docker-service-nginx/generate.py

#!/usr/bin/env python3

import argparse
import etcdlib
import jinja2
import os

parser = argparse.ArgumentParser()
parser.add_argument('--name', help='Name of the docker host to request certificates for', default='unknown')
parser.add_argument('--etcd-port', type=int, help='Port to connect to etcd on', default=2379)
parser.add_argument('--etcd-host', help='Host to connect to etcd on', default='etcd')
parser.add_argument('--etcd-prefix', help='Prefix to use when retrieving keys from etcd', default='/docker')
parser.add_argument('--trusted-cert-path', help='Path to use for trusted CA certificate. Use "%s" for hostname', default='/letsencrypt/certs/%s/chain.pem')
parser.add_argument('--cert-path', help='Path to use for certificates. Use "%s" for hostname', default='/letsencrypt/certs/%s/fullchain.pem')
parser.add_argument('--cert-key-path', help='Path to use for certificate private keys. Use "%s" for hostname', default='/letsencrypt/certs/%s/privkey.pem')
args = parser.parse_args()

jinja_env = jinja2.Environment(loader=jinja2.FileSystemLoader('/'))
template = jinja_env.get_template('nginx.tpl')
fetcher = etcdlib.Connection(args.etcd_host, args.etcd_port, args.etcd_prefix)

while True:
  services = []
  domains = {k: v.split(',') for k, v in fetcher.get_label('com.chameth.vhost').items()}
  protocols = fetcher.get_label('com.chameth.proxy.protocol')
  for container, values in fetcher.get_label('com.chameth.proxy').items():
    networks = fetcher.get_networks(container)
    services.append({
      'protocol': protocols[container] if container in protocols else 'http',
      'vhosts': domains[container],
      'host': next(iter(networks.values())), # TODO: Pick a bridge sensibly?
      'port': values,
      'certificate': args.cert_path % domains[container][0],
      'trusted_certificate': args.trusted_cert_path % domains[container][0],
      'certificate_key': args.cert_key_path % domains[container][0]
    })

  with open('/nginx-config/vhosts.conf', 'w') as f:
    print('Writing vhosts.conf...', flush=True)
    f.write(template.render(services=services))

  print('Done writing config.', flush=True)

  fetcher.wait_for_update()