build(dockerfile): Update build args

build(ide): Update IDE settings
feat(nginx): Update version to 1.27 on Alpine 3.20
2024-08-31 18:15:13 -06:00 · 2024-08-31 18:07:35 -06:00 · 2024-08-31 18:06:13 -06:00 · 2023-08-10 17:09:47 -06:00 · 2023-08-10 17:01:32 -06:00 · 2022-11-02 01:11:00 -06:00
23 changed files with 891 additions and 475 deletions
--- a/.gitattributes
+++ b/.gitattributes
@ -62,6 +62,7 @@
 *.min.css  text eol=lf
 *.js       text eol=lf
 *.min.js   text eol=lf
+*.php      text eol=lf

 # Visual Studio projects (Rider also)
 *.cs     diff=csharp
--- a/.idea/.idea.ab-nginx.dir/.idea/aws.xml
+++ b/.idea/.idea.ab-nginx.dir/.idea/aws.xml
@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="accountSettings">
+    <option name="activeRegion" value="us-east-1" />
+    <option name="recentlyUsedRegions">
+      <list>
+        <option value="us-east-1" />
+      </list>
+    </option>
+  </component>
+</project>
--- a/.idea/.idea.ab-nginx.dir/.idea/git_toolbox_prj.xml
+++ b/.idea/.idea.ab-nginx.dir/.idea/git_toolbox_prj.xml
@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="GitToolBoxProjectSettings">
+    <option name="commitMessageIssueKeyValidationOverride">
+      <BoolValueOverride>
+        <option name="enabled" value="true" />
+      </BoolValueOverride>
+    </option>
+    <option name="commitMessageValidationConfigOverride">
+      <CommitMessageValidationOverride>
+        <option name="enabled" value="true" />
+      </CommitMessageValidationOverride>
+    </option>
+    <option name="commitMessageValidationEnabledOverride">
+      <BoolValueOverride>
+        <option name="enabled" value="true" />
+      </BoolValueOverride>
+    </option>
+  </component>
+</project>
--- a/.idea/.idea.ab-nginx.dir/.idea/markdown.xml
+++ b/.idea/.idea.ab-nginx.dir/.idea/markdown.xml
@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="MarkdownSettings">
+    <enabledExtensions>
+      <entry key="MermaidLanguageExtension" value="false" />
+      <entry key="PlantUMLLanguageExtension" value="false" />
+    </enabledExtensions>
+  </component>
+</project>
--- a/.idea/.idea.ab-nginx.dir/.idea/vcs.xml
+++ b/.idea/.idea.ab-nginx.dir/.idea/vcs.xml
@ -2,12 +2,19 @@
 <project version="4">
  <component name="CommitMessageInspectionProfile">
    <profile version="1.0">
-      <inspection_tool class="BodyLimit" enabled="true" level="ERROR" enabled_by_default="true" />
+      <inspection_tool class="BodyLimit" enabled="true" level="WEAK WARNING" enabled_by_default="true" />
      <inspection_tool class="SubjectBodySeparation" enabled="true" level="ERROR" enabled_by_default="true" />
-      <inspection_tool class="SubjectLimit" enabled="true" level="ERROR" enabled_by_default="true" />
+      <inspection_tool class="SubjectLimit" enabled="true" level="WARNING" enabled_by_default="true" />
    </profile>
  </component>
+  <component name="GitSharedSettings">
+    <option name="FORCE_PUSH_PROHIBITED_PATTERNS">
+      <list>
+        <option value="master main" />
+      </list>
+    </option>
+  </component>
  <component name="VcsDirectoryMappings">
-    <mapping directory="$PROJECT_DIR$" vcs="Git" />
+    <mapping directory="" vcs="Git" />
  </component>
 </project>
--- a/.idea/GitCommitMessageStorage.xml
+++ b/.idea/GitCommitMessageStorage.xml
@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="GitCommitMessageStorage">
+    <option name="messageStorage">
+      <MessageStorage />
+    </option>
+  </component>
+</project>
--- a/.idea/git_toolbox_blame.xml
+++ b/.idea/git_toolbox_blame.xml
@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="GitToolBoxBlameSettings">
+    <option name="version" value="2" />
+  </component>
+</project>
--- a/.idea/git_toolbox_prj.xml
+++ b/.idea/git_toolbox_prj.xml
@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="GitToolBoxProjectSettings">
+    <option name="commitMessageIssueKeyValidationOverride">
+      <BoolValueOverride>
+        <option name="enabled" value="true" />
+      </BoolValueOverride>
+    </option>
+    <option name="commitMessageValidationEnabledOverride">
+      <BoolValueOverride>
+        <option name="enabled" value="true" />
+      </BoolValueOverride>
+    </option>
+  </component>
+</project>
--- a/.idea/indexLayout.xml
+++ b/.idea/indexLayout.xml
@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="UserContentModel">
+    <attachedFolders />
+    <explicitIncludes />
+    <explicitExcludes />
+  </component>
+</project>
--- a/.idea/projectSettingsUpdater.xml
+++ b/.idea/projectSettingsUpdater.xml
@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="RiderProjectSettingsUpdater">
+    <option name="vcsConfiguration" value="3" />
+  </component>
+</project>
--- a/.idea/vcs.xml
+++ b/.idea/vcs.xml
@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="CommitMessageInspectionProfile">
+    <profile version="1.0">
+      <inspection_tool class="BodyLimit" enabled="true" level="ERROR" enabled_by_default="true" />
+      <inspection_tool class="SubjectBodySeparation" enabled="true" level="ERROR" enabled_by_default="true" />
+      <inspection_tool class="SubjectLimit" enabled="true" level="WARNING" enabled_by_default="true">
+        <option name="RIGHT_MARGIN" value="50" />
+      </inspection_tool>
+    </profile>
+  </component>
+  <component name="VcsDirectoryMappings">
+    <mapping directory="$PROJECT_DIR$" vcs="Git" />
+  </component>
+</project>
--- a/.run/build_Dockerfile.run.xml
+++ b/.run/build_Dockerfile.run.xml
@ -0,0 +1,30 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="build/Dockerfile" type="docker-deploy" factoryName="dockerfile" server-name="Docker (WSL)">
+    <deployment type="dockerfile">
+      <settings>
+        <option name="imageTag" value="docker.asifbacchus.dev/nginx/ab-nginx:5.2.1-1.27" />
+        <option name="buildArgs">
+          <list>
+            <DockerEnvVarImpl>
+              <option name="name" value="BUILD_DATE" />
+              <option name="value" value="2024-08-31" />
+            </DockerEnvVarImpl>
+            <DockerEnvVarImpl>
+              <option name="name" value="GIT_COMMIT" />
+              <option name="value" value="9104126356" />
+            </DockerEnvVarImpl>
+            <DockerEnvVarImpl>
+              <option name="name" value="INTERNAL_VERSION" />
+              <option name="value" value="5.2.1" />
+            </DockerEnvVarImpl>
+          </list>
+        </option>
+        <option name="buildOnly" value="true" />
+        <option name="containerName" value="" />
+        <option name="sourceFilePath" value="build/Dockerfile" />
+      </settings>
+    </deployment>
+    <EXTENSION ID="com.jetbrains.rider.docker.debug" isFastModeEnabled="true" isSslEnabled="false" />
+    <method v="2" />
+  </configuration>
+</component>
--- a/.vscode/numbered-bookmarks.json
+++ b/.vscode/numbered-bookmarks.json
@ -1,3 +0,0 @@
-{
-	"bookmarks": []
-}
--- a/51
+++ b/51
@ -0,0 +1,51 @@
+MIT License
+
+Copyright (c) 2021 Asif Bacchus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+NOTWITHSTANDING THE ABOVE, this Software contains software provided by NGINX
+and its contributors which is subject to the following BSD license:
+
+Copyright (C) 2002-2021 Igor Sysoev
+Copyright (C) 2011-2021 Nginx, Inc.
+All rights reserved.
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the distribution.
+THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGE.
+
+Any licensing or other inquires should be directed to Asif Bacchus via
+email at 'asif@asifbacchus.dev' or by filing issues on this Software's git
+repository at 'https://git.asifbacchus.dev/ab-docker/ab-nginx.git'.
--- a/README.md
+++ b/README.md
@ -1,63 +1,93 @@
 # ab-nginx

