From ed1c15929d2eb2dbc6432986c26661bf1549964a Mon Sep 17 00:00:00 2001 From: Anders Betts Date: Thu, 17 Sep 2026 21:26:20 +0200 Subject: Add native TLS transport, TLS clients and lego cert sidecar - bokfd: optional TLS listener (OpenSSL), certificate reload on change - clients: tls:host:port targets with chain and host verification - compose: port 8788 and an INWX/lego renewal sidecar - Makefile: header dependency tracking (-MMD -MP) --- .env.example | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to '.env.example') diff --git a/.env.example b/.env.example index bb20a6f..ab0dd6f 100644 --- a/.env.example +++ b/.env.example @@ -11,3 +11,11 @@ BOKF_REMOTE_DIR=/srv/bokf # Local compose runs: "docker compose up --build" builds this image name. BOKF_IMAGE=bokf BOKF_TAG=dev +# +# TLS: the certs sidecar renews a Let's Encrypt certificate via INWX DNS-01 +# and bokfd serves the clients on port 8788. Keep the credentials in the +# host's .env only; they are never committed. +# LEGO_DOMAIN=bokf.makandra.eu +# LEGO_EMAIL=anders@makandra.eu +# INWX_USERNAME=... +# INWX_PASSWORD=... -- cgit v1.3