-
Notifications
You must be signed in to change notification settings - Fork 42
Description
Hi,
When working on using this I implemented it and had endless problems getting it to work from within docker, when using small images.
Basically in docker the x509 certificates and https will not work when using smaller images by default you need to do the following to ensure the image will work:
# by default HTTPS will not work without these two lines so when making requests to acme domain it will fail and give strange errors
RUN apt-get install ca-certificates -y
RUN update-ca-certificates
each platform is different of course, but autotls was not functioning and it took me a while to realise this was docker breaking it.
While I know this isn't an autotls issue, I think it might be worthy of a FAQ:
"PSA if you're running it from docker you NEED to add x509 certificates to the docker image"
Golang's docker image doesn't have the problem but if you use a smaller cut down image for size then it will need manual intervention on debian, ubuntu and fedora images afaik.