v0.26.7

Dockerfile

@@ -7,7 +7,13 @@ RUN if [ ! -f Cargo.lock ]; then cargo generate-lockfile; fi \
 
 FROM debian:trixie-slim AS runtime
 RUN apt-get update \
-    && apt-get install -y --no-install-recommends ca-certificates python3 certbot openssl \
+    && apt-get install -y --no-install-recommends ca-certificates python3 python3-venv openssl \
+    && python3 -m venv /opt/rustproxy-certbot \
+    && /opt/rustproxy-certbot/bin/pip install --no-cache-dir \
+        'certbot==5.8.0' \
+        'certbot-dns-cloudflare==5.8.0' \
+        'certbot-dns-ovh==5.8.0' \
+        'certbot-dns-rfc2136==5.8.0' \
     && rm -rf /var/lib/apt/lists/* \
     && groupadd --system --gid 10001 rustproxy \
     && useradd --system --uid 10001 --gid rustproxy --home /var/lib/rustproxy --shell /usr/sbin/nologin rustproxy \
@@ -17,7 +23,8 @@ COPY --from=build /build/target/release/rust-proxy /usr/local/bin/rust-proxy
 USER rustproxy:rustproxy
 ENV RUST_PROXY_DATA_DIR=/var/lib/rustproxy \
     RUST_PROXY_PROXY_LISTEN=0.0.0.0:8080 \
-    RUST_PROXY_ADMIN_LISTEN=127.0.0.1:9090
+    RUST_PROXY_ADMIN_LISTEN=127.0.0.1:9090 \
+    PATH=/opt/rustproxy-certbot/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 VOLUME ["/var/lib/rustproxy"]
 EXPOSE 8080 8443 9090
 ENTRYPOINT ["/usr/local/bin/rust-proxy"]