Portainer
/
portainer-docs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

docs(deployment): Add instructions for Let's Encrypt 

Add information about using both the "live" and "archive" directories when using the --ssl flag with Let's Encrypt.
pull/64/head
Logan Marchione 2019-03-15 10:12:19 -04:00 committed by GitHub
parent 18599df1ce
commit f4c317afc6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/source/deployment.rst
View File

@ -147,10 +147,20 @@ You can use the following commands to generate the required files:
$ openssl ecparam -genkey -name secp384r1 -out portainer.key
$ openssl req -new -x509 -sha256 -key portainer.key -out portainer.crt -days 3650
Note that `Certbot`_ could be used as well to generate a certificate and a key.
Note that `Certbot`_ could be used as well to generate a certificate and a key. However, because Docker has issues with `symlinks`_, if you use Certbot, you will need to pass both the "live" and "archive" directories as volumes (shown below).
.. _Certbot: https://certbot.eff.org/
.. _symlinks: https://github.com/portainer/portainer/issues/2302
::
docker run -d -p 9000:9000 \
-v /var/run/docker.sock:/var/run/docker.sock \
-v /root/portainer/data:/data \
-v /etc/letsencrypt/live/<redacted>:/certs/live/<redacted>:ro \
-v /etc/letsencrypt/archive/<redacted>:/certs/archive/<redacted>:ro \
--name portainer \
portainer/portainer:1.13.4 --ssl --sslcert /certs/live/<redacted>/cert.pem --sslkey /certs/live/<redacted>/privkey.pem
Deploy Portainer via docker-compose
-----------------------------------