About

This is an image for quarantining certbot, but is meant to be used in conjunction with a webserver.

Native alpine certbot is installed, but has dependency issues. As such, the pip version is also installed to correct those issues. However, the pip version is not used alone, as it cannot build some of the dependencies, which are provided pre-built from the native alpine version.

Usage

• /etc/letsencrypt should be pointed at your Lets Encrypt directory.

Your webserver should also be pointing at the same Lets Encrypt directory, and should be using the following (nginx) snippet:

location '/.well-known/acme-challenge' {
    default_type "text/plain";
    root /etc/letsencrypt/tmp;
}

This is done so when certbot creates the acme-challenge, the webserver can provide the challenge to a remote server.

Once the webserver constraints are met, one can simply:

1. docker-compose build certbot
2. docker-compose run certbot <certbot command>