Releases: JonasAlfredsson/docker-nginx-certbot
Releases · JonasAlfredsson/docker-nginx-certbot
v3.1.1
v3.1.0
v3.0.1: Actually use ECDSA certificates by default
- Actually use ECDSA certificates by default.
- I was little bit to eager to deploy the latest version so this change was forgotten.
v3.0.0
- Add support for DNS-01 challenges.
- Check out the list of all currently supported authenticators.
- This also means it is now possible to request wildcard certificates!
- PR by XaF.
- Make it possible to define which authenticator to use on a certificate basis.
- Like with ECDSA/RSA, you can add the authenicator's name in the
cert_name
to override the default. - PR by XaF.
- Like with ECDSA/RSA, you can add the authenicator's name in the
- Make it possible to use same
cert_name
across multiple config files.- The scripts will remember all domain names associated with the cert name.
- This means you can now use as many config files as you want and have them all point to a single certificate.
- Add BATS.
- A lot unit tests for the Bash functions we use in the
util.sh
file. - Also add it as a GitHub action.
- A huge thank you to XaF for providing the foundation for this.
- A lot unit tests for the Bash functions we use in the
- Add ability to override found
server_name
.- By adding a comment on the
server_name
line the script will now use that instead. - This enables you to easily group domains under a common wildcard certificate (example config).
- By adding a comment on the
- Any server name beginning with '
~
' will be ignored.- This character means that the server name is a regex, and we cannot use it when requesting certificates.
- Use ECDSA certificates by default.
- You now have to explicitly set
USE_ECDSA=0
to disable this.
- You now have to explicitly set
- We aren't actually introducing any breaking changes, but such a large change deserves a major release.
- Update documentation.
- Update examples.
v2.4.1
- Fix missing quotes around variable.
- PR by @LucianDavies.
- Changed package mirror used by Alpine images. More info in issue #70.
- Added more documentation.
- Updated the
docker-compose
examples a bit.
v2.4.0
- Create a script that can sign certificates with the help of a local certificate authortiy.
- It is now possible to work completely offline.
- We can now create certificates for
localhost
.
- Restructure and add a lot of documentation.
openssl
is now a symlink tolibressl
in the Alpine images.- This is done to simplify the rest of the scripts since the arguments are the same.
v2.3.0
- Add support for ECDSA certificates.
- It is possible to have Nginx serve both ECDSA and RSA certificates at the
same time for the same server. Read more in its good to know section.
- It is possible to have Nginx serve both ECDSA and RSA certificates at the
- Made so that the the "primary domain"/"cert name" can be whatever you
want.- This was actually already possible from
v0.12
, but it is first now we
allow it.
- This was actually already possible from
v2.2.0
- Listen to IPv6 in the redirector.conf in addition to IPv4.
- PR by @staticfloat.
- Add
reuseport
in the redirector.conf, which improves latency and parallelization.- PR by @staticfloat.
- Add mentions in the changelog to people who have helped with issues.
v2.1.0
- Made the
create_dhparams.sh
script capable of creating missing directories.- Our small
/docker-entrypoint.d/40-create-dhparam-folder.sh
script is therefore no longer necessary.
- Our small
- Made so that we run
symlink_user_configs
at startup so we do not run into a race condition with Nginx. - Some minor cleanup in the Dockerfiles related to the above changes.
v2.0.1
- There now exist a Dockerfile for building from the Nginx Alpine image as well.
- It is possible to use the Alpine version by appending
-alpine
to any of the tags from now on. - There are now so many tags available, see dockerhub_tags.md for the possible combinations.
- NOTE: There exists a bug in Bash 5.1.0, which is described in detail here.
- It is possible to use the Alpine version by appending
- Small fix to the
create_dhparams.sh
script to handle the use of libressl in Alpine. - Added a small sleep in order to mitigate a rare race condition between Nginx startup and the symlink script.
- Fix an ugly printout in the case when the sleep function exited naturally.