Fabio/nginx-proxy-auto-docker
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Optional passphrase support

Browse source
This commit is contained in:
Ivan Isaev 2016-05-11 20:13:35 +05:00
parent 0ef8dca98c
commit 26b196af3e
2 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
README.md
View file

@ -105,6 +105,11 @@ hosts in use. The certificate and keys should be named after the virtual host w
`.key` extension. For example, a container with `VIRTUAL_HOST=foo.bar.com` should have a
`foo.bar.com.crt` and `foo.bar.com.key` file in the certs directory.
#### Passphrase
Optionally you can set passphrase file for each certificate by creating `.pw` file with passphrase in certs directory.
For example `foo.bar.com.pw`.
#### Diffie-Hellman Groups
If you have Diffie-Hellman groups enabled, the files should be named after the virtual host with a

10
nginx.tmpl
View file

@ -69,6 +69,9 @@ server {
ssl_certificate /etc/nginx/certs/default.crt;
ssl_certificate_key /etc/nginx/certs/default.key;
{{ if (exists "/etc/nginx/certs/default.pw") }}
ssl_password_file /etc/nginx/certs/default.pw;
{{ end }}
}
{{ end }}
@ -149,6 +152,10 @@ server {
ssl_certificate /etc/nginx/certs/{{ (printf "%s.crt" $cert) }};
ssl_certificate_key /etc/nginx/certs/{{ (printf "%s.key" $cert) }};
{{ if (exists (printf "/etc/nginx/certs/%s.pw" $cert)) }}
ssl_password_file {{ printf "/etc/nginx/certs/%s.pw" $cert }};
{{ end }}
{{ if (exists (printf "/etc/nginx/certs/%s.dhparam.pem" $cert)) }}
ssl_dhparam {{ printf "/etc/nginx/certs/%s.dhparam.pem" $cert }};
{{ end }}
@ -213,6 +220,9 @@ server {
ssl_certificate /etc/nginx/certs/default.crt;
ssl_certificate_key /etc/nginx/certs/default.key;
{{ if (exists "/etc/nginx/certs/default.pw") }}
ssl_password_file /etc/nginx/certs/default.pw;
{{ end }}
}
{{ end }}