summaryrefslogtreecommitdiff
path: root/deploy
diff options
context:
space:
mode:
authorAnders Betts <anders.betts@gmail.com>2026-09-17 21:26:20 +0200
committerAnders Betts <anders.betts@gmail.com>2026-09-17 21:26:20 +0200
commited1c15929d2eb2dbc6432986c26661bf1549964a (patch)
tree4f04934edef686b19d16e1bb2f79bb5c15e142de /deploy
parent380195f7cd5e57acf2c1cf2bc41069e6b0b979ed (diff)
downloadbokf-d8175a8f76bc5eefa2524f2b245cb8a5b45864ba.tar.gz
bokf-d8175a8f76bc5eefa2524f2b245cb8a5b45864ba.zip
Add native TLS transport, TLS clients and lego cert sidecarv0.1.1
- bokfd: optional TLS listener (OpenSSL), certificate reload on change - clients: tls:host:port targets with chain and host verification - compose: port 8788 and an INWX/lego renewal sidecar - Makefile: header dependency tracking (-MMD -MP)
Diffstat (limited to 'deploy')
-rwxr-xr-xdeploy/docker-entrypoint.sh3
1 files changed, 2 insertions, 1 deletions
diff --git a/deploy/docker-entrypoint.sh b/deploy/docker-entrypoint.sh
index 8eacc01..3cab4bd 100755
--- a/deploy/docker-entrypoint.sh
+++ b/deploy/docker-entrypoint.sh
@@ -7,7 +7,8 @@ set -eu
: "${BOKFD_EXPORT_DIR:=/var/lib/bokfd/export}"
export BOKFD_DB BOKFD_SOCKET BOKFD_BACKUP_DIR BOKFD_EXPORT_DIR
-mkdir -p "$BOKFD_BACKUP_DIR" "$BOKFD_EXPORT_DIR" "$(dirname "$BOKFD_SOCKET")"
+mkdir -p "$BOKFD_BACKUP_DIR" "$BOKFD_EXPORT_DIR" "$(dirname "$BOKFD_SOCKET")" \
+ "$(dirname "$BOKFD_DB")/certs"
chown -R bokfd:bokfd /var/lib/bokfd "$(dirname "$BOKFD_SOCKET")"
case "${1:-}" in