29 lines
1.3 KiB
Makefile
29 lines
1.3 KiB
Makefile
CMDS += node-exec stack-node-exec node-exec:% node-exec@% node-run node-run:% node-run@%
|
|
node ?= node/node
|
|
ENV_VARS += DOCKER_HOST_IFACE DOCKER_HOST_INET4 DOCKER_INTERNAL_DOCKER_HOST
|
|
|
|
# target bootstrap-stack-node: Fire node-ssl-certs
|
|
.PHONY: bootstrap-stack-node
|
|
bootstrap-stack-node: docker-network-create-$(DOCKER_NETWORK_PUBLIC) node-ssl-certs
|
|
|
|
# target node: Fire stack-node-up
|
|
.PHONY: node
|
|
node: stack-node-up
|
|
|
|
# target node-%; Fire target stack-node-%
|
|
.PHONY: node-%
|
|
node-%: stack-node-%;
|
|
|
|
# target node-ssl-certs: Create ${DOMAIN}.key.pem and ${DOMAIN}.crt.pem files
|
|
.PHONY: node-ssl-certs
|
|
node-ssl-certs:
|
|
docker run --rm --mount source=$(NODE_DOCKER_VOLUME),target=/certs alpine [ -f /certs/$(DOMAIN).crt.pem -a -f /certs/$(DOMAIN).key.pem ] \
|
|
|| $(RUN) docker run --rm -e DOMAIN=$(DOMAIN) --mount source=$(NODE_DOCKER_VOLUME),target=/certs alpine sh -c "\
|
|
apk --no-cache add openssl \
|
|
&& { [ -f /certs/${DOMAIN}.key.pem ] || openssl genrsa -out /certs/${DOMAIN}.key.pem 2048; } \
|
|
&& openssl req -key /certs/${DOMAIN}.key.pem -out /certs/${DOMAIN}.crt.pem \
|
|
-addext extendedKeyUsage=serverAuth \
|
|
-addext subjectAltName=DNS:${DOMAIN} \
|
|
-subj \"/C=/ST=/L=/O=/CN=${DOMAIN}\" \
|
|
-x509 -days 365"
|