34 lines
1.0 KiB
Docker
34 lines
1.0 KiB
Docker
FROM certbot/certbot:v1.12.0
|
|
|
|
ARG USER_UUID=12000
|
|
ARG USER_GUID=12000
|
|
ARG GROUP_NAME=certbot
|
|
ARG USER_NAME=certbot
|
|
|
|
# http://linuxcommand.org/lc3_man_pages/seth.html
|
|
RUN set -eux; \
|
|
addgroup -g $USER_GUID $GROUP_NAME; \
|
|
adduser -u $USER_UUID -G $GROUP_NAME -s /sbin/nologin -D $USER_NAME;
|
|
|
|
# create temp dir for service
|
|
RUN mkdir -p /service/temp \
|
|
&& chown -R $USER_NAME:$GROUP_NAME /service/temp
|
|
|
|
# create and set permission mounts
|
|
RUN mkdir -p /service/html \
|
|
&& chown -R $USER_NAME:$GROUP_NAME /service/html \
|
|
&& mkdir -p /service/ssl \
|
|
&& chown -R $USER_NAME:$GROUP_NAME /service/ssl \
|
|
&& mkdir -p /service/letsencrypt/ssl \
|
|
&& chown -R $USER_NAME:$GROUP_NAME /service/letsencrypt/ssl \
|
|
&& mkdir -p /service/letsencrypt/work \
|
|
&& chown -R $USER_NAME:$GROUP_NAME /service/letsencrypt/work \
|
|
&& mkdir -p /service/letsencrypt/log \
|
|
&& chown -R $USER_NAME:$GROUP_NAME /service/letsencrypt/log
|
|
|
|
COPY ./files/entrypoint.sh /entrypoint.sh
|
|
RUN chmod +x /entrypoint.sh
|
|
|
|
USER $USER_NAME
|
|
|
|
ENTRYPOINT [ "/entrypoint.sh" ] |