dokploy icon indicating copy to clipboard operation
dokploy copied to clipboard

Allow for S3 destination with self signed certificate

Open oskargargas opened this issue 4 months ago • 7 comments

What problem will this feature address?

I run MinIO with self signed TLS certificate. I'd like to connect to it from Dokploy UI. Currently I get the following error

Command failed: rclone ls (...) tls: failed to verify certificate: x509: certificate signed by unknown authority

Describe the solution you'd like

During S3 Destination configuration I'd like to have an option to upload a certificate that will be passed to rclone via --ca-cert <path_to_cert>.

Describe alternatives you've considered

I mapped cetificate to the Dokploy container and set path to it in RCLONE_CA_CERT environment variable.

Additional context

No response

Will you send a PR to implement it?

No

oskargargas avatar Oct 18 '25 16:10 oskargargas

any solution ??

mageshyt avatar Nov 01 '25 05:11 mageshyt

any solution ??

Looks like development staled for this project. You can try workaround I've provided.

oskargargas avatar Nov 08 '25 11:11 oskargargas

where is the workaround ??

mageshyt avatar Nov 08 '25 12:11 mageshyt

where is the workaround ??

Describe alternatives you've considered

I mapped cetificate to the Dokploy container and set path to it in RCLONE_CA_CERT environment variable.

Bind the certificate to the Dokploy container and then set it's path (path inside container) to the RCLONE_CA_CERT env var. Then it is used by Rclone utility which Dokploy uses to connect to S3

oskargargas avatar Nov 13 '25 09:11 oskargargas

can you please provide any poc for it

mageshyt avatar Nov 15 '25 08:11 mageshyt

There is nothing to POC. You just need to provide a bind to a folder with certs and set an env var for rclone with a path to a cert.

docker service create \
  --name dokploy \
  --env ADVERTISE_ADDR=address \
  --env DATABASE_URL=db_url \
  --env RCLONE_CA_CERT=/root/.config/rclone/certs/public.crt \                     # path to a cert for rclone
  --mount type=bind,src=/etc/dokploy,dst=/etc/dokploy \
  --mount type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock \
  --mount type=volume,src=dokploy-docker-config,dst=/root/.docker \
  --mount type=bind,src=/etc/dokploy/config/rclone,dst=/root/.config/rclone \      # bind to a folder with certs
  dokploy/dokploy:latest

Adapt it for yourself based on this configuration. What I mean is add bind and RCLONE_CA_CERT to your actual config. Don't use the above directly.

oskargargas avatar Nov 17 '25 10:11 oskargargas

Okay thanks

mageshyt avatar Nov 18 '25 07:11 mageshyt