From ed1c15929d2eb2dbc6432986c26661bf1549964a Mon Sep 17 00:00:00 2001 From: Anders Betts Date: Thu, 17 Sep 2026 21:26:20 +0200 Subject: Add native TLS transport, TLS clients and lego cert sidecar - bokfd: optional TLS listener (OpenSSL), certificate reload on change - clients: tls:host:port targets with chain and host verification - compose: port 8788 and an INWX/lego renewal sidecar - Makefile: header dependency tracking (-MMD -MP) --- Dockerfile | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'Dockerfile') diff --git a/Dockerfile b/Dockerfile index ba76b97..0c22b19 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,6 +3,7 @@ FROM debian:bookworm-slim AS build RUN apt-get update \ && apt-get install -y --no-install-recommends build-essential libncurses-dev \ + libssl-dev \ && rm -rf /var/lib/apt/lists/* WORKDIR /src COPY . . @@ -10,12 +11,13 @@ RUN make -j"$(nproc)" && make test FROM debian:bookworm-slim AS runtime RUN apt-get update \ - && apt-get install -y --no-install-recommends libncursesw6 ca-certificates \ + && apt-get install -y --no-install-recommends libncursesw6 libssl3 \ + ca-certificates util-linux \ && rm -rf /var/lib/apt/lists/* \ && useradd --system --uid 10001 --home-dir /var/lib/bokfd \ --shell /usr/sbin/nologin bokfd \ && install -d -o bokfd -g bokfd /var/lib/bokfd /var/lib/bokfd/backup \ - /var/lib/bokfd/export /run/bokfd + /var/lib/bokfd/export /var/lib/bokfd/certs /run/bokfd COPY --from=build /src/build/bokfd /src/build/bokfctl /src/build/bokftui \ /usr/local/bin/ COPY --from=build /src/data/bas_k2.csv /src/data/bas_k3.csv \ -- cgit v1.3