-Containerized fully-functional implementation of NGINX running on Alpine **as a fully NON-ROOT user**. The container by default is a 'blank slate' that just serves files out of the box. Changing configuration, server blocks and content is accomplished with bind-mounts using a sensible, simple directory structure. The container auto-detects mounted certificates and switches to TLS automatically. [Helper scripts](https://git.asifbacchus.dev/ab-docker/ab-nginx/releases) in the git repo make certificate mounting easier, allow for custom docker networks and more. The container by default can be used as a Let’s Encrypt endpoint with tools like certbot.
+Containerized fully-functional implementation of NGINX running on Alpine **as a fully NON-ROOT user**. The container by default is a 'blank slate' that just serves files out of the box. Changing configuration, server blocks and content is accomplished with bind-mounts using a sensible, simple directory structure. The container auto-detects mounted certificates and switches to TLS automatically. Available [Helper scripts](https://asifbacchus.dev/public/docker/nginx/ab-nginx/) make certificate mounting easier, allow for custom docker networks and more. The container by default can be used as a Let’s Encrypt endpoint with tools like certbot.
+
+**Version 5.x adds the following features:**
+
+- container auto-generates missing Diffie-Hellman Parameters (‘dhparams’) when using TLSv1.2
+- included a script within the container to generate self-signed certificates with a *group* readable private key so they can be shared between services in a stack by aligning container and host GIDs
+- helper scripts have been moved out of the ‘releases’ and hosted separately as straight-downloads so there is no need to clone the entire repo -- located at:  [https://asifbacchus.dev/public/docker/nginx/ab-nginx/](https://asifbacchus.dev/public/docker/nginx/ab-nginx/)

 ## Contents

-[Alternate repository](#alternate-repository)<br>
-[Documentation and scripts](#documentation-and-scripts)<br>
-[Permissions](#permissions)<br>
-[Container layout](#container-layout)<br>
-	[Content directory](#content-directory)<br>
-	[Configuration directory](#configuration-directory)<br>
-[Quick-start](#quick-start)<br>
-	[Mounting content](#mounting-content)<br>
-	[Mounting configurations](#mounting-configurations)<br>
-	[Mounting server-blocks](#mounting-server-blocks)<br>
-[TLS](#tls)<br>
-[Environment variables](#environment-variables)<br>
-[Shell mode](#shell-mode)<br>
-	[Drop to shell before NGINX loads](#drop-to-shell-before-nginx-loads)<br>
-	[Enter a running container](#enter-a-running-container)<br>
-[Logs](#logs)<br>
-[Final thoughts](#final-thoughts)
+<!-- toc -->
+
+- [Alternate repository](#alternate-repository)
+- [Signed containers](#signed-containers)
+- [Documentation and scripts](#documentation-and-scripts)
+- [Permissions](#permissions)
+  * [Option 1: rebuild container with different UID/GID](#option-1-rebuild-container-with-different-uidgid)
+  * [Option 2: specify UID/GID at runtime](#option-2-specify-uidgid-at-runtime)
+- [Container layout](#container-layout)
+  * [Content directory](#content-directory)
+  * [Configuration directory](#configuration-directory)
+- [Quick-start](#quick-start)
+  * [Mounting content](#mounting-content)
+  * [Mounting configurations](#mounting-configurations)
+  * [Mounting server-blocks](#mounting-server-blocks)
+- [TLS](#tls)
+  * [Generate a self-signed certificate](#generate-a-self-signed-certificate)
+- [Environment variables](#environment-variables)
+- [Shell mode](#shell-mode)
+  * [Drop to shell before NGINX loads](#drop-to-shell-before-nginx-loads)
+  * [Enter a running container](#enter-a-running-container)
+- [Logs](#logs)
+- [Final thoughts](#final-thoughts)
+
+<!-- tocstop -->

 ## Alternate repository

-Throughout this document, I reference my repository on DockerHub (`asifbacchus/ab-nginx:tag`). You may also feel free to pull directly from my private registry instead, especially if you need signed containers. Simply use `docker.asifbacchus.dev/nginx/ab-nginx:tag`. I usually sign major dot-version releases (1.18, 1.19, etc.) as well as the 'latest' image.
+Throughout this document, I reference my repository on DockerHub (`asifbacchus/ab-nginx:tag`). You may also feel free to pull directly from my private registry instead which is guaranteed to have the most up-to-date releases. Simply use `docker.asifbacchus.dev/nginx/ab-nginx:tag`.
+
+## Signed containers
+
+Starting with the 5.x releases, I am no longer using Docker Notary to sign images. Instead, I’m using [CodeNotary](https://codenotary.io). This has several advantages, most notably that it doesn’t matter whether you use DockerHub or my private repo they will both have the same verifiable signature. To verify the signature, you would have to use CodeNotary’s vcn tool -- visit their site for the most up-to-date instructions.

 ## Documentation and scripts

-Check out the [repo wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki) for detailed examples and documentation about the container and the [helper scripts](https://git.asifbacchus.dev/ab-docker/ab-nginx/releases) which are located [here](https://git.asifbacchus.dev/ab-docker/ab-nginx/releases).
+Check out the [repo wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki) for detailed examples and documentation about the container and the [helper scripts](https://asifbacchus.dev/public/docker/nginx/ab-nginx/).

 ## Permissions

-The container does **NOT** run under the root account. It runs under a user named *www-docker* with a UID of 8080. **This means any files you mount into the container need to be readable (and/or writable depending on your use-case) by UID 8080**. This does not mean just content files, it also includes configurations, server-blocks and *certificates*! Before mounting your files, ensure this is the case. There are more detailed instructions in the [wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki) if you need help setting file permissions.
+The container does **NOT** run under the root account. It runs under a user named *www-docker* with a UID and GID of 8080. **This means any files you mount into the container need to be readable (and/or writable depending on your use-case) by UID 8080 or GID 8080**. This does not just mean content files, it also includes configurations, server-blocks and *certificates*! Before mounting your files, ensure this is the case. There are more detailed instructions in the [wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki) if you need help setting file permissions.

-This is a significant change versus most other NGINX implementations/containers where the main process is run as root
-and the *worker processes* run as a limited user. In those cases, permissions don’t matter since NGINX can always use
-the root account to read any files (and especially certificates!) it needs. Please understand this difference.
+This is a significant change versus most other NGINX implementations/containers where the main process is run as root and the *worker processes* run as a limited user. In those cases, permissions don’t matter since NGINX can always use the root account to read any files (and especially certificates!) it needs. Please understand this difference.

-If you need to change the UID, then you’ll need to rebuild the container using
-the [Dockerfile in the git repo](https://git.asifbacchus.dev/ab-docker/ab-nginx). The process would be something like
-this:
+Most often you will end up wanting to change the container user’s GID so that you can assign it and related services appropriate permissions. To do this, you have two options:
+
+### Option 1: rebuild container with different UID/GID
+
+If you are integrating this container as part of a stack, then it might just make sense to “hard-code” the UID and/or GID to whatever works best for your environment. Fortunately, that’s pretty easy. Clone the [git repo](https://git.asifbacchus.dev/ab-docker/ab-nginx) and rebuild the container:

 ```bash
 # clone the repo
+cd /usr/local/src
 git clone https://git.asifbacchus.dev/ab-docker/ab-nginx

-# change to the proper directory and build the container
+# change directory and build
 cd ab-nginx/build
-docker build --build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ') --build-arg UID=xxxx -t name:tag .
+docker build --build-arg UID=xxxx --build-arg GID=yyyy --build-arg BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ') -t name:tag .
 ```

-Of course, replace *xxxx* with your desired UID for the *www-docker* user. Also, replace *name:tag* with whatever you want to tag your image.
+- `UID=xxxx`: optional -- replace ‘xxxx’ with desired UID for www-docker user, in most cases the default is fine
+- `GID=yyyy`: replace ‘yyyy’ with desired GID for www-docker user --> this is probably what you want to change
+- `BUILD_DATE`: optional -- applies container build date in a standardized label
+- `name:tag`: you may, of course, name and tag your container anything you like
+
+### Option 2: specify UID/GID at runtime
+
+You may find it easier and more flexible to just specify the UID and/or GID at runtime. Again, you most likely want to set the GID so that it matches, say, your webdev user group and the container can then read and serve those files. Pretty easy, just add `--user "uid:gid"` to your docker run command. Here’s an example where the GID is changed to 6000:
+
+```bash
+docker run -d ... --user "8080:6000" ... asifbacchus/ab-nginx:latest
+```

 ## Container layout

 ### Content directory

-All content is served from the NGINX default `/usr/share/nginx/html` directory within the container. The default set up serves everything found here and in all child directories. To use your own content (this point of this whole thing, right? :wink:) bind-mount your content to the container’s webroot: `-v /my/webstuff:/usr/share/nginx/html`. **Remember that UID 8080 must be able to read these files!**
+All content is served from the NGINX default `/usr/share/nginx/html` directory within the container. The default set up serves everything found here and in all child directories. Bind-mount your content to the container’s webroot: `-v /my/webstuff:/usr/share/nginx/html`. **Remember that the container UID or GID must be able to read these files!**

