aboutsummaryrefslogtreecommitdiffstats
path: root/services/nginx/sbin/cmd.bash
diff options
context:
space:
mode:
Diffstat (limited to 'services/nginx/sbin/cmd.bash')
-rwxr-xr-xservices/nginx/sbin/cmd.bash11
1 files changed, 11 insertions, 0 deletions
diff --git a/services/nginx/sbin/cmd.bash b/services/nginx/sbin/cmd.bash
new file mode 100755
index 0000000..e024b4f
--- /dev/null
+++ b/services/nginx/sbin/cmd.bash
@@ -0,0 +1,11 @@
+#!/usr/bin/bash
+set -eu
+
+# Install sensitive data in tmpfs
+install --mode 400 /run/host_secrets/server.crt /run/secrets/server.crt
+install --mode 400 /run/host_secrets/server.key /run/secrets/server.key
+
+# We have to run the entrypoint again
+# Because if the first positional parameter is not "nginx" or "nginx-debug" the scripts in /docker-entrypoint.d are not ran.
+# https://github.com/nginx/docker-nginx/blob/master/stable/debian/docker-entrypoint.sh
+exec /docker-entrypoint.sh nginx -g "daemon off;"