NOTICE: Platform.sh launched builtin support for Let's Encrypt on April 20, 2017. So most likely you won't need this any more. Read more on Platform.sh's blog.
Platform.sh previously didn't support using ACME/Let's Encrypt certificates (at least not with domain verification and automatic renewal).
This Docker image provides scripting for obtaining certificates via ACME/Let's Encrypt and uploading them to Platform.sh using their API.
This Docker image is based on lego to obtain a certificate via ACME DNS challenge and uploads the certificate to platform.sh using their commmand line client.
Necessary configuration via environment variables, .i.e.:
[email protected](used for registering with Let's Encrypt)DOMAINS="example.com www.example.com"(space separated list -- must already be added to the project at Platform.sh)DNS_PROVIDER=dnsimple(your DNS provider, see below for supported providers and additional needed configuration)PLATFORMSH_API_TOKEN=mytoken(an APIv1 token)PLATFORMSH_PROJECT_ID=myprojectid
You also need to provide environment variables required by the DNS provider challenge chosen:
- cloudflare:
CLOUDFLARE_EMAIL,CLOUDFLARE_API_KEY - digitalocean:
DO_AUTH_TOKEN - dnsimple:
DNSIMPLE_EMAIL,DNSIMPLE_API_KEY - dnsmadeeasy:
DNSMADEEASY_API_KEY,DNSMADEEASY_API_SECRET - gandi:
GANDI_API_KEY - gcloud:
GCE_PROJECT - namecheap:
NAMECHEAP_API_USER,NAMECHEAP_API_KEY - rfc2136:
RFC2136_TSIG_KEY,RFC2136_TSIG_SECRET,RFC2136_TSIG_ALGORITHM,RFC2136_NAMESERVER - route53:
AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_REGION - dyn:
DYN_CUSTOMER_NAME,DYN_USER_NAME,DYN_PASSWORD - vultr:
VULTR_API_KEY - ovh:
OVH_ENDPOINT,OVH_APPLICATION_KEY,OVH_APPLICATION_SECRET,OVH_CONSUMER_KEY - pdns:
PDNS_API_KEY,PDNS_API_URL
Optional configuration via environment variables:
ACME_SERVER=https://acme-staging.api.letsencrypt.org/directory(optional ACME server -- defaults to Let's Encrypts production server)ACME_DAYS=30(the number of days left on a certificate to renew it. Defaults to 30)
The container will store the certificates in /data so you should mount a volume to /data.