Docker instance using SSL

[Rajstopy]

Dear Duplicati users,

I’m using Duplicati through Docker instance and I’m very happy with this fantastic tool.

I’ve my own CA authority on my LAN and I would like to use Duplicati over SSL (https://).

Has anyone succeeded with using SSL on a Docker instance of Duplicati ?

I’ve found this topic but /cert seems to be be located at a different place on newest versions…

Running duplicati docker container with https

The following command can be used to create a docker container that uses a an existing SSL certificate. You can you use the following procure to convert a LetEncrypt cert into the format Duplicati needs. Script for converting LetsEncrypt cert for use with Duplicati docker run –name=duplicati -h duplicati -v /duplicati/data:/data -v /usr/lib/duplicati/cert:/cert -v :/share Server/’:/server -p :8200 duplicati/duplicati /usr/bin/duplicati-server --webservice-port=8200 --webservice…

Any help would be very appreciated.

R

[drwtsn32]

Hello and welcome!

/cert doesn’t exist in the docker container by default, but if you do what the linked post says it will be there and mapped to /usr/lib/duplicati/cert on the host machine. If your cert is stored elsewhere on the host, then of course you can adjust the directory so it matches.

[Thorsten_Dietrichkei]

I know, this thread is quite old. I’d also like to use SSL, but I configured Duplicati on Openmediavault via docker-compose for which the syntax is different:

(How) can I set cert & key in docker-compose?

Thanks!

[kenkendk]

@Thorsten_Dietrichkei

(How) can I set cert & key in docker-compose?

TLS/SSL/HTTPS is described generally here:

Server | Duplicati

You can set it up with environment variables instead for Docker:

DUPLICATI__WEBSERVICE_SSLCERTIFICATEFILE=<path to certificate file>
DUPLICATI__WEBSERVICE_SSLCERTIFICATEPASSWORD=<password to ssl file>

[Thorsten_Dietrichkei]

Thanks a lot! I didn’t find it because I searched for a list of environment variable name, I didn’t notice the part of the articl which explains how to ‘construct’ them from the option names.