web: Added LETSENCRYPT_ACME_SERVER environment variable

You can set it when default zerossl doesnt work for you.
For example your server located in the country blocked by ZeroSSL.
This commit is contained in:
HighwayStar 2025-03-06 17:35:28 +08:00 committed by GitHub
parent f8361f093c
commit 8fd3d5952b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 11 additions and 0 deletions

View File

@ -121,6 +121,7 @@ services:
- LETSENCRYPT_DOMAIN - LETSENCRYPT_DOMAIN
- LETSENCRYPT_EMAIL - LETSENCRYPT_EMAIL
- LETSENCRYPT_USE_STAGING - LETSENCRYPT_USE_STAGING
- LETSENCRYPT_ACME_SERVER
- MATOMO_ENDPOINT - MATOMO_ENDPOINT
- MATOMO_SITE_ID - MATOMO_SITE_ID
- MICROSOFT_API_APP_CLIENT_ID - MICROSOFT_API_APP_CLIENT_ID

View File

@ -69,6 +69,8 @@ TZ=UTC
# Use the staging server (for avoiding rate limits while testing) # Use the staging server (for avoiding rate limits while testing)
#LETSENCRYPT_USE_STAGING=1 #LETSENCRYPT_USE_STAGING=1
# Set ACME server. Default is zerossl, you can peek one at https://github.com/acmesh-official/acme.sh/wiki/Server
#LETSENCRYPT_ACME_SERVER="letsencrypt"
# #
# Etherpad integration (for document sharing) # Etherpad integration (for document sharing)

View File

@ -19,10 +19,18 @@ if [[ $DISABLE_HTTPS -ne 1 ]]; then
if [[ $LETSENCRYPT_USE_STAGING -eq 1 ]]; then if [[ $LETSENCRYPT_USE_STAGING -eq 1 ]]; then
STAGING="--staging" STAGING="--staging"
fi fi
ACME_SERVER=""
if [[ ! -z $LETSENCRYPT_ACME_SERVER ]]; then
ACME_SERVER="--set-default-ca --server $LETSENCRYPT_ACME_SERVER"
echo "Using custom ACME server: $LETSENCRYPT_ACME_SERVER"
fi
export LE_WORKING_DIR="/config/acme.sh" export LE_WORKING_DIR="/config/acme.sh"
# TODO: move away from standalone mode to webroot mode. # TODO: move away from standalone mode to webroot mode.
/config/acme.sh/acme.sh \ /config/acme.sh/acme.sh \
$STAGING \ $STAGING \
$ACME_SERVER \
--issue \ --issue \
--standalone \ --standalone \
--pre-hook "if [[ -d /var/run/s6/services/nginx ]]; then s6-svc -d /var/run/s6/services/nginx; fi" \ --pre-hook "if [[ -d /var/run/s6/services/nginx ]]; then s6-svc -d /var/run/s6/services/nginx; fi" \