ComputerSurge/docker-traefik-labels
3
0
Fork 0
forked from github-starred/docker-traefik-labels
Code Pull Requests Actions Packages Releases Activity

add TLS authentication

Browse Source
This commit is contained in:
ElevenNotes
2024-01-23 15:34:43 +01:00
parent 085de10ca1
commit 070f45fae5
1 changed files with 22 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
rootfs/labels/main.js
View File

@@ -1,6 +1,7 @@
process.once('SIGTERM', () => process.exit(0)); process.once('SIGTERM', () => process.exit(0));
process.once('SIGINT', () => process.exit(0)); process.once('SIGINT', () => process.exit(0));
const fs = require('fs');
const Docker = require('dockerode'); const Docker = require('dockerode');
const redis = require('redis'); const redis = require('redis');
const { nsupdate } = require('./nsupdate'); const { nsupdate } = require('./nsupdate');
@@ -30,7 +31,27 @@ class Labels{
}; };
constructor(){ constructor(){
this.#docker = new Docker({socketPath:'/run/docker.sock'}); switch(true){
case fs.existsSync('/run/docker.sock'):
elevenLogJSON('info', 'connect to Docker socket');
this.#docker = new Docker({socketPath:'/run/docker.sock'});
break;
case fs.existsSync(`${process.env?.APP_ROOT}/ssl/ca.crt`):
elevenLogJSON('info', 'connect to Docker API via TLS verify');
this.#docker = new Docker({
protocol:'https',
host:process.env?.LABELS_DOCKER_IP,
port: process.env.LABELS_DOCKER_PORT || 2376,
ca:fs.readFileSync(`${process.env?.APP_ROOT}/ssl/ca.crt`),
cert:fs.readFileSync(`${process.env?.APP_ROOT}/ssl/client.crt`),
key:fs.readFileSync(`${process.env?.APP_ROOT}/ssl/client.key`)
});
break;
default:
elevenLogJSON('error', 'No docker API available, add /run/docker.sock (non-root) or use TLS verify authentication!');
}
if(ENV_LABELS_WEBHOOK_AUTH_BASIC){ if(ENV_LABELS_WEBHOOK_AUTH_BASIC){
this.#webhook.headers['Authorization'] = 'Basic ' + Buffer.from(ENV_LABELS_WEBHOOK_AUTH_BASIC).toString('base64') this.#webhook.headers['Authorization'] = 'Basic ' + Buffer.from(ENV_LABELS_WEBHOOK_AUTH_BASIC).toString('base64')
} }