 ### Configuration directory

@ -82,11 +112,11 @@ ### Configuration directory
 ├── ssl_certs.conf – (hard-coded for the container, best not to touch)
 ```

-Locations with \**starred descriptions** are designed to be overwritten via bind-mounts to customize the container. For more details on all of these files and what they do, please refer to the [repo wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki). **Remember that UID 8080 needs to be able to read any files you choose to bind-mount over the container defaults!**
+Locations with \**starred descriptions** are designed to be overwritten via bind-mounts to customize the container. For more details on all of these files and what they do, please refer to the [repo wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki). **Remember that the container UID or GID needs to be able to read any files you choose to bind-mount over the container defaults!**

 ## Quick-start

-At it’s most basic, all you need to do is mount a directory with content to serve. For more advanced deployments, you can also mount various configurations. In most cases, you’ll also want to mount certificates so that SSL/TLS is an option. **Remember that UID 8080 must be able to read everything you bind-mount!** Let’s run through some examples:
+At its most basic, all you need to do is mount a directory with content to serve. For more advanced deployments, you can also mount various configurations. In most cases, you’ll also want to mount certificates so that SSL/TLS is an option. **Remember that the container’s UID/GID must be able to read everything you bind-mount!** Let’s run through some examples:

 ### Mounting content

@ -157,12 +187,12 @@ ## TLS
 | Full-chain certificate<br />(certificate concatenated with intermediates and root CA) | /certs/fullchain.pem |
 | Private key                                                  | /certs/privkey.pem   |
 | Certificate chain<br />(intermediates concatenated with root CA) | /certs/chain.pem     |
-| DH Parameters file<br />(NOT required for TLS 1.3-only mode) | /certs/dhparam.pem   |
+| DH Parameters file<br />(Container will generate this file if not provided)<br />(NOT required for TLS 1.3-only mode) | /certs/dhparam.pem   |

 Once those files are available, you can run the container as follows:

 ```bash
-# TLS 1.2 (requires: fullchain.pem, privkey.pem, chain.pem and dhparam.pem)
+# TLS 1.2 (allows TLSv1.2 and TLSv1.3)
 docker run -d --name nginx --restart unless-stopped \
  -p 80:80 \
  -p 443:443 \
@ -171,7 +201,7 @@ # TLS 1.2 (requires: fullchain.pem, privkey.pem, chain.pem and dhparam.pem)
  -e SERVER_NAMES="domain.tld www.domain.tld" \
  asifbacchus/ab-nginx:latest

-# TLS 1.3 only mode (requires fullchain.pem, privkey.pem and chain.pem)
+# TLS 1.3 only mode
 docker run -d --name nginx --restart unless-stopped \
  -p 80:80 \
  -p 443:443 \
@ -184,11 +214,25 @@ # TLS 1.3 only mode (requires fullchain.pem, privkey.pem and chain.pem)

 The container will load a secure configuration automatically, require SSL connections and redirect HTTP to HTTPS. If you want to enforce HSTS, simply set the HSTS environment variable to true by adding `-e HSTS=TRUE` before specifying the container name. Careful about doing this while testing though! Also, certificates should always be mounted read-only (`:ro`) for security reasons!

-You may have noticed I also specified the `SERVER_NAMES` variable. This is necessary or SSL will not work since the hostname the server responds to must match the certificate being presented. **Make sure you set this environment variable to match your certificates!** N.B. If you are using your own server-blocks, then this environment variable is **NOT** required – it is only used by the container when auto-configuring the default server-blocks.
+You may have noticed I also specified the `SERVER_NAMES` variable. This is necessary or SSL will not work since the hostname the server responds to must match the certificate being presented. **Make sure you set this environment variable to match your certificates!** 
+
+> N.B. If you are using your own server-blocks, then this environment variable is **NOT** required – it is only used by the container when auto-configuring the default server-blocks.

 If you want to integrate with Let's Encrypt, please refer to the [wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki).

-Finally, I’d remind you once again that UID 8080 must be able to read your certificate files! It is common practice to restrict the private key to root readability only (i.e. chown root:root & chmod 600/400) but, that would stop the NGINX user in the container from reading it and NGINX will exit with an error. I address ways to allow your certificate files to remain secure but still readable by the NGINX user in the [wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki).
+Finally, I’d remind you once again that the container’s UID/GID must be able to read your certificate files! It is common practice to restrict the private key to root readability only (i.e. chown root:root & chmod 600/400) but, that would stop the NGINX user in the container from reading it and NGINX will exit with an error. I address ways to allow your certificate files to remain secure but still readable by the NGINX user in the [wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki). As a quick hint, it’s easiest to accomplish by changing the container GID!
+
+### Generate a self-signed certificate
+
+If you are testing a set-up or for whatever other reason want to use a self-signed certificate, the container can generate one for you. To make integration easier, the container does a trick with the *private key* by generating it with 6**4**0 permissions instead of 600 permissions. This means any member of the same group as the container can use this generated certificate-key pair. However, to make this work, you need to ensure the GID is set properly as mentioned in the [specify UID/GID at runtime](#option-2-specify-uidgid-at-runtime) section above. I’ll use GID=6000 in the following example.
+
+To generate a certificate, invoke the container with the `generate-cert hostname` parameter. Let’s use server.example.com:
+
+```bash
+docker run --rm -v /mycerts:/certs asifbacchus/ab-nginx generate-cert server.example.com
+```
+
+In this example, your self-signed certificate (*fullchain.pem*), private key (*privkey.pem*) and certification chain/bundle (*chain.pem*) will be saved, group-readable, in your */mycerts/* directory on the host. Remember to import the certificate on any clients or you will get warnings!

 ## Environment variables

@ -210,14 +254,14 @@ ## Shell mode

 ### Drop to shell before NGINX loads

-This is useful to verify where things mounted, etc. This is also useful if some configuration is causing NGINX to panic and shutting down the container. Note that I’m using the `--rm` flag to auto-remove the container when I exit since there is no point in keeping a shell-mode instantiation around.
+This is useful to verify where things mounted, etc. This is also useful if some configuration is causing NGINX to panic and shut down the container. Note that I’m using the `--rm` flag to auto-remove the container when I exit since there is no point in keeping a shell-mode instantiation around.

 ```bash
 docker run -it --rm \
  -v ~/web:/usr/share/nginx/html \
  -v ~/nginx/config:/etc/nginx/config \
  -v ~/nginx/servers:/etc/nginx/sites \
-  -v ~/certs:/certs \
+  -v ~/certs:/certs:ro \
  asifbacchus/ab-nginx /bin/sh
 ```

@ -248,7 +292,7 @@ # show last 10 lines and follow from there in realtime (ctrl-c to stop)

 ## Final thoughts

-I think that's everything to get you going if you are already familiar with docker and with NGINX in general. If you need more help, please [refer to the wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki). I've explained everything there in detail. Also, check out the [helper scripts](https://git.asifbacchus.dev/ab-docker/ab-nginx/releases) especially if you are deploying certificates. The scripts take care of all the docker command-lines for you so you have much less typing!
+I think that's everything to get you going if you are already familiar with docker and with NGINX in general. If you need more help, please [refer to the wiki](https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki). I've explained everything there in detail. Also, check out the [helper scripts](https://asifbacchus.dev/public/docker/nginx/ab-nginx/) especially if you are deploying certificates. The scripts take care of all the docker command-lines for you so you have much less typing!

 If I've forgotten anything, you find any bugs or you have suggestions, please file an issue either on my private [git server](https://git.asifbacchus.dev/ab-docker/ab-nginx) or on [github](https://github.com/asifbacchus/ab-nginx). Also, I am *not* affiliated with NGINX in any way, so please **do not** bother them with any issues you find with this container. Bother me instead, I actually enjoy it!

--- a/build/Dockerfile
+++ b/build/Dockerfile
@ -1,8 +1,8 @@
 #
-# build AB-NGINX container (based on NGINX mainline)
+# build AB-NGINX container (based on NGINX mainline on Alpine linux)
 #

-ARG NGINX_VERSION=1.21.1
+ARG NGINX_VERSION=1.27
 FROM nginx:${NGINX_VERSION}-alpine
 ARG NGINX_VERSION

@ -21,10 +21,14 @@ RUN addgroup --gid ${GID} www-docker \
        --uid ${UID} \
        www-docker

-# add libcap, allow nginx to bind to ports <1024, extract fun error pages & create LetsEncrypt challenge directory outside webroot
+# add libcap and allow nginx to bind to ports <1024;
+# extract fun error pages;
+# create /certs directory for auto-generation;
+# create LetsEncrypt challenge directory outside webroot
 RUN apk --update --no-cache add \
    libcap \
    openssl \
+    && apk --update --no-cache upgrade \
    && setcap 'cap_net_bind_service=+ep' /usr/sbin/nginx \
    && cd /usr/share/nginx \
    && rm -rf html/* \
@ -34,6 +38,7 @@ RUN apk --update --no-cache add \
    && rm -rf /tmp/* \
    && rm -rf /docker-entrypoint.d \
    && rm -f /docker-entrypoint.sh \
+    && mkdir /certs \
    && mkdir /usr/share/nginx/letsencrypt

