[cut] ssl certificates

Author: 11notes

arch.dockerfile

@@ -30,7 +30,6 @@
       zip \
       tar \
       yarn \
-      openssl \
       upx;
 
   RUN set -ex; \
@@ -55,12 +54,7 @@
 
   RUN set -ex; \
     mkdir -p /distroless/usr/local/bin; \
-    mkdir -p /distroless/${APP_ROOT}/etc/ssl; \
     mkdir -p /distroless/${APP_ROOT}/opt; \
-    openssl req -x509 -newkey rsa:4096 -subj "/C=XX/ST=XX/L=XX/O=XX/OU=docker/CN=adguard" \
-      -keyout "/distroless/${APP_ROOT}/etc/ssl/default.key" \
-      -out "/distroless/${APP_ROOT}/etc/ssl/default.crt" \
-      -days 3650 -nodes -sha256 &> /dev/null; \
     eleven strip ${BUILD_BIN}; \
     cp ${BUILD_BIN} /distroless/usr/local/bin;
 

compose.yaml

@@ -11,7 +11,7 @@ services:
     ports:
       - "53:53/udp"
       - "53:53/tcp"
-      - "8443:8443/tcp"
+      - "3000:3000/tcp"
     networks:
       frontend:
     sysctls:

project.md

@@ -51,5 +51,4 @@ ${{ content_tips }}
 
 ${{ title_caution }}
 ${{ github:> [!CAUTION] }}
-${{ github:> }}* This image comes with a default SSL certificate. If you plan to expose the web interface via HTTPS, please replace the default certificate with your own.
 ${{ github:> }}* This image comes with a default configuration with a default password for the admin account. Please set your own password or provide your own configuration.

rootfs/adguard/etc/config.yaml

@@ -27,14 +27,7 @@ users:
 auth_attempts: 3
 block_auth_min: 60
 tls:
-  enabled: true
-  server_name: ""
-  force_https: true
-  port_https: 8443
-  certificate_chain: ""
-  private_key: ""
-  certificate_path: /adguard/etc/ssl/default.crt
-  private_key_path: /adguard/etc/ssl/default.key
+  enabled: false
 filtering:
   blocking_mode: nxdomain
   cache_time: 1440