mish/prosody
0
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Certs volume.

Browse Source
This commit is contained in:
mguschin
2026-02-04 13:14:27 +03:00
parent 6341d5e707
commit 94a293d34d
2 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
entrypoint.sh
View File

@@ -38,12 +38,18 @@ fi
# (directories are already created in Dockerfile with proper ownership)
touch /var/log/prosody/prosody.log /var/log/prosody/prosody.err 2>/dev/null || true
# Generate self-signed certificate if needed
# Use Let's Encrypt certificate if available, otherwise generate self-signed
CERT_PATH="/etc/prosody/certs/xmpp.guschin.info.crt"
KEY_PATH="/etc/prosody/certs/xmpp.guschin.info.key"
LETSENCRYPT_CERT="/etc/prosody/certs/letsencrypt/fullchain.pem"
LETSENCRYPT_KEY="/etc/prosody/certs/letsencrypt/privkey.pem"
if [ ! -f "$CERT_PATH" ] || [ ! -f "$KEY_PATH" ]; then
echo "Generating self-signed certificate..."
if [ -f "$LETSENCRYPT_CERT" ] && [ -f "$LETSENCRYPT_KEY" ]; then
echo "Using Let's Encrypt certificate..."
ln -sf "$LETSENCRYPT_CERT" "$CERT_PATH"
ln -sf "$LETSENCRYPT_KEY" "$KEY_PATH"
elif [ ! -f "$CERT_PATH" ] || [ ! -f "$KEY_PATH" ]; then
echo "Let's Encrypt certificate not found, generating self-signed certificate..."
openssl req -x509 -newkey rsa:4096 -keyout "$KEY_PATH" -out "$CERT_PATH" \
-days 365 -nodes -subj "/CN=xmpp.guschin.info"
chmod 600 "$KEY_PATH"