 # health check
@ -45,9 +50,10 @@ HEALTHCHECK \
    CMD curl --fail http://127.0.0.1:9000/nginx_status || exit 1

 # standardized labels
-MAINTAINER Asif Bacchus <asif@bacchus.cloud>
-LABEL maintainer="Asif Bacchus <asif@bacchus.cloud>"
-LABEL org.opencontainers.image.author="Asif Bacchus <asif@bacchus.cloud>"
+MAINTAINER Asif Bacchus <asif@asifbacchus.dev>
+LABEL maintainer="Asif Bacchus <asif@asifbacchus.dev>"
+LABEL dev.asifbacchus.docker.internalName="ab-nginx"
+LABEL org.opencontainers.image.author="Asif Bacchus <asif@asifbacchus.dev>"
 LABEL org.opencontainers.image.url="https://git.asifbacchus.dev/ab-docker/ab-nginx"
 LABEL org.opencontainers.image.documentation="https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki"
 LABEL org.opencontainers.image.source="https://git.asifbacchus.dev/ab-docker/ab-nginx.git"
@ -75,6 +81,8 @@ RUN chown -R www-docker:www-docker /usr/share/nginx \
    && find /etc/nginx -type f -exec chmod 640 {} \; \
    && chown www-docker:www-docker /var/cache/nginx \
    && chown www-docker:www-docker /var/log/nginx \
+    && chown www-docker:www-docker /certs \
+    && chmod 700 /certs \
    && chmod 644 /etc/selfsigned.cnf \
    && chmod 755 /usr/local/bin/generate-cert /usr/local/bin/entrypoint.sh
 USER www-docker
@ -102,7 +110,7 @@ ARG GIT_COMMIT
 ARG INTERNAL_VERSION
 LABEL org.opencontainers.image.revision=${GIT_COMMIT}
 LABEL org.opencontainers.image.version=${NGINX_VERSION}
-LABEL app.asifbacchus.docker.internalVersion=${INTERNAL_VERSION}-${NGINX_VERSION}
+LABEL dev.asifbacchus.docker.internalVersion=${INTERNAL_VERSION}-${NGINX_VERSION}
 LABEL org.opencontainers.image.created=${BUILD_DATE}

 #EOF
--- a/build/generate-cert.sh
+++ b/build/generate-cert.sh
--- a/devUtils/generateHelperChecksums.sh
+++ b/devUtils/generateHelperChecksums.sh
@ -0,0 +1,29 @@
+#!/bin/sh
+
+#
+# generate checksums from provided path suitable for use by 'update.sh'
+#
+
+# check for missing path to helper files, otherwise strip trailing slash
+if [ -z "$1" ]; then
+    printf "\nPlease supply path to helper files. Exiting.\n\n"
+    exit 1
+fi
+srcDir="${1%/}"
+
+# verify path exists and is accessible
+if ! [ -d "$srcDir" ]; then
+    printf "\nUnable to find or read supplied path to helper files. Exiting.\n\n"
+    exit 1
+fi
+
+# generate checksum file
+\rm -f "${srcDir}/checksums.sha256"
+find "${srcDir}/" -type f -exec sha256sum {} + >>./checksums.sha256
+sed -i "s+$srcDir/++g" ./checksums.sha256
+\mv ./checksums.sha256 "${srcDir}/"
+
+# exit gracefully
+exit 0
+
+#EOF
--- a/helpers/ab-nginx.params.template
+++ b/helpers/ab-nginx.params.template
@ -6,6 +6,23 @@
 ###


+#
+# Container options
+#
+
+# Specify a particular tag to 'version pin' the ab-nginx container.
+TAG=latest
+
+# Specify a runtime UID and GID for the container user. This is useful to
+# ensure the container can read and/or write to locations on the host or
+# has access to files shared between members of a container stack.
+# REQUIRED: NO
+# DEFAULT: NGINX_UID=8080, NGINX_GID=8080
+# VALID OPTIONS: any permissible and available UID/GID value
+NGINX_UID=8080
+NGINX_GID=8080
+
+
 #
 # Network options
 #
@ -16,7 +33,7 @@
 # REQUIRED: NO
 # DEFAULT: nginx_network
 # VALID OPTIONS: network names acceptable to the docker engine
-#NETWORK=nginx_network
+NETWORK=nginx_network

 # If you want to specify a particular IP subnet for the network to be created
 # as per the above variable, specify it here.  Again, if you don't know what
@ -24,7 +41,7 @@
 # REQUIRED: NO
 # DEFAULT: '172.31.254.0/24'
 # VALID OPTIONS: subnet in CIDR format
-#SUBNET='172.31.254.0/24'
+SUBNET='172.31.254.0/24'


 #
@ -38,7 +55,7 @@
 # REQUIRED: NO
 # DEFAULT: Etc/UTC
 # VALID OPTIONS: IANA time zones in TZ format
-#TZ=Etc/UTC
+TZ=Etc/UTC


 #
@ -55,7 +72,8 @@
 #
 # REQUIRED: YES, if using SSL and default server-blocks
 # DEFAULT: "_"
-#HOSTNAMES="domain.tld www.domain.tld server.domain.tld alt.domain.tld"
+# EXAMPLE: HOSTNAMES="domain.tld www.domain.tld server.domain.tld alt.domain.tld"
+HOSTNAMES="_"

 # Ports to listen on:
 # If you need to use ports other than HTTP=80 and HTTPS=443, remember to set up
@ -65,8 +83,8 @@
 # you use here.
 # REQUIRED: NO
 # DEFAULTS: 80 and 443, respectively
-#HTTP_PORT=80
-#HTTPS_PORT=443
+HTTP_PORT=80
+HTTPS_PORT=443

 # Access logging (global preference):
 # Unless overridden in a server/location block, access logging will be handled
@ -74,7 +92,7 @@
 # REQUIRED: NO
 # DEFAULT: OFF
 # VALID OPTIONS: 'ON' or 'OFF'
-#ACCESS_LOG=OFF
+ACCESS_LOG=OFF


 #
@ -89,7 +107,7 @@
 # Only files with a ".conf" extension will be loaded!  If you want to disable a
 # file, simply change its extension (i.e. '.conf.disabled').
 #
-# REMEMBER: Your configuration files must be readable by UID 8080!
+# REMEMBER: Your configuration files must be readable by the container UID/GID!
 CONFIG_DIR=$(pwd)/config

 # Specify a directory containing your NGINX server-block configurations (if any)
@ -103,7 +121,7 @@ CONFIG_DIR=$(pwd)/config
 # Only files with a ".conf" extension will be loaded!  If you want to disable a
 #   file, simply change its extension (i.e. '.conf.disabled').
 #
-# REMEMBER: Your server-block files must be readable by UID 8080!
+# REMEMBER: Your server-block files must be readable by the container UID/GID!
 SERVERS_DIR=$(pwd)/sites

 # Specify a directory containing 'snippets' of NGINX code you want/need to
@ -114,11 +132,11 @@ SERVERS_DIR=$(pwd)/sites
 # instead of having to type the same thing many times.

 # This is totally optional! Comment this variable to disable it.
-# REMEMBER: Your snippets must be readable by UID 8080!
+# REMEMBER: Your snippets must be readable by the container UID/GID!
 SNIPPETS_DIR=$(pwd)/snippets

 # Specify a directory with the content you want to serve.
-# REMEMBER: This directory must be readable by UID 8080!
+# REMEMBER: This directory must be readable by the container UID/GID!
 WEBROOT_DIR=/var/www


@ -131,26 +149,27 @@ WEBROOT_DIR=/var/www
 # REQUIRED: NO
 # DEFAULT: FALSE
 # VALID OPTIONS: 'TRUE', 'FALSE'
-#HSTS=FALSE
+HSTS=FALSE

 # TLS 1.3 mode:
 #   If 'FALSE' (default), NGINX will accept both TLS 1.2 and 1.3 connections.
 #   If 'TRUE', only TLS 1.3 connections will be accepted.
-#TLS13_ONLY=FALSE
+TLS13_ONLY=FALSE


 #
 # Certificate files
 #
 # If you are mounting symlinks you MUST specify the full path of the symlink so
-# the target is resolved! DH (Diffie-Hellman Parameters file) is only required
-# if using TLS 1.2.
+# the target is resolved!
 #
-# REMEMBER: ALL files must be readble by UID 8080!
+# REMEMBER: ALL files must be readable by container UID/GID!
+# EXAMPLES:
 #    SSL_CERT=/path/to/your/ssl-certificate/fullchain.pem
 #    SSL_KEY=/path/to/your/ssl-private-key/privkey.pem
 #    SSL_CHAIN=/path/to/your/ssl-certificate-chain/chain.pem
-#DH=/path/to/your/diffie-hellman-parameters-file/dhparam.pem
-
+SSL_CERT=""
+SSL_KEY=""
+SSL_CHAIN=""

 #EOF
--- a/helpers/ab-nginx.sh
+++ b/helpers/ab-nginx.sh
@ -4,6 +4,7 @@
 # start ab-nginx container using params file variables
 #

+#
 # text formatting presets
 if command -v tput >/dev/null; then
    cyan=$(tput bold)$(tput setaf 6)
@ -21,57 +22,82 @@ else
    width=80
 fi

