container/molly-brown
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

prepare for k3s

Browse source
This commit is contained in:
Sebastian Hugentobler 2021-09-28 17:10:49 +02:00
parent 41da8e5cec
commit 617e95ee16
Signed by: shu
GPG key ID: BB32CF3CA052C2F0
2 changed files with 10 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

21
rootfs/etc/cont-init.d/02-tls
View file

@ -1,21 +0,0 @@
#!/usr/bin/with-contenv sh
KEY="/etc/molly-brown/keys/$HOST_NAME-key.pem"
CERT="/etc/molly-brown/keys/$HOST_NAME-cert.pem"
if [ ! -f "$KEY" ] || [ ! -f "$CERT" ]; then
openssl req -x509 -newkey rsa:4096 -keyout "$KEY" -out "$CERT" -days 3650 -nodes -subj "/CN=$HOST_NAME"
fi
chown molly-brown:molly-brown "$KEY"
chown molly-brown:molly-brown "$CERT"
date_valid="$(openssl x509 -in "$CERT" -enddate -noout | sed "s/.*=\(.*\)/\1/")"
seconds_valid="$(date --date "$date_valid" +"%s")"
now="$(date "+%s")"
days="$(echo "($seconds_valid - $now)/(60 * 60 * 24)" | bc)"
if [ "$days" -lt 7 ]; then
echo "only $days to go, generating new certificate..."
openssl req -x509 -key "$KEY" -out "$CERT" -days 3650 -nodes -subj "/CN=$HOST_NAME"
fi