nik/frigate
1
0
Fork 0
mirror of https://github.com/blakeblackshear/frigate.git synced 2026-08-31 07:27:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

keep certsync's cert selection identical to nginx's

Browse Source
This commit is contained in:
Josh Hawkins 2026-08-30 12:43:23 -05:00
parent 2bd259b4f2
commit 688c1571e4
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docker/main/rootfs/etc/s6-overlay/s6-rc.d/certsync/run
View File

@ -26,9 +26,11 @@ function reload_nginx() {
echo "[INFO] Starting certsync..."
# Resolved once, to match the choice nginx made at its own startup: watching a
# path nginx did not load would compare fingerprints that can never agree.
if [ -f /etc/letsencrypt/live/frigate/fullchain.pem ]; then
# Resolved once, and the condition must stay identical to the nginx run
# script's. Testing only fullchain.pem here would pick the mounted cert on a
# half-populated mount that nginx rejected, and the two fingerprints would then
# never agree, reloading nginx every cycle forever.
if [ -f /etc/letsencrypt/live/frigate/privkey.pem ] && [ -f /etc/letsencrypt/live/frigate/fullchain.pem ]; then
lefile="/etc/letsencrypt/live/frigate/fullchain.pem"
else
lefile="/config/tls/fullchain.pem"