ACME-Pebble-Auto-Composer/docker-compose.yml at master · ZenProjects/ACME-Pebble-Auto-Composer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
services:
  # 1. Serveur ACME (Pebble) - Retrait du healthcheck pour simplifier
  pebble:
    image: ghcr.io/letsencrypt/pebble:latest
    container_name: pebble
    command:
      - -config
      - /test/config/pebble-config.json
      - -dnsserver
      - challenge-server:8053
      - -strict
      - false
    ports:
      - "14000:14000"
    volumes:
      - ./configs/pebble-config.json:/test/config/pebble-config.json:ro
      - ./datas/pebble-certs/acme:/etc/pebble/acme-certs:ro
      - ./datas/pebble-certs/ca:/ca-certs
    environment:
      - PEBBLE_VA_ALWAYS_VALID=1
      - PEBBLE_VA_NOSLEEP=1

  # 2. Serveur de Défis (pebble-challtestsrv) - (Inchangé)
  challenge-server:
    image: ghcr.io/letsencrypt/pebble-challtestsrv:latest
    container_name: challenge-server
    command:
      - -management
      - :8055
      - -dns01
      - :8053
      - -http01
      - :5002
      - -tlsalpn01
      - :5001
    ports:
      - "8055:8055"
      - "8053:8053/udp"

  # 3. Client ACME (Lego) - Utilisation du build
  # https://go-acme.github.io/lego/dns/httpreq/
  lego:
    build:
      context: lego
      dockerfile: Dockerfile.lego
      network: host
    container_name: lego
    volumes:
      - ./datas/certificates:/certificates
      - ./datas/pebble-certs/acme:/etc/pebble/acme-certs:ro
      - ./datas/pebble-certs/ca:/ca-certs:ro
    environment:
      - LEGO_CA_CERTIFICATES=/etc/pebble/acme-certs/pebble.minica.pem
      - SSL_CERT_FILE=/ca-certs/pebble.minica.pem
      - HTTPREQ_ENDPOINT=http://dns-bridge:8056
      - HTTPREQ_MODE=RAW
      - LEGO_DEBUG_CLIENT_VERBOSE_ERROR=true
      - LEGO_DEBUG_DNS_API_HTTP_CLIENT=true
      - LEGO_DEBUG_ACME_HTTP_CLIENT=true
    depends_on:
      # Attend que Pebble soit démarré pour que le script d'entrée puisse l'interroger
      - pebble
      - challenge-server

  dns-bridge:
    build:
      context: dns-bridge
      dockerfile: Dockerfile
      network: host
    ports:
      - "8056:8056"
    environment:
      - CHALLTESTSRV_URL=http://challenge-server:8055
    depends_on:
      - challenge-server