-### parameter defaults
-shell=false
+#
+# parameter defaults
+doShell=false
+doStatus=false
+doStop=false
+removeStopped=false
 container_name="ab-nginx"
 NETWORK='nginx_network'
 SUBNET='172.31.254.0/24'
 HTTP_PORT=80
 HTTPS_PORT=443
-unset CONFIG_DIR
-unset SERVERS_DIR
-unset WEBROOT_DIR
-unset vmount
-
-### functions
+CONFIG_DIR=""
+SERVERS_DIR=""
+WEBROOT_DIR=""
+volumeMounts=""
+stopErr=0
+removeErr=0

+#
+# functions
 checkExist() {
    if [ "$1" = 'file' ]; then
        if [ ! -f "$2" ]; then
            printf "%s\nCannot find file: '$2'. Exiting.\n%s" "$err" "$norm"
-      exit 3
+            exit 1
        fi
    elif [ "$1" = 'dir' ]; then
        if [ ! -d "$2" ]; then
            printf "%s\nCannot find directory: '$2'. Exiting.\n$%s" "$err" "$norm"
-      exit 3
+            exit 1
        fi
    fi
    return 0
 }

 scriptHelp() {
-  printf "\n%s%1000s\n" "$magenta" | tr " " "-" | cut -c -$width
-  printf "%s" "$norm"
-  textblock "This is a simple helper script so you can avoid typing lengthy commands when working with the ab-nginx container."
-  textblock "The script reads the contents of 'ab-nginx.params' and constructs various 'docker run' commands based on that file. The biggest time-saver is working with certificates. If they are specified in the params file, the script will automatically bind-mount them so nginx serves content via SSL by default."
+    # header and description
+    printf "\n%s" "$magenta"
+    printf '%.0s-' $(seq "$width")
+    printf "\n%s" "$norm"
+    textBlock "This is a simple helper script so you can avoid typing lengthy commands when working with the ab-nginx container."
+    textBlock "The script reads the contents of 'ab-nginx.params' and constructs various 'docker run' commands based on that file. The biggest time-saver is working with certificates. If they are specified in the params file, the script will automatically bind-mount them so nginx serves content via SSL by default."
    newline
-  textblock "If you run the script with no parameters, it will execute the container 'normally': Run in detached mode with nginx automatically launched. If you specified certificates, nginx will serve over SSL by default."
-  textblock "Note: Containers (except shell) are always set to restart 'unless-stopped'. You must remove them manually if desired."
+
+    # explanatory text
+    textBlock "If you run the script with no parameters, it will execute the container 'normally': Run in detached mode with nginx automatically launched. If you specified certificates, nginx will serve over SSL by default."
+    textBlock "Note: Containers (except shell) are always set to restart 'unless-stopped'. You must remove them manually if desired."
    printf "%s" "$magenta"
    newline
-  textblock "The script has the following (optional) parameters:"
-  textblockParam 'parameter in cyan' 'default in yellow'
+
+    # parameters
+    textBlock "The script has the following (optional) parameters:"
+    textBlockParam 'parameter in cyan' 'default in yellow'
    newline
-  textblockParam '-n|--name' 'ab-nginx'
-  textblock "Change the name of the container. This is cosmetic and does not affect operation in any way."
+    textBlockParam '-n|--name' 'ab-nginx'
+    textBlock "Set the name of the container, otherwise the default will be used."
+    newline
+    textBlockParam '-s|--shell' 'off: run in detached mode'
+    textBlock "Enter the container using an interactive ASH/BusyBox shell. This happens after startup operations but *before* nginx is actually started. This is a great way to see configuration changes possibly stopping nginx from starting normally."
+    newline
+    textBlockParam '--status'
+    textBlock "Run a search for all AB-NGINX containers and display their name and status."
+    newline
+    textBlockParam '--stop'
+    textBlock "Stops the container specified by the '--name' parameter or with the default name 'ab-nginx'."
+    newline
+    textBlockParam '--remove | --stop-remove'
+    textBlock "Stops and removes the container specified by the '--name' parameter or with the default name 'ab-nginx'."
+
+    # footer
    newline
-  textblockParam '-s|--shell' 'off: run in detached mode'
-  textblock "Enter the container using an interactive POSIX shell. This happens after startup operations but *before* nginx is actually started. This is a great way to see configuration changes possibly stopping nginx from starting normally."
    printf "%s" "$yellow"
-  newline
-  textblock "More information can be found at: https://git.asifbacchus.app/ab-docker/ab-nginx/wiki"
-  printf "%s%1000s\n" "$magenta" | tr " " "-" | cut -c -$width
+    textBlock "More information can be found at: https://git.asifbacchus.dev/ab-docker/ab-nginx/wiki"
+    printf "\n%s" "$magenta"
+    printf '%.0s-' $(seq "$width")
+    printf "\n%s" "$norm"
    exit 0
 }

@ -79,11 +105,11 @@ newline() {
    printf "\n"
 }

-textblock() {
+textBlock() {
    printf "%s\n" "$1" | fold -w "$width" -s
 }

-textblockParam() {
+textBlockParam() {
    if [ -z "$2" ]; then
        # no default
        printf "%s%s%s\n" "$cyan" "$1" "$norm"
@ -93,7 +119,8 @@ textblockParam() {
    fi
 }

-### pre-requisite checks
+#
+# pre-requisite checks

 # is docker installed?
 if ! command -v docker >/dev/null; then
@ -105,14 +132,106 @@ fi
 if [ ! "$(id -u)" -eq 0 ]; then
    if ! id -Gn | grep docker >/dev/null; then
        printf "%s\nYou must either be root or in the 'docker' group to run this script since you must be able to actually start the container! Exiting.\n$%s" "$err" "$norm"
-    exit 2
+        exit 3
    fi
 fi

+#
+# process startup parameters
+while [ $# -gt 0 ]; do
+    case "$1" in
+    -h | -\? | --help)
+        # display help
+        scriptHelp
+        exit 0
+        ;;
+    -s | --shell)
+        # start shell instead of default CMD
+        doShell=true
+        ;;
+    -n | --name)
+        # container name
+        if [ -z "$2" ]; then
+            printf "%s\nNo container name specified. Exiting.\n%s" "$err" "$norm"
+            exit 1
+        fi
+        container_name="$2"
+        shift
+        ;;
+    --status)
+        # find containers and check their status
+        doStatus=true
+        ;;
+    --stop)
+        # stop named container
+        doStop=true
+        ;;
+    --remove | --stop-remove)
+        # stop and remove named container
+        doStop=true
+        removeStopped=true
+        ;;
+    *)
+        printf "%s\nUnknown option: %s\n" "$err" "$1"
+        printf "Use '--help' for valid options.\n\n%s" "$norm"
+        exit 1
+        ;;
+    esac
+    shift
+done
+
+#
+# status check
+if [ "$doStatus" = "true" ]; then
+    printf "\nFound the following AB-NGINX containers:\n"
+    docker ps -a --filter "label=dev.asifbacchus.docker.internalName=ab-nginx"
+    printf "\n"
+    exit 0
+fi
+
+#
+# stop container
+if [ "$doStop" = "true" ]; then
+    printf "\nStopping container '%s'... " "$container_name"
+
+    # ensure container exists
+    if ! docker inspect "$container_name" >/dev/null 2>&1; then
+        printf "[ERROR]: No container with that name found.\n\n"
+        exit 11
+    fi
+
+    # stop and/or remove container
+    if ! docker stop "$container_name" >/dev/null 2>&1; then stopErr=1; fi
+    if [ "$removeStopped" = "true" ] && [ "$stopErr" -eq 0 ]; then
+        if ! docker rm "$container_name" >/dev/null 2>&1; then removeErr=1; fi
+    fi
+
+    # update status message
+    if [ "$stopErr" -eq 1 ]; then
+        printf "[ERROR]: Unable to stop container. Please try removing it manually.\n\n"
+        exit 12
+    fi
+    if [ "$removeErr" -eq 1 ]; then
+        printf "[STOPPED]\n"
+        printf "[ERROR]: Unable to remove container. Please try removing it manually.\n\n"
+        exit 13
+    fi
+    if [ "$removeStopped" = "true" ]; then
+        printf "[REMOVED]\n\n"
+    else
+        printf "[STOPPED]\n\n"
+    fi
+    exit 0
+fi
+
+#
+# run container
+
 # does the params file exist?
 checkExist 'file' './ab-nginx.params'

 # read .params file
+# shellcheck source=ab-nginx.params.template
 . "./ab-nginx.params"

 # fix case of TLS13_ONLY var
@ -125,16 +244,6 @@ if [ "$SSL_CERT" ]; then checkExist 'file' "$SSL_CERT"; fi
 if [ "$SSL_KEY" ]; then checkExist 'file' "$SSL_KEY"; fi
 if [ "$SSL_CHAIN" ]; then checkExist 'file' "$SSL_CHAIN"; fi

