ss-tools

Files

busya 1c6b3d6e8a feat(ssl): add passphrase-protected key and PKCS#12 support in nginx entrypoint

- docker/frontend.entrypoint.sh: add 3 new functions:
  - extract_p12_if_needed — openssl pkcs12 extraction to .crt+.key
  - resolve_ssl_passphrase — read SSL_KEY_PASSPHRASE env var
  - decrypt_key_if_needed — openssl rsa decryption before nginx start
- Pipeline: install CA -> extract p12 -> get passphrase -> select config -> decrypt key -> start nginx
- Crash-early: encrypted key without SSL_KEY_PASSPHRASE exits entrypoint
- docker-compose.enterprise-clean.yml: add SSL_KEY_PASSPHRASE to frontend env
- .env.enterprise-clean.example: document SSL_KEY_PASSPHRASE usage
- build.sh: add SSL_KEY_PASSPHRASE to generated deploy compose

2026-07-04 17:05:51 +03:00

all-in-one.Dockerfile

fix(version): inject APP_VERSION via Docker build-arg instead of git describe

2026-06-18 18:37:11 +03:00

backend.Dockerfile

fix: QA findings — Dockerfile #endregion dedup, @RATIONALE, grep -qF

2026-05-27 16:12:37 +03:00

backend.entrypoint.sh

alembic fix

2026-06-01 16:34:07 +03:00

Dockerfile.agent

fix(agent): resolve ModuleNotFoundError for backend, add E2E test infra