[{"_1":2,"_169":-5,"_170":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_144":145},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_135":-5,"_136":11,"_137":17,"_138":11,"_139":-5,"_140":11,"_141":-5,"_142":143},"canonicalUrl","https://hub.docker.com/r/aptalca/letsencrypt-preview/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","aptalca","reponame","letsencrypt-preview","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":17,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2018-01-24T21:04:51.306343Z","description","Test version, do not use","is_private","last_updated","2018-01-29T22:59:03.842997Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",1515,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","[linuxserverurl]: https://linuxserver.io\n[forumurl]: https://forum.linuxserver.io\n[ircurl]: https://www.linuxserver.io/irc/\n[podcasturl]: https://www.linuxserver.io/podcast/\n[appurl]: https://letsencrypt.org/\n[hub]: https://hub.docker.com/r/linuxserver/letsencrypt/\n\n[![linuxserver.io](https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/linuxserver_medium.png)][linuxserverurl]\n\nThe [LinuxServer.io][linuxserverurl] team brings you another container release featuring easy user mapping and community support. Find us for support at:\n* [forum.linuxserver.io][forumurl]\n* [IRC][ircurl] on freenode at `#linuxserver.io`\n* [Podcast][podcasturl] covers everything to do with getting the most from your Linux Server plus a focus on all things Docker and containerisation!\n\n# linuxserver/letsencrypt\n[![](https://images.microbadger.com/badges/version/linuxserver/letsencrypt.svg)](https://microbadger.com/images/linuxserver/letsencrypt \"Get your own version badge on microbadger.com\")[![](https://images.microbadger.com/badges/image/linuxserver/letsencrypt.svg)](https://microbadger.com/images/linuxserver/letsencrypt \"Get your own image badge on microbadger.com\")[![Docker Pulls](https://img.shields.io/docker/pulls/linuxserver/letsencrypt.svg)][hub][![Docker Stars](https://img.shields.io/docker/stars/linuxserver/letsencrypt.svg)][hub][![Build Status](https://ci.linuxserver.io/buildStatus/icon?job=Docker-Builders/x86-64/x86-64-letsencrypt)](https://ci.linuxserver.io/job/Docker-Builders/job/x86-64/job/x86-64-letsencrypt/)\n\nThis container sets up an Nginx webserver and reverse proxy with php support and a built-in letsencrypt client that automates free SSL server certificate generation and renewal processes. It also contains fail2ban for intrusion prevention.\n\n[![letsencrypt](https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/le-logo-wide.png)][appurl]\n\n## Usage\n\n```\ndocker create \\\n --cap-add=NET_ADMIN \\\n --name=letsencrypt \\\n -v :/config \\\n -e PGID= -e PUID= \\\n -e EMAIL= \\\n -e URL= \\\n -e SUBDOMAINS= \\\n -e VALIDATION= \\\n -p 80:80 -p 443:443 \\\n -e TZ= \\\n linuxserver/letsencrypt\n```\n\n## Parameters\n\n`The parameters are split into two halves, separated by a colon, the left hand side representing the host and the right the container side. \nFor example with a port -p external:internal - what this shows is the port mapping from internal to external of the container.\nSo -p 8080:80 would expose port 80 from inside the container to be accessible from the host's IP on port 8080\nhttp://192.168.x.x:8080 would show you what's running INSIDE the container on port 80.`\n\n\n* `-p 80 -p 443` - the port(s)\n* `-v /config` - all the config files including the webroot reside here\n* `-e URL` - the top url you have control over (\"customdomain.com\" if you own it, or \"customsubdomain.ddnsprovider.com\" if dynamic dns)\n* `-e SUBDOMAINS` - subdomains you'd like the cert to cover (comma separated, no spaces) ie. `www,ftp,cloud`\n* `-e VALIDATION` - letsencrypt validation method to use, options are `http`, `tls-sni` or `dns` (dns method also requires `DNSPLUGIN` variable set)\n* `-e PGID` for GroupID - see below for explanation\n* `-e PUID` for UserID - see below for explanation\n* `-e TZ` - timezone ie. `America/New_York` \n \n_Optional settings:_\n* `-e DNSPLUGIN` - required if `VALIDATION` is set to `dns`. Options are `cloudflare`, `cloudxns`, `digitalocean`, `dnsimple`, `dnsmadeeasy`, `google`, `luadns`, `nsone`, `rfc2136` and `route53`. Also need to enter the credentials into the corresponding ini file under `/config/dns-conf` \n* `-e EMAIL` - your e-mail address for cert registration and notifications\n* `-e DHLEVEL` - dhparams bit value (default=2048, can be set to `1024` or `4096`)\n* `-p 80` - Port 80 forwarding is required when `VALIDATION` is set to `http`, but not `dns` or `tls-sni`\n* `-e ONLY_SUBDOMAINS` - if you wish to get certs only for certain subdomains, but not the main domain (main domain may be hosted on another machine and cannot be validated), set this to `true`\n* `-e EXTRA_DOMAINS` - additional fully qualified domain names (comma separated, no spaces) ie. `extradomain.com,subdomain.anotherdomain.org`\n* `-e STAGING` - set to `true` to retrieve certs in staging mode. Rate limits will be much higher, but the resulting cert will not pass the browser's security test. Only to be used for testing purposes.\n* `-e HTTPVAL` - Deprecated, please use the `VALIDATION` parameter instead\n\n_Important notice:_\n* This image previously used tls-sni validation over port 443. However, due to a security vulnerability, letsencrypt disabled tls-sni validation: https://community.letsencrypt.org/t/2018-01-11-update-regarding-acme-tls-sni-and-shared-hosting-infrastructure/50188 If you are getting the following error in the log, that means you are attempting tls-sni authentication, which is disabled by the servers: `Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.` Please set the `VALIDATION` parameter to either `http` or `dns` and follow the above directions to revalidate. \n\nIt is based on alpine linux with s6 overlay, for shell access whilst the container is running do `docker exec -it letsencrypt /bin/bash`.\n\n### User / Group Identifiers\n\nSometimes when using data volumes (`-v` flags) permissions issues can arise between the host OS and the container. We avoid this issue by allowing you to specify the user `PUID` and group `PGID`. Ensure the data volume directory on the host is owned by the same user you specify and it will \"just work\" ™.\n\nIn this instance `PUID=1001` and `PGID=1001`. To find yours use `id user` as below:\n\n```\n $ id \n uid=1001(dockeruser) gid=1001(dockergroup) groups=1001(dockergroup)\n```\n\n## Setting up the application\n\n* Before running this container, make sure that the url and subdomains are properly forwarded to this container's host, and that port 443 (and/or 80) is not being used by another service on the host (NAS gui, another webserver, etc.).\n* For `http` validation, port 80 on the internet side of the router should be forwarded to this container's port 80\n* For `tls-sni` validation, port 443 on the internet side of the router should be forwarded to this container's port 443\n* `--cap-add=NET_ADMIN` is required for fail2ban to modify iptables\n* If you need a dynamic dns provider, you can use the free provider duckdns.org where the url will be `yoursubdomain.duckdns.org` and the subdomains can be `www,ftp,cloud`\n* The container detects changes to url and subdomains, revokes existing certs and generates new ones during start. It also detects changes to the DHLEVEL parameter and replaces the dhparams file.\n* If you'd like to password protect your sites, you can use htpasswd. Run the following command on your host to generate the htpasswd file `docker exec -it letsencrypt htpasswd -c /config/nginx/.htpasswd `\n\n\n## Info\n\n* Shell access whilst the container is running: `docker exec -it letsencrypt /bin/bash`\n* To monitor the logs of the container in realtime: `docker logs -f letsencrypt`\n\n* container version number \n\n`docker inspect -f '{{ index .Config.Labels \"build_version\" }}' letsencrypt`\n\n* image version number\n\n`docker inspect -f '{{ index .Config.Labels \"build_version\" }}' linuxserver/letsencrypt`\n\n## Versions\n\n+ **29.01.18:** Big changes. `VALIDATION` parameter added for choosing letsencrypt validation methods, including dns through official plugins. `HTTPVAL` is deprecated. `STAGING` parameter added for testing. Backwards compatibility for the short