mkcert-for-nginx-proxy is a lightweight companion container for the nginx-proxy/nginx-proxy. It's heavily inspired by nginx-proxy/acme-companion and it allows the creation/renewal of self-signed certificate with a root certificate authority.
Here is an example of a docker-compose file that should work with nginx-proxy/nginx-proxy:
version: '3.2'
networks:
proxy:
driver: bridge
services:
mkcert:
image: aegypius/mkcert-for-nginx-proxy
restart: unless-stopped
volumes:
- ssl-certs:/app/certs:rw
- ~/.mozilla/firefox:/root/.mozilla/firefox:rw
- ~/.pki/nssdb:/root/.pki/nssdb:rw
- ${CA_STORE:-/usr/local/share/ca-certificates}:/usr/local/share/ca-certificates
- /var/run/docker.sock:/var/run/docker.sock:ro
proxy:
image: nginx-proxy/nginx-proxy
labels:
com.github.aegypius.mkcert-for-nginx-proxy.nginx_proxy: ''
networks:
proxy: {}
ports:
- published: 80
target: 80
- published: 443
target: 443
restart: unless-stopped
volumes:
- ssl-certs:/etc/nginx/certs:ro
- /var/run/docker.sock:/tmp/docker.sock:ro
volumes:
ssl-certs: {}
You need to set a CA_STORE environment variable according to your distribution :
docker-compose up
sudo update-ca-certificates
echo 'CA_STORE=/etc/ca-certificates/trust-source/anchors' >> .env
docker-compose up
sudo trust extract-compat
echo 'CA_STORE=/etc/pki/ca-trust/source/anchors' >> .env
docker-compose up
sudo update-ca-trust extract
echo 'CA_STORE=/etc/ssl/certs' >> .env
docker-compose up
sudo update-ca-certificates
Restart your browsers !
Content type
Image
Digest
Size
87.6 MB
Last updated
about 5 years ago
docker pull aegypius/mkcert-for-nginx-proxy