From fd5cfd494e3cd8aabef0ed7ae12d90ff72444634 Mon Sep 17 00:00:00 2001 From: LinuxServer-CI Date: Wed, 5 Oct 2022 21:12:19 +0000 Subject: [PATCH] Bot Updating Documentation --- images/docker-swag.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/images/docker-swag.md b/images/docker-swag.md index 92fbcc301..a6a2b70d6 100755 --- a/images/docker-swag.md +++ b/images/docker-swag.md @@ -89,7 +89,7 @@ This will *ask* Google et al not to index and list your site. Be careful with th * You can check which jails are active via `docker exec -it swag fail2ban-client status` * You can check the status of a specific jail via `docker exec -it swag fail2ban-client status ` * You can unban an IP via `docker exec -it swag fail2ban-client set unbanip ` -* A list of commands can be found here: https://www.fail2ban.org/wiki/index.php/Commands +* A list of commands can be found here: ### Updating configs @@ -106,6 +106,7 @@ This will *ask* Google et al not to index and list your site. Be careful with th * You can check the new sample and adjust your active config as needed. ### Migration from the old `linuxserver/letsencrypt` image + Please follow the instructions [on this blog post](https://www.linuxserver.io/blog/2020-08-21-introducing-swag#migrate). ## Usage @@ -193,11 +194,11 @@ Docker images are configured using parameters passed at runtime (such as those a | `TZ=Europe/London` | Specify a timezone to use EG Europe/London. | | `URL=yourdomain.url` | Top url you have control over (`customdomain.com` if you own it, or `customsubdomain.ddnsprovider.com` if dynamic dns). | | `VALIDATION=http` | Certbot validation method to use, options are `http`, `dns` or `duckdns` (`dns` method also requires `DNSPLUGIN` variable set) (`duckdns` method requires `DUCKDNSTOKEN` variable set, and the `SUBDOMAINS` variable must be either empty or set to `wildcard`). | -| `SUBDOMAINS=www,` | Subdomains you'd like the cert to cover (comma separated, no spaces) ie. `www,ftp,cloud`. For a wildcard cert, set this _exactly_ to `wildcard` (wildcard cert is available via `dns` and `duckdns` validation only) | +| `SUBDOMAINS=www,` | Subdomains you'd like the cert to cover (comma separated, no spaces) ie. `www,ftp,cloud`. For a wildcard cert, set this *exactly* to `wildcard` (wildcard cert is available via `dns` and `duckdns` validation only) | | `CERTPROVIDER=` | Optionally define the cert provider. Set to `zerossl` for ZeroSSL certs (requires existing [ZeroSSL account](https://app.zerossl.com/signup) and the e-mail address entered in `EMAIL` env var). Otherwise defaults to Let's Encrypt. | | `DNSPLUGIN=cloudflare` | Required if `VALIDATION` is set to `dns`. Options are `acmedns`, `aliyun`, `azure`, `cloudflare`, `cloudxns`, `cpanel`, `desec`, `digitalocean`, `directadmin`, `dnsimple`, `dnsmadeeasy`, `dnspod`, `do`, `domeneshop`, `dynu`, `gandi`, `gehirn`, `godaddy`, `google`, `he`, `hetzner`, `infomaniak`, `inwx`, `ionos`, `linode`, `loopia`, `luadns`, `netcup`, `njalla`, `nsone`, `ovh`, `porkbun`, `rfc2136`, `route53`, `sakuracloud`, `standalone`, `transip`, and `vultr`. Also need to enter the credentials into the corresponding ini (or json for some plugins) file under `/config/dns-conf`. | | `PROPAGATION=` | Optionally override (in seconds) the default propagation time for the dns plugins. | -| `DUCKDNSTOKEN=` | Required if `VALIDATION` is set to `duckdns`. Retrieve your token from https://www.duckdns.org | +| `DUCKDNSTOKEN=` | Required if `VALIDATION` is set to `duckdns`. Retrieve your token from | | `EMAIL=` | Optional e-mail address used for cert expiration notifications (Required for ZeroSSL). | | `ONLY_SUBDOMAINS=false` | If you wish to get certs only for certain subdomains, but not the main domain (main domain may be hosted on another machine and cannot be validated), set this to `true` | | `EXTRA_DOMAINS=` | Additional fully qualified domain names (comma separated, no spaces) ie. `extradomain.com,subdomain.anotherdomain.org,*.anotherdomain.org` | @@ -269,6 +270,7 @@ We publish various [Docker Mods](https://github.com/linuxserver/docker-mods) to ## Versions +* **05.10.22:** - Use certbot file hooks instead of command line hooks * **04.10.22:** - Add godaddy and porkbun dns plugins. * **03.10.22:** - Add default_server back to default site conf's https listen. * **22.09.22:** - Added support for DO DNS validation. @@ -285,7 +287,7 @@ We publish various [Docker Mods](https://github.com/linuxserver/docker-mods) to * **22.11.21:** - Added support for Infomaniak DNS for certificate generation. * **20.11.21:** - Added support for dnspod validation. * **15.11.21:** - Added support for deSEC DNS for wildcard certificate generation. -* **26.10.21:** - [Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) proxy.conf - Mitigate https://httpoxy.org/ vulnerabilities. Ref: https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx#Defeating-the-Attack-using-NGINX-and-NGINX-Plus +* **26.10.21:** - [Existing users should update:](https://github.com/linuxserver/docker-swag/blob/master/README.md#updating-configs) proxy.conf - Mitigate vulnerabilities. Ref: * **23.10.21:** - Fix Hurricane Electric (HE) DNS validation. * **12.10.21:** - Fix deprecated LE root cert check to fix failures when using `STAGING=true`, and failures in revoking. * **06.10.21:** - Added support for Hurricane Electric (HE) DNS validation. Added lxml build deps.