From ed1c15929d2eb2dbc6432986c26661bf1549964a Mon Sep 17 00:00:00 2001
From: Anders Betts <anders.betts@gmail.com>
Date: Thu, 17 Sep 2026 21:26:20 +0200
Subject: Add native TLS transport, TLS clients and lego cert sidecar

- bokfd: optional TLS listener (OpenSSL), certificate reload on change
- clients: tls:host:port targets with chain and host verification
- compose: port 8788 and an INWX/lego renewal sidecar
- Makefile: header dependency tracking (-MMD -MP)
---
 deploy/docker-entrypoint.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'deploy')

diff --git a/deploy/docker-entrypoint.sh b/deploy/docker-entrypoint.sh
index 8eacc01..3cab4bd 100755
--- a/deploy/docker-entrypoint.sh
+++ b/deploy/docker-entrypoint.sh
@@ -7,7 +7,8 @@ set -eu
 : "${BOKFD_EXPORT_DIR:=/var/lib/bokfd/export}"
 export BOKFD_DB BOKFD_SOCKET BOKFD_BACKUP_DIR BOKFD_EXPORT_DIR
 
-mkdir -p "$BOKFD_BACKUP_DIR" "$BOKFD_EXPORT_DIR" "$(dirname "$BOKFD_SOCKET")"
+mkdir -p "$BOKFD_BACKUP_DIR" "$BOKFD_EXPORT_DIR" "$(dirname "$BOKFD_SOCKET")" \
+    "$(dirname "$BOKFD_DB")/certs"
 chown -R bokfd:bokfd /var/lib/bokfd "$(dirname "$BOKFD_SOCKET")"
 
 case "${1:-}" in
-- 
cgit v1.3