hopefully get this working first try

2026-03-07 15:14:00 -06:00
parent d26668df78
commit 4053293ccb
12 changed files with 496 additions and 12 deletions
@@ -18,9 +18,18 @@ services:
      - OVERLORD_TLS_CERT=/app/certs/server.crt
      - OVERLORD_TLS_KEY=/app/certs/server.key
      - OVERLORD_TLS_CA=
+      # Optional certbot integration (used only when NODE_ENV=production)
+      - OVERLORD_TLS_CERTBOT_ENABLED=false
+      - OVERLORD_TLS_CERTBOT_LIVE_PATH=/etc/letsencrypt/live
+      - OVERLORD_TLS_CERTBOT_DOMAIN=
+      - OVERLORD_TLS_CERTBOT_CERT_FILE=fullchain.pem
+      - OVERLORD_TLS_CERTBOT_KEY_FILE=privkey.pem
+      - OVERLORD_TLS_CERTBOT_CA_FILE=chain.pem
    volumes:
      - overlord-data:/app/data
      - overlord-certs:/app/certs
+      # Uncomment to mount host certbot certs read-only
+      # - /etc/letsencrypt:/etc/letsencrypt:ro
      # Uncomment to use a static config file instead of env vars
      # - ./Overlord-Server/config.json:/app/config.json:ro
    restart: unless-stopped