docker/mailu
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Create and use ssl dhparam file if not mounted, NGINX_SSL_DHPARAM_BITS variable in .env.dist file

Browse Source
This commit is contained in:
Andreas Faerber
2017-02-25 09:53:53 +01:00
parent fe0b292d45
commit 7e469459c7
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
nginx/nginx.conf.default
View File

@@ -35,6 +35,7 @@ http {
ssl_session_cache shared:SSL:50m; ssl_session_cache shared:SSL:50m;
ssl_certificate /certs/cert.pem; ssl_certificate /certs/cert.pem;
ssl_certificate_key /certs/key.pem; ssl_certificate_key /certs/key.pem;
ssl_dhparam /etc/nginx/dhparam.pem;
add_header Strict-Transport-Security max-age=15768000; add_header Strict-Transport-Security max-age=15768000;

1
nginx/nginx.conf.fallback
View File

@@ -30,6 +30,7 @@ http {
ssl_session_cache shared:SSL:50m; ssl_session_cache shared:SSL:50m;
ssl_certificate /tmp/snakeoil.pem; ssl_certificate /tmp/snakeoil.pem;
ssl_certificate_key /tmp/snakeoil.pem; ssl_certificate_key /tmp/snakeoil.pem;
ssl_dhparam /etc/nginx/dhparam.pem;
add_header Strict-Transport-Security max-age=15768000; add_header Strict-Transport-Security max-age=15768000;

4
nginx/start.sh
View File

@@ -9,4 +9,8 @@ L=None/O=None/CN=$DOMAIN"
cp /etc/nginx/nginx.conf.fallback /etc/nginx/nginx.conf cp /etc/nginx/nginx.conf.fallback /etc/nginx/nginx.conf
fi fi
if [ ! -r /etc/nginx/dhparam.pem ]; then
openssl dhparam -out /etc/nginx/dhparam.pem $NGINX_SSL_DHPARAM_BITS
fi
nginx -g 'daemon off;' nginx -g 'daemon off;'