mirror of
https://github.com/yrutschle/sslh.git
synced 2025-04-14 08:07:14 +03:00
docker: Do not foreground by default, this should be a choice
It is weird that when invoking sslh, that it daemonizess in foreground by default. This should always be a user choice, and if not, it should be a program default. Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
This commit is contained in:
parent
20764074cb
commit
295dba93b5
@ -20,4 +20,4 @@ COPY --from=build "/sslh/sslh-select" "/usr/local/bin/sslh"
|
|||||||
|
|
||||||
RUN apk --no-cache add libconfig pcre2
|
RUN apk --no-cache add libconfig pcre2
|
||||||
|
|
||||||
ENTRYPOINT [ "/usr/local/bin/sslh", "--foreground" ]
|
ENTRYPOINT [ "/usr/local/bin/sslh" ]
|
||||||
|
@ -11,7 +11,7 @@ protocol that can be tested using a regular expression, can
|
|||||||
be recognised. A typical use case is to allow serving
|
be recognised. A typical use case is to allow serving
|
||||||
several services on port 443 (e.g. to connect to SSH from
|
several services on port 443 (e.g. to connect to SSH from
|
||||||
inside a corporate firewall, which almost never block port
|
inside a corporate firewall, which almost never block port
|
||||||
443) while still serving HTTPS on that port.
|
443) while still serving HTTPS on that port.
|
||||||
|
|
||||||
Hence `sslh` acts as a protocol demultiplexer, or a
|
Hence `sslh` acts as a protocol demultiplexer, or a
|
||||||
switchboard. With the SNI and ALPN probe, it makes a good
|
switchboard. With the SNI and ALPN probe, it makes a good
|
||||||
@ -20,8 +20,8 @@ address.
|
|||||||
|
|
||||||
`sslh` has the bells and whistles expected from a mature
|
`sslh` has the bells and whistles expected from a mature
|
||||||
daemon: privilege and capabilities dropping, inetd support,
|
daemon: privilege and capabilities dropping, inetd support,
|
||||||
systemd support, transparent proxying, chroot, logging,
|
systemd support, transparent proxying, chroot, logging,
|
||||||
IPv4 and IPv6, TCP and UDP, a fork-based and a select-based
|
IPv4 and IPv6, TCP and UDP, a fork-based and a select-based
|
||||||
model, and more.
|
model, and more.
|
||||||
|
|
||||||
Install
|
Install
|
||||||
@ -50,6 +50,7 @@ docker run \
|
|||||||
--rm \
|
--rm \
|
||||||
-it \
|
-it \
|
||||||
ghcr.io/yrutschle/sslh:latest \
|
ghcr.io/yrutschle/sslh:latest \
|
||||||
|
--foreground \
|
||||||
--listen=0.0.0.0:443 \
|
--listen=0.0.0.0:443 \
|
||||||
--ssh=hostname:22 \
|
--ssh=hostname:22 \
|
||||||
--tls=hostname:443
|
--tls=hostname:443
|
||||||
@ -66,7 +67,7 @@ services:
|
|||||||
hostname: sslh
|
hostname: sslh
|
||||||
ports:
|
ports:
|
||||||
- 443:443
|
- 443:443
|
||||||
command: --listen=0.0.0.0:443 --tls=nginx:443 --openvpn=openvpn:1194
|
command: --foreground --listen=0.0.0.0:443 --tls=nginx:443 --openvpn=openvpn:1194
|
||||||
depends_on:
|
depends_on:
|
||||||
- nginx
|
- nginx
|
||||||
- openvpn
|
- openvpn
|
||||||
|
Loading…
x
Reference in New Issue
Block a user