Allow for S3 destination with self signed certificate
What problem will this feature address?
I run MinIO with self signed TLS certificate. I'd like to connect to it from Dokploy UI. Currently I get the following error
Command failed: rclone ls (...) tls: failed to verify certificate: x509: certificate signed by unknown authority
Describe the solution you'd like
During S3 Destination configuration I'd like to have an option to upload a certificate that will be passed to rclone via --ca-cert <path_to_cert>.
Describe alternatives you've considered
I mapped cetificate to the Dokploy container and set path to it in RCLONE_CA_CERT environment variable.
Additional context
No response
Will you send a PR to implement it?
No
any solution ??
any solution ??
Looks like development staled for this project. You can try workaround I've provided.
where is the workaround ??
where is the workaround ??
Describe alternatives you've considered
I mapped cetificate to the Dokploy container and set path to it in
RCLONE_CA_CERTenvironment variable.
Bind the certificate to the Dokploy container and then set it's path (path inside container) to the RCLONE_CA_CERT env var. Then it is used by Rclone utility which Dokploy uses to connect to S3
can you please provide any poc for it
There is nothing to POC. You just need to provide a bind to a folder with certs and set an env var for rclone with a path to a cert.
docker service create \
--name dokploy \
--env ADVERTISE_ADDR=address \
--env DATABASE_URL=db_url \
--env RCLONE_CA_CERT=/root/.config/rclone/certs/public.crt \ # path to a cert for rclone
--mount type=bind,src=/etc/dokploy,dst=/etc/dokploy \
--mount type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock \
--mount type=volume,src=dokploy-docker-config,dst=/root/.docker \
--mount type=bind,src=/etc/dokploy/config/rclone,dst=/root/.config/rclone \ # bind to a folder with certs
dokploy/dokploy:latest
Adapt it for yourself based on this configuration. What I mean is add bind and RCLONE_CA_CERT to your actual config. Don't use the above directly.
Okay thanks