将 Traefik 中的 ACME 数据转储到证书
If you appreciate this project:
curl -sfL https://raw.githubusercontent.com/ldez/traefik-certs-dumper/master/godownloader.sh | bash -s -- -b $(go env GOPATH)/bin v2.9.3You can use pre-compiled binaries:
traefik-certs-dumper in your PATH.docker run ldez/traefik-certs-dumper:Examples:
$ traefik-certs-dumper file --version v3
dump
├──certs
│ └──my.domain.com.key
└──private
├──my.domain.com.crt
└──letsencrypt.key$ traefik-certs-dumper file --version v3 --source ./acme.json --dest ./dump/test
test
├──certs
│ └──my.domain.com.key
└──private
├──my.domain.com.crt
└──letsencrypt.key$ traefik-certs-dumper file --version v3 --domain-subdir=true
dump
├──my.domain.com
│ ├──certificate.crt
│ └──privatekey.key
└──private
└──letsencrypt.key$ traefik-certs-dumper file --version v3 --domain-subdir --crt-ext=.pem --key-ext=.pem
dump
├──my.domain.com
│ ├──certificate.pem
│ └──privatekey.pem
└──private
└──letsencrypt.key$ traefik-certs-dumper file --version v3 --domain-subdir --crt-name=fullchain --key-name=privkey
dump
├──my.domain.com
│ ├──fullchain.crt
│ └──privkey.key
└──private
└──letsencrypt.keyHook can be a one-liner passed as a string, or a file for more complex post-hook scenarios.
For the former, create a file (ex: hook.sh) and mount it, then pass sh hooksh as a parameter to --post-hook.
Here is a docker-compose example:
services:
# ...
traefik-certs-dumper:
image: ldez/traefik-certs-dumper:v2.9.3
container_name: traefik-certs-dumper
entrypoint: sh -c '
while ! [ -e /data/acme.json ]
|| ! [ `jq ".[] | .Certificates | length" /data/acme.json | jq -s "add" ` != 0 ]; do
sleep 1
; done
&& traefik-certs-dumper file --version v2 --watch
--source /data/acme.json --dest /data/certs
--post-hook "sh /hook.sh"'
labels:
traefik.enable: false
volumes:
- ./letsencrypt:/data
- ./hook.sh:/hook.sh
# ...$ traefik-certs-dumper kv consul --endpoints localhost:8500$ traefik-certs-dumper kv etcd --endpoints localhost:2379$ traefik-certs-dumper kv boltdb --endpoints /the/path/to/mydb.db$ traefik-certs-dumper kv zookeeper --endpoints localhost:2181暂无开放 Issues，或尚未同步最近议题。