73e026a4df
deploy-pangolin / deploy (push) Has been cancelled
- edge 改为自定义镜像:官方 nginx + certbot + dns-cloudflare 插件 - pangolin-entrypoint.sh:后台每12h certbot renew,续期后本容器内 nginx -s reload - 不再需要宿主 cron / docker socket / 独立 certbot 服务做日常续期 - /etc/letsencrypt 改 rw 挂载,挂入 cloudflare.ini - compose 去掉 build:(宿主 docker-compose 不支持 compose build),改脚本 docker build - deploy.sh/cutover.sh: docker build -t pangolin-edge:local 后再 up Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
11 lines
420 B
Docker
11 lines
420 B
Docker
# pangolin-edge:官方 nginx + certbot(DNS-01/Cloudflare),让分发层容器自己续签自己用的证书。
|
|
FROM nginx:1.27-alpine
|
|
|
|
# certbot + Cloudflare DNS 插件(EC2 实测:certbot 3.0.1)
|
|
RUN apk add --no-cache certbot certbot-dns-cloudflare
|
|
|
|
COPY pangolin-entrypoint.sh /usr/local/bin/pangolin-entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/pangolin-entrypoint.sh
|
|
|
|
ENTRYPOINT ["/usr/local/bin/pangolin-entrypoint.sh"]
|