fix tls paths

This commit is contained in:
Sebastian Hugentobler 2021-08-20 08:18:14 +02:00
parent 2d5e46c88d
commit b13f5acdb8
Signed by: shu
GPG Key ID: BB32CF3CA052C2F0
5 changed files with 3 additions and 12 deletions

View File

@ -1,7 +1,5 @@
FROM thallian/confd-env:latest FROM thallian/confd-env:latest
ENV CERT_HOME /etc/ssl/murmur
RUN apk add --no-cache \ RUN apk add --no-cache \
murmur \ murmur \
icu-libs \ icu-libs \
@ -10,6 +8,4 @@ RUN apk add --no-cache \
ADD /rootfs / ADD /rootfs /
VOLUME [ "/etc/ssl/murmur" ]
EXPOSE 64738 EXPOSE 64738

View File

@ -1,3 +0,0 @@
#!/usr/bin/with-contenv sh
s6-svc -t /var/run/s6/services/murmur

View File

@ -72,7 +72,7 @@ icesecretwrite=
# logs to the file 'murmur.log'. If you leave this field blank # logs to the file 'murmur.log'. If you leave this field blank
# on Unix-like systems, Murmur will force itself into foreground # on Unix-like systems, Murmur will force itself into foreground
# mode which logs to the console. # mode which logs to the console.
logfile=/var/log/murmur.log logfile=
# If set, Murmur will write its process ID to this file # If set, Murmur will write its process ID to this file
# when running in daemon mode (when the -fg flag is not # when running in daemon mode (when the -fg flag is not
@ -157,8 +157,8 @@ registerName={{ getenv "ROOT_NAME" "Root" }}
# If you have a proper SSL certificate, you can provide the filenames here. # If you have a proper SSL certificate, you can provide the filenames here.
# Otherwise, Murmur will create it's own certificate automatically. # Otherwise, Murmur will create it's own certificate automatically.
sslCert={{getenv "CERT_HOME"}}/{{getenv "CERT_DOMAIN"}}.crt sslCert=/etc/ssl/murmur/tls.crt
sslKey={{getenv "CERT_HOME"}}/{{getenv "CERT_DOMAIN"}}.key sslKey=/etc/ssl/murmur/tls.key
# The sslCiphers option chooses the cipher suites to make available for use # The sslCiphers option chooses the cipher suites to make available for use
# in SSL/TLS. This option is server-wide, and cannot be set on a # in SSL/TLS. This option is server-wide, and cannot be set on a

View File

@ -1 +0,0 @@
/var/lib/murmur/ true murmur 0640 0750

View File

@ -1 +0,0 @@
/etc/ssl/murmur IN_ATTRIB /bin/restart-services