https://github.com/stopka/traefik-dumpcerts

Docker container for exporting acme certificates from traefik's acme.json file
https://github.com/stopka/traefik-dumpcerts

Last synced: 13 days ago
JSON representation

Docker container for exporting acme certificates from traefik's acme.json file

• Host: GitHub
• URL: https://github.com/stopka/traefik-dumpcerts
• Owner: Stopka
• License: mit
• Created: 2018-12-11T01:23:28.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2019-10-03T20:51:50.000Z (over 5 years ago)
• Last Synced: 2024-12-20T08:01:32.421Z (15 days ago)
• Language: PHP
• Size: 9.77 KB
• Stars: 1
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Traefik dumpcerts

Docker container for exporting acme certificates from traefik's `acme.json` file. It uses slightly modified [script from traefik's repository](https://github.com/containous/traefik/blob/master/contrib/scripts/dumpcerts.sh) to export certificates to several pem formats and therefore enables other software use certificates obtained by Traefik.

Certificates are exported on container start and then again every day.

## Volumes

### /etc/ssl/acme/src

Here should be the `acme.json` file mounted, so that the final path of the file is `/etc/ssl/acme/src/acme.json`. Read-only permissions are enough.

### /etc/ssl/acme/dst

Directory must have write permissions. This is the output direcotry, where all certificates are exported in following structure:

* _some.domain.name_

  * `ca.crt` CA certificate chain

  * `domain.crt` Domain certificate

  * `domain.key` Domain private key

  * `domain.pem` Domain bundle of all: key, certificate and CA chain

  * `chain.crt` Domain bundle of certificates: certificate and CA chain

## Compose sample

```

version: "3.3"

services:

  traefik:

    image: traefik:latest

    restart: always

    ports:

      - 80:80

      - 443:443

    networks:

      - proxy

    volumes:

      - /var/run/docker.sock:/var/run/docker.sock

      - traefik-acme:/etc/traefik/acme    

  traefik-dumpcerts:

    image: skorpils/traefik-dumpcerts

    restart: always

    volumes:

      - traefik-acme:/etc/ssl/acme/src:ro

      - /etc/ssl/acme:/etc/ssl/acme/dst

    depends_on:

      - traefik

volumes:

  - traefik-acme

networks:

  - proxy

```