self-hosted/dockerfiles
1
0
Fork 0
mirror of https://github.com/vimagick/dockerfiles.git synced 2025-08-10 22:31:28 +02:00
Code Issues Releases Activity

update mosquitto tls

Browse Source
This commit is contained in:
kev
2017-05-22 14:48:55 +08:00
parent 10494ffc63
commit f84e0f0f5b
6 changed files with 43 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
mosquitto/Dockerfile
View File

@@ -5,7 +5,7 @@
FROM alpine
MAINTAINER kev <noreply@easypi.pro>
RUN apk add --no-cache mosquitto
RUN apk add --no-cache ca-certificates mosquitto
VOLUME /etc/mosquitto
EXPOSE 1883 8883

24
mosquitto/README.md
View File

@@ -24,27 +24,33 @@ mosquitto:
## mosquitto.conf
```
port 8883
```ini
port 1883
log_dest stdout
allow_anonymous false
password_file /etc/mosquitto/pwfile
persistence true
persistence_location /var/lib/mosquitto
cafile /var/lib/mosquitto/ca.crt
certfile /var/lib/mosquitto/server.crt
keyfile /var/lib/mosquitto/server.key
###### ENABLE TLS ######
listener 8883
protocol mqtt
capath /etc/ssl/certs
certfile /var/lib/mosquitto/fullchain.pem
keyfile /var/lib/mosquitto/privkey.pem
require_certificate false
```
- `pwfile` is managed by [mosquitto_passwd][3].
- TLS keys are generated by [openssl][2].
- Two methods to support TLS:
- You can get free TLS certificates from letsencrypt, `capath` is needed.
- Self-signed TLS keys can be generated by [openssl][2], `cafile` is needed.
> It is important to use different certificate subject parameters for your CA,
> server and clients.
> It is important to use different certificate subject parameters for your self-signed CA, server and clients.
## server
```
```bash
$ mkdir -p data
$ touch data/mosquitto.conf data/pwfile
$ docker-compose up -d

2
mosquitto/arm/Dockerfile
View File

@@ -5,7 +5,7 @@
FROM easypi/alpine-arm
MAINTAINER EasyPi Software Foundation
RUN apk add --no-cache mosquitto
RUN apk add --no-cache ca-certificates mosquitto
VOLUME /etc/mosquitto
EXPOSE 1883 8883

4
mosquitto/arm/data/mosquitto.conf
View File

@@ -12,7 +12,7 @@ persistence_location /var/lib/mosquitto
###### ENABLE WS ######
#listener 8080
#protocol websockets
#cafile /var/lib/mosquitto/DST_Root_CA_X3.pem
#capath /etc/ssl/certs
#certfile /var/lib/mosquitto/fullchain.pem
#keyfile /var/lib/mosquitto/privkey.pem
#require_certificate false
@@ -20,7 +20,7 @@ persistence_location /var/lib/mosquitto
###### ENABLE TLS ######
#listener 8883
#protocol mqtt
#cafile /var/lib/mosquitto/DST_Root_CA_X3.pem
#capath /etc/ssl/certs
#certfile /var/lib/mosquitto/fullchain.pem
#keyfile /var/lib/mosquitto/privkey.pem
#require_certificate false

4
mosquitto/data/mosquitto.conf
View File

@@ -12,7 +12,7 @@ persistence_location /var/lib/mosquitto
###### ENABLE WS ######
#listener 8080
#protocol websockets
#cafile /var/lib/mosquitto/DST_Root_CA_X3.pem
#capath /etc/ssl/certs
#certfile /var/lib/mosquitto/fullchain.pem
#keyfile /var/lib/mosquitto/privkey.pem
#require_certificate false
@@ -20,7 +20,7 @@ persistence_location /var/lib/mosquitto
###### ENABLE TLS ######
#listener 8883
#protocol mqtt
#cafile /var/lib/mosquitto/DST_Root_CA_X3.pem
#capath /etc/ssl/certs
#certfile /var/lib/mosquitto/fullchain.pem
#keyfile /var/lib/mosquitto/privkey.pem
#require_certificate false