-# check for DHparam if using TLS1.2
-if [ "$SSL_CERT" ] && [ "$TLS13_ONLY" = 'FALSE' ]; then
-  if [ -z "$DH" ]; then
-    printf "%s\nA DHparam file must be specified when using TLS 1.2. Exiting.%s\n" "$err" "$norm"
-    exit 5
-  else
-    checkExist 'file' "$DH"
-  fi
-fi
-
 # check if specified config directory exists
 if [ "$CONFIG_DIR" ]; then
    checkExist 'dir' "$CONFIG_DIR"
@ -152,53 +261,23 @@ fi

 # set up volume mounts
 if [ "$CONFIG_DIR" ]; then
-  vmount="$vmount -v $CONFIG_DIR:/etc/nginx/config"
+    volumeMounts="${volumeMounts} -v $CONFIG_DIR:/etc/nginx/config"
 fi
 if [ "$SERVERS_DIR" ]; then
-  vmount="$vmount -v $SERVERS_DIR:/etc/nginx/sites"
+    volumeMounts="${volumeMounts} -v $SERVERS_DIR:/etc/nginx/sites"
 fi
 if [ "$SNIPPETS_DIR" ]; then
-  vmount="$vmount -v $SNIPPETS_DIR:/etc/nginx/snippets"
+    volumeMounts="${volumeMounts} -v $SNIPPETS_DIR:/etc/nginx/snippets"
 fi
 if [ "$WEBROOT_DIR" ]; then
-  vmount="$vmount -v $WEBROOT_DIR:/usr/share/nginx/html"
+    volumeMounts="${volumeMounts} -v $WEBROOT_DIR:/usr/share/nginx/html"
 fi
 # trim leading whitespace
-vmount=${vmount##[[:space:]]}
+volumeMounts=${volumeMounts##[[:space:]]}

 # handle null HOSTNAMES
 if [ -z "$HOSTNAMES" ]; then HOSTNAMES="_"; fi

-# process startup parameters
-while [ $# -gt 0 ]; do
-  case "$1" in
-  -h | -\? | --help)
-    # display help
-    scriptHelp
-    exit 0
-    ;;
-  -s | --shell)
-    # start shell instead of default CMD
-    shell=true
-    ;;
-  -n | --name)
-    # container name
-    if [ -z "$2" ]; then
-      printf "%s\nNo container name specified. Exiting.\n%s" "$err" "$norm"
-      exit 1
-    fi
-    container_name="$2"
-    shift
-    ;;
-  *)
-    printf "%s\nUnknown option: %s\n" "$err" "$1"
-    printf "Use '--help' for valid options.\n\n%s" "$norm"
-    exit 1
-    ;;
-  esac
-  shift
-done
-
 # create network if it doesn't already exist
 docker network inspect ${NETWORK} >/dev/null 2>&1 ||
    docker network create \
@ -209,91 +288,88 @@ docker network inspect ${NETWORK} >/dev/null 2>&1 ||

 # run without TLS
 if [ -z "$SSL_CERT" ]; then
-  if [ $shell = 'true' ]; then
+    if [ "$doShell" = 'true' ]; then
        # exec shell
        printf "%s\nRunning SHELL on %s...%s\n" "$cyan" "$container_name" "$norm"
+        # shellcheck disable=SC2086
        docker run --rm -it --name "${container_name}" \
            --env-file ab-nginx.params \
+            --user="${NGINX_UID:-8080}:${NGINX_GID:-8080}" \
            -e SERVER_NAMES="$HOSTNAMES" \
-      $vmount \
+            ${volumeMounts} \
            --network=${NETWORK} \
            -p ${HTTP_PORT}:80 \
-      docker.asifbacchus.app/nginx/ab-nginx:latest /bin/sh
+            docker.asifbacchus.dev/nginx/ab-nginx:latest /bin/sh
    else
        # exec normally
        printf "%s\nRunning NGINX on %s...%s\n" "$cyan" "$container_name" "$norm"
+        # shellcheck disable=SC2086
        docker run -d --name "${container_name}" \
            --env-file ab-nginx.params \
+            --user="${NGINX_UID:-8080}:${NGINX_GID:-8080}" \
            -e SERVER_NAMES="$HOSTNAMES" \
-      $vmount \
+            ${volumeMounts} \
            --network=${NETWORK} \
            -p ${HTTP_PORT}:80 \
            --restart unless-stopped \
-      docker.asifbacchus.app/nginx/ab-nginx:latest
+            docker.asifbacchus.dev/nginx/ab-nginx:${TAG:-latest}
    fi
-# run with TLS1.2
-elif [ "$SSL_CERT" ] && [ "$TLS13_ONLY" = 'FALSE' ]; then
-  if [ $shell = 'true' ]; then
-    # exec shell
+# run with TLS
+else
+    if [ "$doShell" = 'true' ]; then
+        if [ "$TLS13_ONLY" = 'FALSE' ]; then
            printf "%s\nRunning SHELL on %s (TLS 1.2)...%s\n" "$cyan" "$container_name" "$norm"
-    docker run --rm -it --name "${container_name}" \
-      --env-file ab-nginx.params \
-      -e SERVER_NAMES="$HOSTNAMES" \
-      $vmount \
-      --network=${NETWORK} \
-      -v "$SSL_CERT":/certs/fullchain.pem:ro \
-      -v "$SSL_KEY":/certs/privkey.pem:ro \
-      -v "$SSL_CHAIN":/certs/chain.pem:ro \
-      -v "$DH":/certs/dhparam.pem:ro \
-      -p ${HTTP_PORT}:80 -p ${HTTPS_PORT}:443 \
-      docker.asifbacchus.app/nginx/ab-nginx:latest /bin/sh
        else
-    # exec normally
-    printf "%s\nRunning NGINX on %s (TLS 1.2)...%s\n" "$cyan" "$container_name" "$norm"
-    docker run -d --name "${container_name}" \
-      --env-file ab-nginx.params \
-      -e SERVER_NAMES="$HOSTNAMES" \
-      $vmount \
-      --network=${NETWORK} \
-      -v "$SSL_CERT":/certs/fullchain.pem:ro \
-      -v "$SSL_KEY":/certs/privkey.pem:ro \
-      -v "$SSL_CHAIN":/certs/chain.pem:ro \
-      -v "$DH":/certs/dhparam.pem:ro \
-      -p ${HTTP_PORT}:80 -p ${HTTPS_PORT}:443 \
-      --restart unless-stopped \
-      docker.asifbacchus.app/nginx/ab-nginx:latest
-  fi
-# run with TLS1.3
-elif [ "$SSL_CERT" ] && [ "$TLS13_ONLY" = 'TRUE' ]; then
-  if [ $shell = 'true' ]; then
-    # exec shell
            printf "%s\nRunning SHELL on %s (TLS 1.3)...%s\n" "$cyan" "$container_name" "$norm"
+        fi
+        # shellcheck disable=SC2086
        docker run --rm -it --name "${container_name}" \
            --env-file ab-nginx.params \
+            --user="${NGINX_UID:-8080}:${NGINX_GID:-8080}" \
            -e SERVER_NAMES="$HOSTNAMES" \
-      $vmount \
+            ${volumeMounts} \
            --network=${NETWORK} \
            -v "$SSL_CERT":/certs/fullchain.pem:ro \
            -v "$SSL_KEY":/certs/privkey.pem:ro \
            -v "$SSL_CHAIN":/certs/chain.pem:ro \
            -p ${HTTP_PORT}:80 -p ${HTTPS_PORT}:443 \
-      docker.asifbacchus.app/nginx/ab-nginx:latest /bin/sh
+            docker.asifbacchus.dev/nginx/ab-nginx:${TAG:-latest} /bin/sh
+    else
+        if [ "$TLS13_ONLY" = 'FALSE' ]; then
+            printf "%s\nRunning NGINX on %s (TLS 1.2)...%s\n" "$cyan" "$container_name" "$norm"
        else
-    # exec normally
            printf "%s\nRunning NGINX on %s (TLS 1.3)...%s\n" "$cyan" "$container_name" "$norm"
+        fi
+        # shellcheck disable=SC2086
        docker run -d --name "${container_name}" \
            --env-file ab-nginx.params \
+            --user="${NGINX_UID:-8080}:${NGINX_GID:-8080}" \
            -e SERVER_NAMES="$HOSTNAMES" \
-      $vmount \
+            ${volumeMounts} \
            --network=${NETWORK} \
            -v "$SSL_CERT":/certs/fullchain.pem:ro \
            -v "$SSL_KEY":/certs/privkey.pem:ro \
            -v "$SSL_CHAIN":/certs/chain.pem:ro \
            -p ${HTTP_PORT}:80 -p ${HTTPS_PORT}:443 \
            --restart unless-stopped \
-      docker.asifbacchus.app/nginx/ab-nginx:latest
+            docker.asifbacchus.dev/nginx/ab-nginx:${TAG:-latest}
    fi
 fi

