services:
|
|
pebble:
|
|
image: ghcr.io/letsencrypt/pebble:latest
|
|
# TODO enable -strict
|
|
command: -dnsserver 10.30.50.3:53
|
|
environment:
|
|
# with Go 1.13.x which defaults TLS 1.3 to on
|
|
GODEBUG: "tls13=1"
|
|
PEBBLE_ALTERNATE_ROOTS: 2
|
|
ports:
|
|
- 14000:14000 # HTTPS ACME API
|
|
- 15000:15000 # HTTPS Management API
|
|
volumes:
|
|
- ./pebble-certificates:/test/certs/localhost
|
|
networks:
|
|
acmenet:
|
|
ipv4_address: 10.30.50.2
|
|
challtestsrv:
|
|
image: ghcr.io/letsencrypt/pebble-challtestsrv:latest
|
|
command: -defaultIPv6 "" -defaultIPv4 10.30.50.3 -dns01 ":53"
|
|
ports:
|
|
- 8055:8055 # HTTP Management API
|
|
networks:
|
|
acmenet:
|
|
ipv4_address: 10.30.50.3
|
|
|
|
|
|
networks:
|
|
acmenet:
|
|
driver: bridge
|
|
ipam:
|
|
driver: default
|
|
config:
|
|
- subnet: 10.30.50.0/24
|