Let’s Encrypt + CloudFlare DNS validation in Docker
Renews Let’s Encrypt certificates using CloudFlare DNS verification.
Production setup
- Docker container is automatically pushed by Github Actions to ECR on master changes.
- ECS Task Definition is updated to the latest version
- Scheduled task in the ECS cluster needs to be updated to the latest version manually
- Task runs every 30 days and updates the certificates in the bucket
- Service needs to be manually restarted to pick up the new certificartes
Run locally
- Define env variables CF_API_TOKEN and SECRETS_BUCKET
- Run
run.sh - Redeploy the latest application version