Skip to content

Commit

Permalink
Add support for External Account Binding with ACME
Browse files Browse the repository at this point in the history
Allows for the support of External Account Binding to request SSL
Certificates through a provider that supports EAB and ACME.

Some example providers include InCommon and ZeroSSL
  • Loading branch information
misilot committed May 11, 2022
1 parent be7e0db commit bba3a4f
Show file tree
Hide file tree
Showing 2 changed files with 10 additions and 0 deletions.
3 changes: 3 additions & 0 deletions docker-compose.acme.yml
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,9 @@ services:
- --certificatesresolvers.myresolver.acme.email=${ACME_EMAIL-your-email@example.com}
- --certificatesresolvers.myresolver.acme.storage=/acme/acme.json
- --certificatesResolvers.myresolver.acme.caServer=${ACME_SERVER-https://acme-v02.api.letsencrypt.org/directory}
- --certificatesresolvers.myresolver.acme.certificatesduration=${ACME_CERT_DURATION-2160}
- --certificatesresolvers.myresolver.acme.eab.kid=${ACME_EAB_KID-}
- --certificatesresolvers.myresolver.acme.eab.hmacencoded=${ACME_EAB_HMAC-}
volumes:
- ./acme:/acme:rw
cantaloupe:
Expand Down
7 changes: 7 additions & 0 deletions sample.env
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,13 @@ USE_ACME=false
# Specify email to tie SSL Certificate to with ACME provider
ACME_EMAIL=your-email@example.com

# ACME Defaults for Let's Encrypt Service
# ACME_SERVER=https://acme-v02.api.letsencrypt.org/directory
# Default duration for the certificate is 90 days or 2,160 hours for Let's Encrypt
# ACME_CERT_DURATION=2160
# ACME_EAB_KID=
# ACME_EAB_HMAC=

# Includes `watchtower` as a service.
INCLUDE_WATCHTOWER_SERVICE=false

Expand Down

0 comments on commit bba3a4f

Please sign in to comment.