TLS certificates

The chart allows you to specify the path to a TLS cert/key pair, but doesn't provide any ways to actually mount the secrets in the container.

if you just need TLS enabled, these apparently exist in container already

/etc/ssl/certs/ssl-cert-snakeoil.pem
/etc/ssl/private/ssl-cert-snakeoil.key

Careful with those. They are generated on container build and are the same for everyone using them. They are for testing/staging environments only.

You can try running this on container start instead:

make-ssl-cert generate-default-snakeoil --force-overwrite

which should generate new ones.

Navigation Menu