jtbouse/sks-nginx repository overview

⁠SKS OpenPGP Keyserver Web Front End

⁠Intro

This is the Nginx⁠ web front end for the SKS OpenPGP Keyserver⁠ using Alpine Linux Project⁠.

⁠Guide

This container has a volume which is /etc/ssl inside to locate appropriate SSL certificates, keys and DH parameter files. Please mount it from a persistent storage source.

⁠Setup

Current build configuration assumes use of Docker swarm mode to utilize the mesh routing DNS to locate the SKS key servers to proxy to.

Current build configuration looks for a sks service to have been created and deployed to the swarm overlay network.

docker network create --driver overlay --subnet 10.0.9.0/24 my-network

docker service create --name sks --network my-network --publish 11370:11370 \
  --mount type=volume,src=sks-data,dst=/var/lib/sks,volume-driver=local \
  jtbouse/sks

Deployment uses the Docker engine host's /etc/ssl directory contents as a read-only bind volume mount which requires the SSL certificates to be deployed under /etc/ssl/certs, the SSL certficate key to be deployed under /etc/ssl/private and a DH parameters file deployed as /etc/ssl/dhparams.pem.

⁠Run

docker service create --name nginx --network my-network --publish 80:80 \
  --publish 443:443 --publish 11371:11371 --mount \
  type=bind,src=/etc/ssl,dst=/etc/ssl,readonly jtbouse/sks-nginx

Configuration is setup to serve static content from /usr/share/nginx/html and reverse proxy server for /pks location URIs back to http://sks:11371 using Docker swarm service VIP.

⁠References

Web template modified from mattrude/pgpkeyserver-lite⁠

Containers:

• jtbouse/sks⁠ SKS OpenPGP Keyserver
• nginx:alpine⁠ Nginx on Alpine Linux

Live demo: UnderGrid Network Service Key Server⁠