-04-28T22:31:18.000Z (almost 2 years ago)
- Last Synced: 2024-04-28T23:27:37.996Z (almost 2 years ago)
- Language: Shell
- Homepage:
- Size: 6.84 KB
- Stars: 9
- Watchers: 5
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# certspotter Docker image
This is an (unofficial) image for
[SSLMate/certspotter](https://github.com/SSLMate/certspotter), a Certificate
Transparency Log Monitor.
It will warn you in slack when a new certificate is found in the [CT
logs](https://www.certificate-transparency.org/).
## Usage
### Using this image
```bash
docker run -d --name certspotter \
-e CS_DELAY=43200 \
-e CS_DOMAINS=".everything.org www.specific.org" \
-e CS_SLACK_URL=https://hooks.slack.com/services/SOME/SLACK/TOKEN \
-e CS_DEBUG=1 \
devopsworks/certspotter
```
#### Environment variables
| Variable | Description | Default |
| -------------- | -------------------------------------------- | ----------------- |
| `CS_DELAY` | Interval between `certspotter` runs | 86400 (1 day) |
| `CS_DOMAINS` | Domains to watch for | none (compulsory) |
| `CS_SLACK_URL` | Slack URL for notifications | none |
| `CS_DEBUG` | Sets `certspotter` & scripts in verbose mode | "" |
### Additionnal notification hooks
The image will execute any script present in `/certspotter/hooks.d/` and passes
a message as the first argument.
Hooks will be called:
- when the container starts
- when a new certificate is found for the watched domains
#### Example
```bash
mkdir hooks.d/
cat > hooks.d/url.sh<