-### exit gracefully
-exit 0
+#
+# exit with code from docker
+exit "$?"
+
+#
+# exit return codes
+# 0:        normal exit, no errors
+# 1:        missing or invalid parameter
+# 2:        cannot find docker
+# 3:        incorrect permissions to access docker
+# 1x:       operation errors
+#   11      no container found with specified name
+#   12      unable to stop container
+#   13      unable to remove container
+# other     refer to docker exit codes
+
+#EOF
--- a/helpers/config/localResolver.conf.disabled
+++ b/helpers/config/localResolver.conf.disabled
@ -0,0 +1,2 @@
+resolver
+    127.0.0.11;
--- a/helpers/sites/readme
+++ b/helpers/sites/readme
@ -1,8 +1,8 @@
 - Place all your server block configuration files in this directory
 - This path should be bind-mounted to the container at:
  '/etc/nginx/sites'
-    - this bind-mount will override the test pages included in the container by 
-        default.
+    - this bind-mount will override the default server configurations
+        included in the container by default.
 - All files should begin in the 'server' configuration context
 - ONLY files that end with '.conf' will be processed!
    - if you want to keep a file for reference or disable it temporarily,
--- a/helpers/update.sh
+++ b/helpers/update.sh
@ -1,14 +1,16 @@
 #!/bin/sh

-### update script for ab-nginx container and utility scripts
-# version 2.0.0
+#
+# update script for ab-nginx container and utility scripts
+#   version 2.1.0
 #   script by Asif Bacchus
-###
+#

-### functions
+#
+# functions
 errMsg() {
    printf "\n%s%s%s\n\n" "$err" "$1" "$norm"
-  exit 1
+    [ -n "$2" ] && exit "$2" || exit 1
 }

 errNotify() {
@ -23,29 +25,38 @@ okNotify() {
    printf "%s[OK]%s\n" "$ok" "$norm"
 }

+makeDirectory() {
+    if ! [ -d "./$1" ]; then
+        if ! mkdir "./$1" >/dev/null 2>&1; then
+            errMsgString="Unable to make '$1' directory."
+            errMsg "$errMsgString" 40
+        fi
+    fi
+}
+
 scriptHelp() {
    textNewline
-  textblock "Update ${containerName} container and helper script files"
-  textblock "${bold}Usage: ${localScriptName} [parameters]${norm}"
+    textBlock "Update ${containerName} container and helper script files"
+    textBlock "${bold}Usage: ${localScriptName} [parameters]${norm}"
    textNewline
-  textblock "If run with no parameters, the script will update both the container and the helper script files, including this update script."
-  textblockHeader " parameters "
-  textblockParam "-h|-?|--help" "Display this help screen."
-  textblockParam "-c|--container|--container-only" "Update the docker container only."
-  textblockParam "-s|--scripts|--scripts-only" "Update the helper scripts (including this update script) only."
+    textBlock "If run with no parameters, the script will update both the container and the helper script files, including this update script."
+    textBlockHeader " parameters "
+    textBlockParam "-h | -? | --help" "Display this help screen."
+    textBlockParam "-c | --container | --container-only" "Update the docker container only."
+    textBlockParam "-s| --scripts |--scripts-only" "Update the helper scripts (including this update script) only."
    textNewline
    exit 0
 }

-textblock() {
+textBlock() {
    printf "%s\n" "$1" | fold -w "$width" -s
 }

-textblockHeader() {
+textBlockHeader() {
    printf "\n%s***%s***%s\n" "$header" "$1" "$norm"
 }

-textblockParam() {
+textBlockParam() {
    printf "%s%-35s%s%s\n" "$info" "$1" "$2" "$norm"
 }

@ -53,7 +64,8 @@ textNewline() {
    printf "\n"
 }

-### text formatting presets
+#
+# text formatting presets
 if command -v tput >/dev/null 2>&1; then
    bold=$(tput bold)
    err=$(tput bold)$(tput setaf 1)
@ -74,7 +86,8 @@ else
    width=80
 fi

-### pre-requisites
+#
+# pre-requisites
 # check if wget is installed
 if ! command -v wget >/dev/null 2>&1; then
    errMsg "Sorry, this script requires that 'wget' is installed in order to download updates. Exiting."
@ -90,8 +103,8 @@ updateSuccess=0
 # reference constants
 dockerNamespace='nginx'
 containerName='ab-nginx'
-containerUpdatePath="docker.asifbacchus.app/$dockerNamespace/$containerName:latest"
-server="https://asifbacchus.app/updates/docker/$dockerNamespace/$containerName/"
+containerUpdatePath="docker.asifbacchus.dev/$dockerNamespace/$containerName:latest"
+server="https://asifbacchus.dev/public/docker/$dockerNamespace/$containerName/"
 checksumFilename='checksums.sha256'

 # operation triggers
@ -102,7 +115,8 @@ doScriptUpdate=1
 localScriptName="$(basename "$0")"
 repoScriptName='update.sh'

-### process startup parameters
+#
+# process startup parameters
 while [ $# -gt 0 ]; do
    case "$1" in
    -h | -\? | --help)
@ -126,37 +140,39 @@ while [ $# -gt 0 ]; do
    shift
 done

-### update container
+#
+# update container
 if [ "$doDockerUpdate" -eq 1 ]; then
    # check if docker is installed
    if ! command -v docker >/dev/null 2>&1; then
-    errMsg "Sorry, it appears that docker is not installed on this machine! Exiting."
+        errMsg "Sorry, it appears that docker is not installed on this machine! Exiting." 2
    fi

    # is user root or in the docker group?
    if [ ! "$(id -u)" -eq 0 ]; then
        if ! id -Gn | grep docker >/dev/null; then
-      errMsg "You must either be root or in the 'docker' group to pull container updates."
+            errMsg "You must either be root or in the 'docker' group to pull container updates." 2
        fi
    fi

    printf "%s\n*** Updating %s container ***\n\n%s" "$info" "$containerName" "$norm"
    if ! docker pull "$containerUpdatePath"; then
-    errMsg "There was an error updating the container. Try again later."
+        errMsg "There was an error updating the container. Try again later." 31
    else
        okMsg "Container updated!"
    fi
 fi

-### update scripts
+#
+# update scripts
 if [ "$doScriptUpdate" -eq 1 ]; then
-  printf "%s*** Updating %s service scripts ***%s\n" "$info" "$containerName" "$norm"
+    printf "%s*** Updating %s helper scripts ***%s\n" "$info" "$containerName" "$norm"

    ## download latest checksums
    printf "Getting latest checksums... "
    if ! wget --quiet --tries=3 --timeout=10 -N "${server}${checksumFilename}"; then
        errNotify
-    errMsg "Unable to download checksums. Try again later."
+        errMsg "Unable to download checksums. Try again later." 41
    else
        okNotify
    fi
@ -175,7 +191,7 @@ if [ "$doScriptUpdate" -eq 1 ]; then
            errNotify
            # delete failed download as necessary
            rm -f ./update.sh.tmp 2>/dev/null
-      errMsg "Unable to download script update. Try again later."
+            errMsg "Unable to download script update. Try again later." 42
        else
            # verify download
            dlScriptChecksum=$(sha256sum "update.sh.tmp" | grep -o '^\S*')
@ -183,18 +199,25 @@ if [ "$doScriptUpdate" -eq 1 ]; then
                printf "[ERROR]\n"
                # delete corrupt download as necessary
                rm -f ./update.sh.tmp 2>/dev/null
-        errMsg "Checksum mismatch! Try again later."
+                errMsg "Checksum mismatch! Try again later." 42
            else
                okNotify
                printf "\n%s*** This script has been updated. Please re-run it to load the updated version of this file. ***%s\n\n" "$warn" "$norm"
                # overwrite this script with updated script
                mv -f ./update.sh.tmp "$localScriptName"
+                chmod +x "$localScriptName"
+                exit 0
            fi
        fi
    fi

    ## update files
+    makeDirectory "config"
+    makeDirectory "sites"
+    makeDirectory "snippets"
+
    while IFS='  ' read -r field1 field2; do
+        if [ "$field2" = "update.sh" ]; then continue; fi
        printf "\nChecking '%s' for updates... " "$field2"
        updateFilename="$field2"
        repoFileChecksum="$field1"
@ -231,6 +254,10 @@ if [ "$doScriptUpdate" -eq 1 ]; then
                    updateSuccess=$((updateSuccess + 1))
                    # overwrite old version of file
                    mv -f "$updateFilename.tmp" "$updateFilename"
+                    if [ "${updateFilename##*.}" = "sh" ]; then
+                        # shell file --> make it executable
+                        chmod +x "$updateFilename"
+                    fi
                fi
            fi
        else
@ -239,7 +266,8 @@ if [ "$doScriptUpdate" -eq 1 ]; then
    done <"$checksumFilename"
 fi

-### display results
+#
+# display results
 if [ "$doScriptUpdate" -eq 1 ]; then
    printf "\n%s*** Results ***%s\n" "$info" "$norm"
    printf "\tUpdates: %s available\n" "$updatesAvailable"
@ -247,4 +275,30 @@ if [ "$doScriptUpdate" -eq 1 ]; then
    printf "\tUpdates: %s%s applied%s, %s%s failed%s\n" "$ok" "$updateSuccess" "$norm" "$err" "$updateFailed" "$norm"
 fi

