ecbbs reverse proxy docker

docker-compose.yml

services:
  proxy:
    image: nginx:latest
    ports:
      - 80:80
      - 443:443
    restart: always
    volumes:
      - ./nginx/conf.d/:/etc/nginx/conf.d/:ro
      - ./certbot/www/:/var/www/certbot/:ro
      - ./certbot/conf/:/etc/letsencrypt/:ro
  certbot:
    image: certbot/certbot:latest
    volumes:
      - ./certbot/www/:/var/www/certbot/:rw
      - ./certbot/conf/:/etc/letsencrypt/:rw

notes.txt

To make certbot grab a cert, replace [domain-name] with the domain in question:

docker-compose run --rm certbot certonly --webroot --webroot-path /var/www/certbot/ --dry-run -d [domain-name]

If that looks good, then do it again without the --dry-run option.

And to renew certificates, add a cron job on the host like so:

59 11 * * * /sbbs/reverse-proxy/renew.sh

renew.sh

#!/bin/sh
cd /sbbs/reverse-proxy
docker-compose run --rm certbot renew >> /sbbs/reverse-proxy/certbot.log