term. Since tls-sni is disabled by letsencrypt, most users will have to change their settings and adopt the new parameters within the next 90 days. Reorganized the nginx default config, split ssl settings into new ssl.conf\n+ **13.01.18:** Re-enable ipv6 due to update to fail2ban 0.10.1. Existing users can enable ipv6 by deleting `/config/fail2ban/action.d/iptables-common.local` and restarting the container after updating the image\n+ **11.01.18:** Halt the container if validation fails instead of a stop (so restart=always doesn't get users throttled with letsencrypt)\n+ **10.01.18:** Add option for http validation on port 80\n+ **05.01.18:** Rebase to alpine 3.7\n+ **04.11.17:** Add php7 soap module\n+ **31.10.17:** Add php7 exif and xmlreader modules\n+ **25.09.17:** Manage fail2ban via s6\n+ **24.09.17:** Add memcached service\n+ **01.09.17:** `--privileged` is no longer required as long as `--cap-add=NET_ADMIN` is added, instructions modified accordingly, disabled fail2ban ipv6 actions due to requiring access to host kernel modules\n+ **31.08.17:** Add php7-phar\n+ **14.07.17:** Enable modules dynamically in nginx.conf\n+ **06.07.17:** Add support for multiple domains (thanks @oznu)\n+ **22.06.17:** Add various nginx modules and enable all modules in the default nginx.conf\n+ **16.06.17:** Update deprecated certbot option for https validation, make e-mail entry optional, update readme\n+ **05.06.17:** Add php7-bz2\n+ **27.05.17:** Rebase to alpine 3.6.\n+ **03.05.17:** Fix log permissions.\n+ **18.04.17:** Add php7-sockets, update fail2ban filter and action defaults\n+ **27.02.17:** Add php7-dom, php7-iconv and php7-pdo_sqlite\n+ **21.02.17:** Add php7-xml\n+ **10.02.17:** Switch to alpine 3.5 base and php7, add php zlib module and all nginx modules\n+ **13.01.17:** Add php5-ctype and php5-openssl\n+ **04.01.17:** Add php5-mysqli and php5-pdo_mysql\n+ **22.11.16:** Add gd and mcrypt packages\n+ **21.11.16:** Add curl package\n+ **07.11.16:** Initial Release\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",253613885,"orgData","recentTags",[87,125],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},"content_type","creator",50486,"full_size",75624949,"id",21174597,"images",[97],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},"architecture","amd64","digest","sha256:13df6ea7ba581e17f47e329de9ff6c201868542bf8fa9db115bd7ce017c6ac31","features","","last_pulled","2026-09-21T09:55:15.446368704Z","last_pushed","2018-01-29T22:59:04Z","os","linux","os_features","os_version","size","variant","2018-01-29T22:59:03.475197Z","last_updater","last_updater_username","media_type","latest","repository",3691561,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_88":40,"_89":90,"_91":126,"_93":127,"_95":128,"_46":133,"_115":90,"_116":29,"_117":52,"_53":134,"_119":120,"_121":131,"_122":133,"_123":62,"_124":17},75613065,21174237,[129],{"_98":99,"_100":130,"_102":103,"_104":131,"_106":132,"_108":109,"_110":103,"_111":-5,"_112":126,"_59":62,"_113":-5},"sha256:99bfbb143e6bbb74011988a6cdc2c671626067f963a9202f9fb2f37867916693","2026-09-20T11:24:30.129192635Z","2018-01-29T22:53:38Z","2018-01-29T22:53:37.220097Z","rewrite","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":146,"_153":154,"_142":167,"_168":11},{"_36":147,"_38":148,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":149,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":150,"_75":17,"_76":152,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":151},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_155":156,"_157":-5,"_158":-5,"_159":160},"count",2,"next","previous","results",[161,164],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":162,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},[163],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},{"_88":40,"_89":90,"_91":126,"_93":127,"_95":165,"_46":133,"_115":90,"_116":29,"_117":52,"_53":134,"_119":120,"_121":131,"_122":133,"_123":62,"_124":17},[166],{"_98":99,"_100":130,"_102":103,"_104":131,"_106":132,"_108":109,"_110":103,"_111":-5,"_112":126,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

aptalca/letsencrypt-preview

Tags for aptalca/letsencrypt-preview