nginx docker with hosted acme.sh (Let's Encrypt & ZeroSSL)

curl https://get.acme.sh | sh -s email=me@domain.tld

docker-compose.yaml

    image: nginx:latest

    container_name: nginx

    volumes:

      - ./etc-nginx-certs/:/etc/nginx/certs/

      - ./tmp-acme_challenge:/tmp/acme_challenge

      - ./default.conf:/etc/nginx/conf.d/default.conf

default.conf

    location ^~ /.well-known/acme-challenge/ {

        allow all;

        root /tmp/acme_challenge;

    }

    ssl_certificate /etc/nginx/certs/domain.tld.crt;

    ssl_certificate_key /etc/nginx/certs/domain.tld.key;

    

# issue Let's Encrypt

acme.sh --issue --server letsencrypt  -d domain.tld -d www.domain.tld -w /home/user/docker/nginx/tmp-acme_challenge --home /home/user/docker/nginx/acme.sh

# issue ZeroSSL

acme.sh --register-account -m me@domain.tld --issue -d domain.tld -d www.domain.tld -w /home/user/docker/nginx/tmp-acme_challenge --home /home/user/docker/nginx/acme.sh

# install cert

acme.sh --install-cert -d domain.tld --home /home/user/docker/nginx/acme.sh --key-file /home/user/docker/nginx/etc-nginx-certs/domain.tld.key --fullchain-file /home/user/docker/nginx/etc-nginx-certs/domain.tld.crt --reloadcmd "docker exec nginx /etc/init.d/nginx reload"

# renew cert

acme.sh --cron --home /home/user/docker/nginx/acme.sh 

 

 

reference

- https://github.com/acmesh-official/acme.sh