1234567891011121314151617181920212223242526272829303132333435363738394041424344454647 |
- #!/usr/bin/env python3
-
- import argparse
- import etcdlib
- import jinja2
- import os
-
- parser = argparse.ArgumentParser()
- parser.add_argument('--name', help='Name of the docker host to request certificates for', default='unknown')
- parser.add_argument('--etcd-port', type=int, help='Port to connect to etcd on', default=2379)
- parser.add_argument('--etcd-host', help='Host to connect to etcd on', default='etcd')
- parser.add_argument('--etcd-prefix', help='Prefix to use when retrieving keys from etcd', default='/docker')
- parser.add_argument('--trusted-cert-path', help='Path to use for trusted CA certificate. Use "%s" for hostname', default='/letsencrypt/certs/%s/chain.pem')
- parser.add_argument('--cert-path', help='Path to use for certificates. Use "%s" for hostname', default='/letsencrypt/certs/%s/fullchain.pem')
- parser.add_argument('--cert-key-path', help='Path to use for certificate private keys. Use "%s" for hostname', default='/letsencrypt/certs/%s/privkey.pem')
- args = parser.parse_args()
-
- jinja_env = jinja2.Environment(loader=jinja2.FileSystemLoader('/'))
- template = jinja_env.get_template('nginx.tpl')
- fetcher = etcdlib.Connection(args.etcd_host, args.etcd_port, args.etcd_prefix)
-
- while True:
- services = []
- domains = {k: v.split(',') for k, v in fetcher.get_label('com.chameth.vhost').items()}
- protocols = fetcher.get_label('com.chameth.proxy.protocol')
- defaults = fetcher.get_label('com.chameth.proxy.default')
- for container, values in fetcher.get_label('com.chameth.proxy').items():
- networks = fetcher.get_networks(container)
- services.append({
- 'protocol': protocols[container] if container in protocols else 'http',
- 'vhosts': domains[container],
- 'host': next(iter(networks.values())), # TODO: Pick a bridge sensibly?
- 'port': values,
- 'certificate': args.cert_path % domains[container][0],
- 'trusted_certificate': args.trusted_cert_path % domains[container][0],
- 'certificate_key': args.cert_key_path % domains[container][0],
- 'default': container in defaults,
- })
-
- with open('/nginx-config/vhosts.conf', 'w') as f:
- print('Writing vhosts.conf...', flush=True)
- f.write(template.render(services=services))
-
- print('Done writing config.', flush=True)
-
- fetcher.wait_for_update()
|