2021-05-22 02:34:24 +02:00
|
|
|
ENV_VARS += DOCKER_HOST_IFACE DOCKER_HOST_INET
|
|
|
|
|
|
2021-06-06 16:29:54 +02:00
|
|
|
# target node: Fire docker-network-create-% for DOCKER_NETWORK_PUBLIC node-openssl stack-node-up
|
2021-02-09 17:05:00 +01:00
|
|
|
.PHONY: node
|
|
|
|
|
node: docker-network-create-$(DOCKER_NETWORK_PUBLIC) node-openssl stack-node-up
|
|
|
|
|
|
2021-06-06 16:29:54 +02:00
|
|
|
# target node-openssl: Create /certs/${DOMAIN}.key.pem and /certs/${DOMAIN}.crt.pem files
|
2021-02-09 17:05:00 +01:00
|
|
|
.PHONY: node-openssl
|
|
|
|
|
node-openssl:
|
2021-06-06 16:29:54 +02:00
|
|
|
docker run --rm --mount source=$(COMPOSE_PROJECT_NAME_NODE)_ssl-certs,target=/certs alpine:latest [ -f /certs/$(DOMAIN).crt.pem -a -f /certs/$(DOMAIN).key.pem ] \
|
|
|
|
|
|| docker run --rm -e DOMAIN=$(DOMAIN) --mount source=$(COMPOSE_PROJECT_NAME_NODE)_ssl-certs,target=/certs alpine:latest sh -c "apk --no-cache add openssl \
|
|
|
|
|
&& { [ -f /certs/${DOMAIN}.key.pem ] || openssl genrsa -out /certs/${DOMAIN}.key.pem 2048; } \
|
|
|
|
|
&& openssl req -key /certs/${DOMAIN}.key.pem -out /certs/${DOMAIN}.crt.pem -addext extendedKeyUsage=serverAuth -addext subjectAltName=DNS:${DOMAIN} -subj \"/C=/ST=/L=/O=/CN=${DOMAIN}\" -x509 -days 365"
|
