insight4upublic/mkcert repository overview

x-volume-localtime:
  &etclocaltime
  type: 'bind'
  source: /etc/localtime
  target: /etc/localtime
  read_only: true
x-volume-certs:
  &certs
  type: 'bind'
  source: /mnt/docker/networkstack/certs
  target: /certs
  bind:
    create_host_path: true

services:
  mkcert:
    image: insight4upublic/mkcert
    volumes:
      - <<: *etclocaltime
      - <<: *certs
    user: "0"
    command: >
      bash -c '
        if [ x${DOMAIN} == x ]; then
          echo "Set the DOMAIN environment variable in the .env file";
          exit 1;
        fi;
        if [ ! -f /certs/key.pem ]; then
          echo "/certs/key.pem does not exist yet.";
          echo "Creating certificates";
          echo "running> mkcert -key-file /certs/key.pem -cert-file /certs/cert.pem ${DOMAIN} *.${DOMAIN}";
          mkcert -key-file /certs/key.pem -cert-file /certs/cert.pem ${DOMAIN} *.${DOMAIN};
        else
          echo "Certificates exist in volume certs";
          echo "To generate new certificates, delete the old ones";
        fi;
      '
    healthcheck:
      test: ["CMD-SHELL", "[ -f /certs/key.pem ]"]
      interval: 1s
      timeout: 5s
      retries: 120