Implement certificates per network

dappnode · Oct 17, 2024 · 7145de1 · 7145de1
1 parent 5d5a19c
commit 7145de1
Show file tree

Hide file tree

Showing 9 changed files with 7 additions and 2 deletions.
diff --git a/validator/Dockerfile b/validator/Dockerfile
@@ -7,7 +7,8 @@ ARG STAKER_SCRIPTS_VERSION
 
 USER root 
 
-ENV TLS_CERT_PATH=/tls/cert
+# Modify TLS_CERT_PATH to include the NETWORK arg value
+ENV TLS_CERT_PATH=/tls/cert/${NETWORK}
 
 ENV DATA_DIR=/opt/teku/data \
     NETWORK=${NETWORK} \
@@ -18,7 +19,7 @@ ENV DATA_DIR=/opt/teku/data \
     STAKER_SCRIPTS_URL=https://github.com/dappnode/staker-package-scripts/releases/download/${STAKER_SCRIPTS_VERSION}
 
 COPY /security/validator-api-bearer ${VALIDATOR_API_TOKEN_PATH}
-COPY /security/cert ${TLS_CERT_PATH}
+COPY /security/cert/${NETWORK} ${TLS_CERT_PATH}
 COPY entrypoint.sh /usr/local/bin/entrypoint.sh
 
 ADD ${STAKER_SCRIPTS_URL}/consensus_tools.sh /etc/profile.d/
@@ -31,3 +32,4 @@ RUN apt-get update && apt-get install ca-certificates --yes --no-install-recomme
 ENV NETWORK=${NETWORK}
 
 ENTRYPOINT [ "/usr/local/bin/entrypoint.sh" ]
+
diff --git a/validator/security/cert/gnosis/teku_client_keystore.p12 b/validator/security/cert/gnosis/teku_client_keystore.p12
diff --git a/.../security/cert/teku_keystore_password.txt → ...ty/cert/gnosis/teku_keystore_password.txt b/.../security/cert/teku_keystore_password.txt → ...ty/cert/gnosis/teku_keystore_password.txt
diff --git a/...or/security/cert/teku_client_keystore.p12 → ...ity/cert/holesky/teku_client_keystore.p12 b/...or/security/cert/teku_client_keystore.p12 → ...ity/cert/holesky/teku_client_keystore.p12
diff --git a/validator/security/cert/holesky/teku_keystore_password.txt b/validator/security/cert/holesky/teku_keystore_password.txt
@@ -0,0 +1 @@
+dappnode
diff --git a/validator/security/cert/lukso/teku_client_keystore.p12 b/validator/security/cert/lukso/teku_client_keystore.p12
diff --git a/validator/security/cert/lukso/teku_keystore_password.txt b/validator/security/cert/lukso/teku_keystore_password.txt
@@ -0,0 +1 @@
+dappnode
diff --git a/validator/security/cert/mainnet/teku_client_keystore.p12 b/validator/security/cert/mainnet/teku_client_keystore.p12
diff --git a/validator/security/cert/mainnet/teku_keystore_password.txt b/validator/security/cert/mainnet/teku_keystore_password.txt
@@ -0,0 +1 @@
+dappnode