|
@@ -1,37 +1,6 @@
|
|
|
|
|
|
set -e
|
|
|
|
|
|
-function _setup_dhparam() {
|
|
|
- echo 'Setting up DH Parameters..'
|
|
|
-
|
|
|
-
|
|
|
- DHPARAM_FILE='/etc/nginx/dhparam/dhparam.pem'
|
|
|
-
|
|
|
-
|
|
|
-
|
|
|
- if [[ -f ${DHPARAM_FILE} ]]
|
|
|
- then
|
|
|
- echo 'Warning: A custom dhparam.pem file was provided. Best practice is to use standardized RFC7919 DHE groups instead.' >&2
|
|
|
- else
|
|
|
-
|
|
|
- local FFDHE_GROUP="${DHPARAM_BITS:-4096}"
|
|
|
-
|
|
|
-
|
|
|
- local RFC7919_DHPARAM_FILE="/app/dhparam/ffdhe${FFDHE_GROUP}.pem"
|
|
|
-
|
|
|
-
|
|
|
-
|
|
|
- if [[ ! ${DHPARAM_BITS} =~ ^(2048|3072|4096)$ ]]
|
|
|
- then
|
|
|
- echo "ERROR: Unsupported DHPARAM_BITS size: ${DHPARAM_BITS}, use 2048, 3072, or 4096 (default)." >&2
|
|
|
- exit 1
|
|
|
- fi
|
|
|
-
|
|
|
-
|
|
|
- cp "${RFC7919_DHPARAM_FILE}" "${DHPARAM_FILE}"
|
|
|
- fi
|
|
|
-}
|
|
|
-
|
|
|
function _check_unix_socket() {
|
|
|
|
|
|
if [[ $DOCKER_HOST = unix://* ]]; then
|
|
@@ -64,6 +33,37 @@ function _resolvers() {
|
|
|
fi
|
|
|
}
|
|
|
|
|
|
+function _setup_dhparam() {
|
|
|
+ echo 'Setting up DH Parameters..'
|
|
|
+
|
|
|
+
|
|
|
+ DHPARAM_FILE='/etc/nginx/dhparam/dhparam.pem'
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+ if [[ -f ${DHPARAM_FILE} ]]
|
|
|
+ then
|
|
|
+ echo 'Warning: A custom dhparam.pem file was provided. Best practice is to use standardized RFC7919 DHE groups instead.' >&2
|
|
|
+ else
|
|
|
+
|
|
|
+ local FFDHE_GROUP="${DHPARAM_BITS:-4096}"
|
|
|
+
|
|
|
+
|
|
|
+ local RFC7919_DHPARAM_FILE="/app/dhparam/ffdhe${FFDHE_GROUP}.pem"
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+ if [[ ! ${DHPARAM_BITS} =~ ^(2048|3072|4096)$ ]]
|
|
|
+ then
|
|
|
+ echo "ERROR: Unsupported DHPARAM_BITS size: ${DHPARAM_BITS}, use 2048, 3072, or 4096 (default)." >&2
|
|
|
+ exit 1
|
|
|
+ fi
|
|
|
+
|
|
|
+
|
|
|
+ cp "${RFC7919_DHPARAM_FILE}" "${DHPARAM_FILE}"
|
|
|
+ fi
|
|
|
+}
|
|
|
+
|
|
|
|
|
|
if [[ $* == 'forego start -r' ]]; then
|
|
|
_check_unix_socket
|