11 Commits

This Branch

This Branch

All Branches

• Docker: update crontab used (#7111)

  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2026-07-10 10:10:44 +08:00
  1324dcd472
• chown /acme.sh to non-root user and set HOME to /acme.sh

  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-12-30 12:44:46 -05:00
  6a98b9f81e
• align logic to acme.sh installcert(), fix perms on non-key files

  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-12-30 11:41:50 -05:00
  4219f7b2f6
• fix: savedeployconf for DEPLOY_LOCALCOPY_CERTIFICATE

  Co-authored-by: Kevin Hoser <45083826+hoser21@users.noreply.github.com>

  invarioandKevin Hoser 2025-12-28 12:03:02 -05:00
  e03f8d3ad6
• have entry.sh (instead of dockerfile) generate crontab file

  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-12-28 11:40:18 -05:00
  6f5a0c5d5e
• Docker with non-root using supercronic

  Replaces cronie with supercronic to allow non-root users to have
  cronjobs. Creates user/group acme:acme UID:1000/GID:1000 with
  home directory pointing to LE_CONFIG_HOME (default: /acme.sh)
  'crontab' is generated in LE_CONFIG_HOME which is used by
  supercronic.
  
  Note that `acme.sh --installcronjob` and `--uninstallcronjob`
  when run as a non-root user will fail but neither of should be
  used in `daemon` mode anyway.
  
  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-12-28 11:39:59 -05:00
  57db388932
• make compatible with both yq versions

  kislyuk yq (used by Debian packages) does not accept `yq e` and
  also returns strings with double quotes.
  
  mikefarah's yq-go (used by Alpine) accepts `yq e` and `yq`.
  
  replace `yq e` with `yq` and also use `-r` switch to remove double
  quoting to ensure uniform return values from both yq versions.
  
  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-12-27 11:02:40 +01:00
  11cae37405
• Use cat instead of cp for all files

  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-12-04 11:06:50 -05:00
  f39a6fe517
• Use 'cat' instead of 'cp', removed use of temp file, keeps permissions

  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-12-03 12:05:19 -05:00
  2775def93a
• Add outputs for PFX and PEM

  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-07-28 12:14:12 -04:00
  3252e0ce2e
• Create localcopy deploy-hook

  Deploy-hook to very simply copy files to set directories and then execute whatever reloadcmd
  the admin needs afterwards. This can be useful for configurations where the "multideploy"
  hook (in development) is used or when an admin wants ACME.SH to renew certs but needs to
  manually configure deployment via an external script (e.g. The deploy-freenas script for TrueNAS Core/Scale
  
  https://github.com/danb35/deploy-freenas/
  
  Signed-off-by: invario <67800603+invario@users.noreply.github.com>

  invario 2025-07-06 20:12:10 -04:00
  014a781426