From 5841d3f7e4a2295a4e60039d8e9575ebabd5dbc4 Mon Sep 17 00:00:00 2001 From: dusan Date: Tue, 17 Mar 2026 19:57:15 +0100 Subject: [PATCH] NOISSUE - Update SMQ Signed-off-by: dusan --- docker/docker-compose.yaml | 42 ++-- docker/supermq-docker-compose.override.yaml | 17 +- docker/supermq-docker/.env | 1 + .../addons/certs/docker-compose.yaml | 36 ++- .../certs-docker-compose-override.yaml | 12 +- docker/supermq-docker/docker-compose.yaml | 238 +++++++++--------- 6 files changed, 188 insertions(+), 158 deletions(-) diff --git a/docker/docker-compose.yaml b/docker/docker-compose.yaml index ac1bd18d4..12d3ba9ac 100644 --- a/docker/docker-compose.yaml +++ b/docker/docker-compose.yaml @@ -141,49 +141,49 @@ services: # Auth gRPC client certificates - type: bind source: ${MG_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${MG_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${MG_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${MG_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${MG_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${MG_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true # Channels gRPC client certificates - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_CERT:+.crt} + target: /channels-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_KEY:+.key} + target: /channels-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true # Reader gRPC client certificates - type: bind source: ${MG_TIMESCALE_READER_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /readers-grpc-client${MG_TIMESCALE_READER_GRPC_CLIENT_CERT:+.crt} + target: /readers-grpc-client.crt bind: create_host_path: true - type: bind source: ${MG_TIMESCALE_READER_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /readers-grpc-client${MG_TIMESCALE_READER_GRPC_CLIENT_KEY:+.key} + target: /readers-grpc-client.key bind: create_host_path: true - type: bind source: ${MG_TIMESCALE_READER_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca_certs} - target: /readers-grpc-server-ca${MG_TIMESCALE_READER_GRPC_SERVER_CA_CERTS:+.crt} + target: /readers-grpc-server-ca.crt bind: create_host_path: true @@ -344,17 +344,17 @@ services: # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true @@ -428,32 +428,32 @@ services: # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true @@ -542,17 +542,17 @@ services: # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true diff --git a/docker/supermq-docker-compose.override.yaml b/docker/supermq-docker-compose.override.yaml index 1a72818a9..3aa4f3dd6 100644 --- a/docker/supermq-docker-compose.override.yaml +++ b/docker/supermq-docker-compose.override.yaml @@ -190,14 +190,14 @@ services: AM_AUTH_GRPC_URL: ${AM_AUTH_GRPC_URL} AM_AUTH_GRPC_TIMEOUT: ${AM_AUTH_GRPC_TIMEOUT} - AM_AUTH_GRPC_CLIENT_CERT: ${AM_AUTH_GRPC_CLIENT_CERT} - AM_AUTH_GRPC_CLIENT_KEY: ${AM_AUTH_GRPC_CLIENT_KEY} - AM_AUTH_GRPC_SERVER_CA_CERTS: ${AM_AUTH_GRPC_SERVER_CA_CERTS} + AM_AUTH_GRPC_CLIENT_CERT: ${AM_AUTH_GRPC_CLIENT_CERT:+/auth-grpc-client.crt} + AM_AUTH_GRPC_CLIENT_KEY: ${AM_AUTH_GRPC_CLIENT_KEY:+/auth-grpc-client.key} + AM_AUTH_GRPC_SERVER_CA_CERTS: ${AM_AUTH_GRPC_SERVER_CA_CERTS:+/auth-grpc-server-ca.crt} AM_DOMAINS_GRPC_URL: ${AM_DOMAINS_GRPC_URL} AM_DOMAINS_GRPC_TIMEOUT: ${AM_DOMAINS_GRPC_TIMEOUT} - AM_DOMAINS_GRPC_CLIENT_CERT: ${AM_DOMAINS_GRPC_CLIENT_CERT} - AM_DOMAINS_GRPC_CLIENT_KEY: ${AM_DOMAINS_GRPC_CLIENT_KEY} - AM_DOMAINS_GRPC_SERVER_CA_CERTS: ${AM_DOMAINS_GRPC_SERVER_CA_CERTS} + AM_DOMAINS_GRPC_CLIENT_CERT: ${AM_DOMAINS_GRPC_CLIENT_CERT:+/domains-grpc-client.crt} + AM_DOMAINS_GRPC_CLIENT_KEY: ${AM_DOMAINS_GRPC_CLIENT_KEY:+/domains-grpc-client.key} + AM_DOMAINS_GRPC_SERVER_CA_CERTS: ${AM_DOMAINS_GRPC_SERVER_CA_CERTS:+/domains-grpc-server-ca.crt} networks: !override - magistrala-base-net @@ -208,10 +208,10 @@ services: - ../../docker/nginx/entrypoint.sh:/docker-entrypoint.d/entrypoint.sh - type: bind source: ${SMQ_NGINX_SERVER_CERT:-../../docker/ssl/certs/magistrala-server.crt} - target: /etc/ssl/certs/magistrala-server.crt + target: /etc/ssl/certs/supermq-server.crt - type: bind source: ${SMQ_NGINX_SERVER_KEY:-../../docker/ssl/certs/magistrala-server.key} - target: /etc/ssl/private/magistrala-server.key + target: /etc/ssl/private/supermq-server.key - type: bind source: ${SMQ_NGINX_SERVER_CLIENT_CA:-../../docker/ssl/certs/ca.crt} target: /etc/ssl/certs/ca.crt @@ -224,4 +224,3 @@ services: - ./.env - ../../docker/.env - diff --git a/docker/supermq-docker/.env b/docker/supermq-docker/.env index 002536e03..c0b99b60c 100644 --- a/docker/supermq-docker/.env +++ b/docker/supermq-docker/.env @@ -496,6 +496,7 @@ AM_JAEGER_URL=http://jaeger:4318/v1/traces AM_JAEGER_TRACE_RATIO=1.0 #### Auth Client Config for Certs Service +SMQ_ADDONS_CERTS_PATH_PREFIX= AM_AUTH_GRPC_URL=auth:7001 AM_AUTH_GRPC_TIMEOUT=300s AM_AUTH_GRPC_CLIENT_CERT=${GRPC_MTLS:+./ssl/certs/auth-grpc-client.crt} diff --git a/docker/supermq-docker/addons/certs/docker-compose.yaml b/docker/supermq-docker/addons/certs/docker-compose.yaml index d2bfd73a4..f406d5c7b 100644 --- a/docker/supermq-docker/addons/certs/docker-compose.yaml +++ b/docker/supermq-docker/addons/certs/docker-compose.yaml @@ -46,9 +46,9 @@ services: AM_CERTS_DB_SSL_MODE: ${AM_CERTS_DB_SSL_MODE} AM_AUTH_GRPC_URL: ${AM_AUTH_GRPC_URL} AM_AUTH_GRPC_TIMEOUT: ${AM_AUTH_GRPC_TIMEOUT} - AM_AUTH_GRPC_CLIENT_CERT: ${AM_AUTH_GRPC_CLIENT_CERT} - AM_AUTH_GRPC_CLIENT_KEY: ${AM_AUTH_GRPC_CLIENT_KEY} - AM_AUTH_GRPC_SERVER_CA_CERTS: ${AM_AUTH_GRPC_SERVER_CA_CERTS} + AM_AUTH_GRPC_CLIENT_CERT: ${AM_AUTH_GRPC_CLIENT_CERT:+/auth-grpc-client.crt} + AM_AUTH_GRPC_CLIENT_KEY: ${AM_AUTH_GRPC_CLIENT_KEY:+/auth-grpc-client.key} + AM_AUTH_GRPC_SERVER_CA_CERTS: ${AM_AUTH_GRPC_SERVER_CA_CERTS:+/auth-grpc-server-ca.crt} AM_DOMAINS_GRPC_URL: ${AM_DOMAINS_GRPC_URL} AM_DOMAINS_GRPC_TIMEOUT: ${AM_DOMAINS_GRPC_TIMEOUT} AM_DOMAINS_GRPC_CLIENT_CERT: ${AM_DOMAINS_GRPC_CLIENT_CERT:+/domains-grpc-client.crt} @@ -65,6 +65,36 @@ services: - ${AM_CERTS_GRPC_PORT}:${AM_CERTS_GRPC_PORT} volumes: - openbao-data:/openbao:ro + - type: bind + source: ${SMQ_ADDONS_CERTS_PATH_PREFIX}${AM_AUTH_GRPC_CLIENT_CERT:-./ssl/certs/dummy/client_cert} + target: /auth-grpc-client.crt + bind: + create_host_path: true + - type: bind + source: ${SMQ_ADDONS_CERTS_PATH_PREFIX}${AM_AUTH_GRPC_CLIENT_KEY:-./ssl/certs/dummy/client_key} + target: /auth-grpc-client.key + bind: + create_host_path: true + - type: bind + source: ${SMQ_ADDONS_CERTS_PATH_PREFIX}${AM_AUTH_GRPC_SERVER_CA_CERTS:-./ssl/certs/dummy/server_ca} + target: /auth-grpc-server-ca.crt + bind: + create_host_path: true + - type: bind + source: ${SMQ_ADDONS_CERTS_PATH_PREFIX}${AM_DOMAINS_GRPC_CLIENT_CERT:-./ssl/certs/dummy/client_cert} + target: /domains-grpc-client.crt + bind: + create_host_path: true + - type: bind + source: ${SMQ_ADDONS_CERTS_PATH_PREFIX}${AM_DOMAINS_GRPC_CLIENT_KEY:-./ssl/certs/dummy/client_key} + target: /domains-grpc-client.key + bind: + create_host_path: true + - type: bind + source: ${SMQ_ADDONS_CERTS_PATH_PREFIX}${AM_DOMAINS_GRPC_SERVER_CA_CERTS:-./ssl/certs/dummy/server_ca} + target: /domains-grpc-server-ca.crt + bind: + create_host_path: true certs-db: image: postgres:16.2-alpine diff --git a/docker/supermq-docker/certs-docker-compose-override.yaml b/docker/supermq-docker/certs-docker-compose-override.yaml index c766468e7..1aae5c3bf 100644 --- a/docker/supermq-docker/certs-docker-compose-override.yaml +++ b/docker/supermq-docker/certs-docker-compose-override.yaml @@ -49,14 +49,14 @@ services: AM_JAEGER_TRACE_RATIO: ${AM_JAEGER_TRACE_RATIO} AM_AUTH_GRPC_URL: ${AM_AUTH_GRPC_URL} AM_AUTH_GRPC_TIMEOUT: ${AM_AUTH_GRPC_TIMEOUT} - AM_AUTH_GRPC_CLIENT_CERT: ${AM_AUTH_GRPC_CLIENT_CERT} - AM_AUTH_GRPC_CLIENT_KEY: ${AM_AUTH_GRPC_CLIENT_KEY} - AM_AUTH_GRPC_SERVER_CA_CERTS: ${AM_AUTH_GRPC_SERVER_CA_CERTS} + AM_AUTH_GRPC_CLIENT_CERT: ${AM_AUTH_GRPC_CLIENT_CERT:+/auth-grpc-client.crt} + AM_AUTH_GRPC_CLIENT_KEY: ${AM_AUTH_GRPC_CLIENT_KEY:+/auth-grpc-client.key} + AM_AUTH_GRPC_SERVER_CA_CERTS: ${AM_AUTH_GRPC_SERVER_CA_CERTS:+/auth-grpc-server-ca.crt} AM_DOMAINS_GRPC_URL: ${AM_DOMAINS_GRPC_URL} AM_DOMAINS_GRPC_TIMEOUT: ${AM_DOMAINS_GRPC_TIMEOUT} - AM_DOMAINS_GRPC_CLIENT_CERT: ${AM_DOMAINS_GRPC_CLIENT_CERT} - AM_DOMAINS_GRPC_CLIENT_KEY: ${AM_DOMAINS_GRPC_CLIENT_KEY} - AM_DOMAINS_GRPC_SERVER_CA_CERTS: ${AM_DOMAINS_GRPC_SERVER_CA_CERTS} + AM_DOMAINS_GRPC_CLIENT_CERT: ${AM_DOMAINS_GRPC_CLIENT_CERT:+/domains-grpc-client.crt} + AM_DOMAINS_GRPC_CLIENT_KEY: ${AM_DOMAINS_GRPC_CLIENT_KEY:+/domains-grpc-client.key} + AM_DOMAINS_GRPC_SERVER_CA_CERTS: ${AM_DOMAINS_GRPC_SERVER_CA_CERTS:+/domains-grpc-server-ca.crt} networks: !override - supermq-base-net diff --git a/docker/supermq-docker/docker-compose.yaml b/docker/supermq-docker/docker-compose.yaml index 8b1bf2fd5..f8c88d077 100644 --- a/docker/supermq-docker/docker-compose.yaml +++ b/docker/supermq-docker/docker-compose.yaml @@ -163,45 +163,45 @@ services: # Auth retiring private key file (optional, for key rotation) - type: bind source: ${SMQ_AUTH_KEYS_RETIRING_KEY_PATH:-ssl/certs/dummy/retiring_key} - target: /keys/retiring${SMQ_AUTH_KEYS_RETIRING_KEY_PATH:+.key} + target: /keys/retiring.key read_only: true bind: create_host_path: true # Auth gRPC mTLS server certificates - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CERT:-ssl/certs/dummy/server_cert} - target: /auth-grpc-server${SMQ_AUTH_GRPC_SERVER_CERT:+.crt} + target: /auth-grpc-server.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_KEY:-ssl/certs/dummy/server_key} - target: /auth-grpc-server${SMQ_AUTH_GRPC_SERVER_KEY:+.key} + target: /auth-grpc-server.