Sign inSign up

9jkh/certbot-dns

By 9jkh

•Updated 7 months ago

certbot + dns plugins (ACME v2 / wildcard Letsencrypt)

Image
0

10K+

9jkh/certbot-dns repository overview

⁠Quick reference

⁠How to use this image

  1. Create IAM user with the following policy: sample-aws-policy.json⁠
  2. See possible boto3 environment variables⁠
  3. See possible dns plugins⁠

⁠Prepare

$ mkdir -p "$(pwd)/letsencrypt"
$ docker pull 9jkh/certbot-dns

⁠Generate wildcard certificate over Route53

$ docker run \
  -e "AWS_ACCESS_KEY_ID=abc123" \
  -e "AWS_SECRET_ACCESS_KEY=123abc" \
  --name "certbot-dns" \
  --volume "$(pwd)/letsencrypt:/etc/letsencrypt" \
  9jkh/certbot-dns \
  certonly \
  --server "https://acme-staging-v02.api.letsencrypt.org/directory" \
  --dns-route53 \
  --agree-tos \
  -m "[email protected]" \
  --non-interactive \
  -d "*.yourdomain.com"

⁠Distribute (optional)

Optionally you could programmatically store the cert on S3 for other apps to easiliy retrieve:

$ (cd "$(pwd)/letsencrypt/live/yourdomain.com" && zip -q -r - .) > yourdomain.com.zip
$ aws s3 cp yourdomain.com.zip s3://certs/yourdomain.zip

Tag summary

Content type

Image

Digest

sha256:36f184f5f…

Size

71.2 MB

Last updated

7 months ago

docker pull 9jkh/certbot-dns