+#
+# exit
+if [ "$downloadFailed" -gt 0 ]; then
+    exit 43
+elif [ "$updateFailed" -gt 0 ]; then
+    exit 44
+else
    exit 0
+fi
+# this is a trap for mis-coding... should never get an exit code 99!
+exit 99
+
+#
+# exit return codes
+# 0:        normal exit, no errors
+# 1:        missing or invalid parameter
+# 2:        docker not found or no docker permissions
+# 31:       unable to update docker container
+# 4x:       helper files errors
+#   40:     unable to make download directories
+#   41:     unable to download checksums
+#   42:     update script: unable to download or bad checksum
+#   43:     update helpers: unable to download
+#   44:     update helpers: bad checksum, no update
+# 99:       coding mistake trap -- this return code should never happen!
+
+#EOF
Author	SHA1	Message	Date
Asif Bacchus	87b4092177	build(dockerfile): Update build args	2024-08-31 18:15:13 -06:00
Asif Bacchus	9d7c079c97	build(ide): Update IDE settings	2024-08-31 18:07:35 -06:00
Asif Bacchus	9104126356	feat(nginx): Update version to 1.27 on Alpine 3.20	2024-08-31 18:06:13 -06:00
Asif Bacchus	e8d1407419	build(docker): update build vars	2023-08-10 17:09:47 -06:00
Asif Bacchus	9a1153e93c	feature(nginx): update default base version	2023-08-10 17:01:32 -06:00
Asif Bacchus	a8fc01f885	chore(ide): update build config	2022-11-02 01:11:00 -06:00
Asif Bacchus	f2c63513e8	feature(version): build for mainline 1.23.2	2022-11-02 01:10:04 -06:00
Asif Bacchus	e7f83a8adc	feature(version): build for stable 1.22.1	2022-11-02 01:06:11 -06:00
Asif Bacchus	ebb989fff3	chore(ide): update docker build args	2022-02-26 23:21:12 -07:00
Asif Bacchus	6ef90be311	chore(ide): remove vscode files	2022-02-26 23:19:07 -07:00
Asif Bacchus	d452e449fb	chore(git): update gitattributes	2022-02-26 23:18:43 -07:00
Asif Bacchus	cc0343651a	chore(dockerfile): bump underlying nginx version	2022-02-26 23:17:45 -07:00
Asif Bacchus	122aa79c21	feature(helpers): add disabled local resolver config - add local resolver for reference - disabled by default, use Cloudflare instead	2021-09-13 04:13:53 -06:00
Asif Bacchus	0389744e37	chore: convert all files to LF	2021-09-13 04:10:56 -06:00
Asif Bacchus	b394e6ac21	chore(rider): save dockerfile build configuration	2021-09-13 03:25:39 -06:00
Asif Bacchus	0ee6ef3fc4	chore(dockerfile): bump versions - update NGINX to latest version (1.21.3) - update internal version to 5.2 (bug-fix release)	2021-09-13 02:45:51 -06:00
Asif Bacchus	30388f81cd	fix(dockerfile): create certs directory - create certs directory and set permissions for limited user - required for certs and DHparams auto-generation Closes #1	2021-09-13 02:43:28 -06:00
Asif Bacchus	883529d684	fix(scripts): missing space in ab-nginx.sh	2021-09-13 02:13:06 -06:00
Asif Bacchus	2e26095dbf	update curl and apk-tools to address security issues	2021-07-27 23:18:17 -06:00
Asif Bacchus	e29ca7690a	fix(helpers:update): fix missing space in mkdir cmd	2021-07-27 22:19:54 -06:00
Asif Bacchus	fcd24f0387	fix(helpers:update): prevent err on existing dirs	2021-07-27 22:08:29 -06:00
Asif Bacchus	a4d466fe3f	fix(helpers:update): make downloaded scripts executable	2021-07-27 21:57:38 -06:00
Asif Bacchus	e42c94cda9	fix(helpers): make download update script executable	2021-07-27 21:53:36 -06:00
Asif Bacchus	2f1e21f79b	fix(helpers): exit update script after self update	2021-07-27 21:52:24 -06:00
Asif Bacchus	4456653f03	fix(devTools): fix checksum generation error - fix script checksumming checksum file itself - move to target directory only after all checksums completed	2021-07-27 21:48:45 -06:00
Asif Bacchus	38af413d05	fix(helpers): fix download bugs in update script - do not double-check update.sh - create target directories for wget	2021-07-27 21:43:53 -06:00
Asif Bacchus	24975088d3	set scripts as executable	2021-07-27 21:22:33 -06:00
Asif Bacchus	9563e2b847	chore(dockerfile): update email addresses	2021-07-27 21:15:05 -06:00
Asif Bacchus	518d5aad2d	chore: add MIT license and NGINX BSD license	2021-07-27 21:12:26 -06:00
Asif Bacchus	3db6ade0bd	update readme for new version	2021-07-27 18:39:37 -06:00
Asif Bacchus	f7a6d924d9	feature(helpers): add exit codes to update script	2021-07-27 18:28:09 -06:00
Asif Bacchus	16f302c3fd	struct(tools): checksum generator script	2021-07-27 17:08:55 -06:00
Asif Bacchus	a6107f7e25	struct(helpers): set params file as template again - prevents accidental overwrite of user params on updates	2021-07-27 16:17:04 -06:00
Asif Bacchus	03e0631964	style(helpers): reformat update script and bump version	2021-07-27 16:09:27 -06:00
Asif Bacchus	4d5f3fa809	refactor(helpers): echo docker run result code on exit	2021-07-27 16:04:31 -06:00
Asif Bacchus	fb81443cba	style(helpers): make comment header style consistent	2021-07-27 16:00:30 -06:00
Asif Bacchus	92c0217374	perf(helpers): import and check params-file only if running	2021-07-27 15:58:12 -06:00
Asif Bacchus	750ad05d06	refactor(helpers): change name of stop and remove parameter switch	2021-07-27 15:55:17 -06:00
Asif Bacchus	0db9675bc4	feature(helpers): add stop and remove commands	2021-07-27 15:53:17 -06:00
Asif Bacchus	dd7ef19d88	refactor(helpers): update and notate return codes	2021-07-27 15:39:30 -06:00
Asif Bacchus	810cbd44b7	feature(helpers): add container status display	2021-07-27 15:26:53 -06:00
Asif Bacchus	2b583ad7e0	struct(dockerfile): change internal labels - add internal name label to allow finding containers - use new domain in private labels	2021-07-27 15:10:49 -06:00
Asif Bacchus	4a1c1e5153	refactor(helpers): set initial vars to null vs unset	2021-07-27 14:59:16 -06:00
Asif Bacchus	2b55ae11f4	refactor(helpers): change volume mount var name - change from vmount to volumeMounts	2021-07-27 14:58:01 -06:00
Asif Bacchus	49fa74159b	refactor(helpers): remove dhparams check - container now auto-generates this file if needed	2021-07-27 14:41:32 -06:00
Asif Bacchus	3548d88b63	style(helpers): rename textBlock functions - rename functions to camelCase	2021-07-27 14:37:57 -06:00
Asif Bacchus	a1e2911dc0	docs(helpers): change help text for container name	2021-07-27 14:35:57 -06:00
Asif Bacchus	a2b08d5a72	refactor(helpers): activate params file by default - remove template concept, use live file with defaults - easier implementation, no need to user to rename - active by default, one source for behaviour - allow IDE parsing from active file	2021-07-27 14:34:46 -06:00
Asif Bacchus	85ff24faaf	refactor(helpers): update domain and path in update script	2021-07-26 02:23:45 -06:00
Asif Bacchus	2e2c93b2b1	feature(helpers): change docker run cmd - add user specification so UID/GID always specified - add container default values	2021-07-26 01:36:41 -06:00
Asif Bacchus	e208d22664	style(helpers): reformat helper script	2021-07-26 01:30:35 -06:00
Asif Bacchus	bc2a34ddd8	feature(helpers): allow specifying tag	2021-07-26 01:20:38 -06:00
Asif Bacchus	a3c6656764	fix(helpers): rename shell var in helper script	2021-07-26 00:54:27 -06:00
Asif Bacchus	b2582b9bad	refactor(helpers): condense TLS section of helper script Take advantage of container generating DHParams and remove redundant docker run blocks	2021-07-26 00:49:51 -06:00
Asif Bacchus	1ee8b8bf03	refactor(helpers): remove dhparams mapping from params template	2021-07-26 00:32:48 -06:00
Asif Bacchus	8c5bbe8d9c	refactor(helpers): update domain in helper script	2021-07-26 00:29:35 -06:00
Asif Bacchus	60f79fdd45	docs(config): update sites readme file	2021-07-26 00:23:23 -06:00