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca_certs} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CA_CERTS:-ssl/certs/dummy/client_ca_certs} - target: /auth-grpc-client-ca${SMQ_AUTH_GRPC_CLIENT_CA_CERTS:+.crt} + target: /auth-grpc-client-ca.crt bind: create_host_path: true # Auth Callout Client Certificates - type: bind source: ${SMQ_AUTH_CALLOUT_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-callout-client${SMQ_AUTH_CALLOUT_CLIENT_CERT:+.crt} + target: /auth-callout-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_CALLOUT_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-callout-client${SMQ_AUTH_CALLOUT_CLIENT_KEY:+.key} + target: /auth-callout-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_CALLOUT_CLIENT_CA_CERTS:-ssl/certs/dummy/client_ca_certs} - target: /auth-callout-client-ca${SMQ_AUTH_CALLOUT_CLIENT_CA_CERTS:+.crt} + target: /auth-callout-client-ca.crt bind: create_host_path: true @@ -315,86 +315,86 @@ services: # Auth gRPC mTLS server certificates - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CERT:-ssl/certs/dummy/server_cert} - target: /domains-grpc-server${SMQ_DOMAINS_GRPC_SERVER_CERT:+.crt} + target: /domains-grpc-server.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_KEY:-ssl/certs/dummy/server_key} - target: /domains-grpc-server${SMQ_DOMAINS_GRPC_SERVER_KEY:+.key} + target: /domains-grpc-server.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca_certs} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CA_CERTS:-ssl/certs/dummy/client_ca_certs} - target: /domains-grpc-client-ca${SMQ_DOMAINS_GRPC_CLIENT_CA_CERTS:+.crt} + target: /domains-grpc-client-ca.crt bind: create_host_path: true # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true # Groups gRPC client certificates - type: bind source: ${SMQ_GROUPS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /groups-grpc-client${SMQ_GROUPS_GRPC_CLIENT_CERT:+.crt} + target: /groups-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /groups-grpc-client${SMQ_GROUPS_GRPC_CLIENT_KEY:+.key} + target: /groups-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /groups-grpc-server-ca${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:+.crt} + target: /groups-grpc-server-ca.crt bind: create_host_path: true # Channels gRPC client certificates - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_CERT:+.crt} + target: /channels-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_KEY:+.key} + target: /channels-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true # Clients gRPC client certificates - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_CERT:+.crt} + target: /clients-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_KEY:+.key} + target: /clients-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /clients-grpc-server-ca${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:+.crt} + target: /clients-grpc-server-ca.crt bind: create_host_path: true @@ -552,86 +552,86 @@ services: # Clients gRPC server certificates - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CERT:-ssl/certs/dummy/server_cert} - target: /clients-grpc-server${SMQ_CLIENTS_GRPC_SERVER_CERT:+.crt} + target: /clients-grpc-server.