bradjonesllc / docker-haproxy-letsencrypt

Dockerized HAProxy with Let's Encrypt integration

Dockerized HAProxy with Let's Encrypt

This container provides a HAProxy 1.7 application with Let's Encrypt certificates generated at startup, as well as renewed (if necessary) once a week.

Usage

docker run \
    -e CERTS=my.domain,my.other.domain \
    -e [email protected] \
    -v /etc/letsencrypt:/etc/letsencrypt \
    -p 80:80 -p 443:443 \
    bradjonesllc/docker-haproxy-letsencrypt

You will almost certainly want to create an image FROM this image or mount your haproxy.cfg at /usr/local/etc/haproxy/haproxy.cfg.

Alternatives

HAProxy is powerful, but notoriously difficult to configure. If you don't require HAProxy's functionality per se, consider this similar image for Nginx.

License and Copyright

© Brad Jones LLC, Licensed under GPL-2. Some components MIT license.

docker-haproxy-letsencrypt's Issues

ACMEv1 protocol obsolete

Hi,

Just received this email from lets encrypt

Beginning June 1, 2020, we will stop allowing new domains to validate using
the ACMEv1 protocol. You should upgrade to an ACMEv2 compatible client before
then, or certificate issuance will fail. For most people, simply upgrading to
the latest version of your existing client will suffice. You can view the
client list at: https://letsencrypt.org/docs/client-options/

Can you upgrade your container please ?

Error on build (Step 4)

Hi, I forked the repo in order to use my own haproxy.cfg and got an issue during the build.

...
...
Processing triggers for systemd (215-17+deb8u6) ...
Processing triggers for libc-bin (2.19-18+deb8u7) ...
Processing triggers for ca-certificates (20141019+deb8u2) ...
Updating certificates in /etc/ssl/certs... 174 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....done.
+ apt-get install --no-install-recommends -yqq certbot -t jessie-backports
E: Unable to correct problems, you have held broken packages.
The command '/bin/sh -c buildDeps='curl gcc libc6-dev libpcre3-dev libssl-dev make libreadline-dev'     && set -x     && apt-get update && apt-get install --no-install-recommends -yqq $buildDeps     cron     wget     ca-certificates     curl     patch     python-setuptools     dnsmasq     libssl1.0.0 libpcre3     && apt-get install --no-install-recommends -yqq certbot -t jessie-backports      && wget https://github.com/Supervisor/supervisor/archive/${SUPERVISOR_VERSION}.tar.gz     && tar -xvf ${SUPERVISOR_VERSION}.tar.gz     && cd supervisor-${SUPERVISOR_VERSION} && python setup.py install     && apt-get clean autoclean && apt-get autoremove -y     && rm -rf /var/lib/apt/lists/*' returned a non-zero code: 100

The cause seems to be jessie-backports and certbot installation
Best regards.

Auto-renewal does not work

It seems like the auto-renewal doesn't work. I've got an email from Letsencrypt to renew my current domains.

certbot: error: unrecognized arguments: --max-log-backups 0

Cannot start the docker image anymore... not sure what to do.

Remove DNS-related patch once 1.6.6 lands

Added patch at http://discourse.haproxy.org/t/dynamic-dns-resolution-does-not-work-for-me-after-1-6-4-to-1-6-5-upgrade/310/2 in order to get DNS working again.