SSL - lets encrypt

[dgram]

hey,

i've tried to add an lets-encrypt ssl certificate. but when i start the server and check the https protocol, i get net::ERR_CERT_AUTHORITY_INVALID. now i found the problem was, that the domain i used for encrypted is different to the docker domain.

on the error message i've seen the following values:

CN = *.vm O = Docker Boilerplate

but i change all docker configurations where i found the .vm and *.vm entries and change them to my domain name.

when i check the docker-compose logs i found the following entries by "docker-compose logs | grep *.vm"

app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/global.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/main.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/php.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/vhost.common.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/vhost.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/vhost.ssl.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/global.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/main.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/php.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/vhost.common.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/vhost.conf']) app_1 | ok: [localhost] => (item=[{u'variable': u'ALIASDOMAIN', u'value': u'.vm'}, u'/opt/docker/etc/nginx/vhost.ssl.conf'])

have you any idea?

regards

[lbayerl]

would be perfect to have letsencyrpt supported in the boilerplate

[bracketouverte]

👍

[brandontamm]

+1