Merge pull request #44 from esnet/fix/Dockerfile

fixes #39 - Docker based install.

Author: netops2devops

Dockerfile

@@ -12,20 +12,17 @@ RUN make
 
 FROM chainguard/wolfi-base:latest
 
-WORKDIR /acme-proxy
-RUN chown -R nonroot:nonroot /acme-proxy/
+WORKDIR /opt/acme-proxy
+RUN chown -R nonroot:nonroot /opt/acme-proxy/
 
 COPY --from=build --chown=nonroot:nonroot /build/step-ca .
 RUN apk add --no-cache pcsc-lite
 
 # KV store mount point
-RUN mkdir /acme-proxy/db && chown nonroot:nonroot /acme-proxy/db
-
-# ca.json  mount point
-RUN mkdir /acme-proxy/config && chown nonroot:nonroot /acme-proxy/config
+RUN mkdir /opt/acme-proxy/db && chown nonroot:nonroot /opt/acme-proxy/db
 
 USER nonroot
 EXPOSE 443
 
-ENTRYPOINT [ "/acme-proxy/step-ca" ]
-CMD [ "/acme-proxy/config/ca.json" ]
+ENTRYPOINT [ "/opt/acme-proxy/step-ca" ]
+CMD [ "/opt/acme-proxy/ca.json" ]

docs/content/install.md

@@ -149,21 +149,19 @@ Then follow the [pre-built binary](#pre-built-binary) instructions to create the
 
 ## Docker
 
-### Pre-built image
+Make sure to
 
-```sh
-docker pull ghcr.io/esnet/acme-proxy:latest
-```
-
-Run with a bind-mounted config file:
+- Configure the `ca.json` file 
+- Create a directory for `db`
 
 ```sh
 docker run -d \
   --name acme-proxy \
   -p 443:443 \
-  -v ./ca.json:/opt/acme-proxy/ca.json:ro \
-  -v acme-proxy-db:/opt/acme-proxy/db \
-  ghcr.io/esnet/acme-proxy:latest
+  -v "$(pwd)"/ca.json:/opt/acme-proxy/ca.json:ro \
+  -v "$(pwd)"/db:/opt/acme-proxy/db \
+  --restart unless-stopped \
+ghcr.io/esnet/acme-proxy:latest
 ```
 
 View logs:
@@ -172,25 +170,6 @@ View logs:
 docker logs -f acme-proxy
 ```
 
-### Build your own image
-
-```sh
-git clone https://github.com/esnet/acme-proxy.git
-cd acme-proxy
-docker build -t acme-proxy:latest .
-```
-
-Run:
-
-```sh
-docker run -d \
-  --name acme-proxy \
-  -p 443:443 \
-  -v ./ca.json:/opt/acme-proxy/ca.json:ro \
-  -v acme-proxy-db:/opt/acme-proxy/db \
-  acme-proxy:latest
-```
-
 ### Docker Compose
 
 ```yaml
@@ -201,11 +180,8 @@ services:
       - "443:443"
     volumes:
       - ./ca.json:/opt/acme-proxy/ca.json:ro
-      - acme-proxy-db:/opt/acme-proxy/db
+      - ./db:/opt/acme-proxy/db
     restart: unless-stopped
-
-volumes:
-  acme-proxy-db:
 ```
 
 ---

docs/content/quickstart.md

@@ -68,7 +68,7 @@ Set these five fields — everything else can stay at its default:
 ```json
 {
   "address": ":443",
-  "dnsNames": ["acmeproxy.example.com"],
+  "dnsNames": ["acme-proxy.example.com"],
   "authority": {
     "type": "externalcas",
     "config": {
@@ -78,7 +78,7 @@ Set these five fields — everything else can stay at its default:
       "eab_hmac_key": "your-hmac-key-here"
     }
   },
-  "commonName": "acmeproxy.example.com"
+  "commonName": "acme-proxy.example.com"
 }
 ```