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_KEY:-ssl/certs/dummy/server_key} - target: /clients-grpc-server${SMQ_CLIENTS_GRPC_SERVER_KEY:+.key} + target: /clients-grpc-server.key bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca_certs} - target: /clients-grpc-server-ca${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:+.crt} + target: /clients-grpc-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_CA_CERTS:-ssl/certs/dummy/client_ca_certs} - target: /clients-grpc-client-ca${SMQ_CLIENTS_GRPC_CLIENT_CA_CERTS:+.crt} + target: /clients-grpc-client-ca.crt bind: create_host_path: true # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true # Channel gRPC client certificates - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_CERT:+.crt} + target: /channels-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_KEY:+.key} + target: /channels-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true # Group gRPC client certificates - type: bind source: ${SMQ_GROUPS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /groups-grpc-client${SMQ_GROUPS_GRPC_CLIENT_CERT:+.crt} + target: /groups-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /groups-grpc-client${SMQ_GROUPS_GRPC_CLIENT_KEY:+.key} + target: /groups-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /groups-grpc-server-ca${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:+.crt} + target: /groups-grpc-server-ca.crt bind: create_host_path: true # Domain gRPC client certificates - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true @@ -745,86 +745,86 @@ services: # Channels gRPC server certificates - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CERT:-ssl/certs/dummy/server_cert} - target: /channels-grpc-server${SMQ_CHANNELS_GRPC_SERVER_CERT:+.crt} + target: /channels-grpc-server.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_KEY:-ssl/certs/dummy/server_key} - target: /channels-grpc-server${SMQ_CHANNELS_GRPC_SERVER_KEY:+.key} + target: /channels-grpc-server.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca_certs} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CA_CERTS:-ssl/certs/dummy/client_ca_certs} - target: /channels-grpc-client-ca${SMQ_CHANNELS_GRPC_CLIENT_CA_CERTS:+.crt} + target: /channels-grpc-client-ca.crt bind: create_host_path: true # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true # Clients gRPC client certificates - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_CERT:+.crt} + target: /clients-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_KEY:+.key} + target: /clients-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /clients-grpc-server-ca${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:+.crt} + target: /clients-grpc-server-ca.crt bind: create_host_path: true # Groups gRPC client certificates - type: bind source: ${SMQ_GROUPS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /groups-grpc-client${SMQ_GROUPS_GRPC_CLIENT_CERT:+.crt} + target: /groups-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /groups-grpc-client${SMQ_GROUPS_GRPC_CLIENT_KEY:+.key} + target: /groups-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /groups-grpc-server-ca${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:+.crt} + target: /groups-grpc-server-ca.crt bind: create_host_path: true # Domains gRPC client certificates - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true @@ -933,33 +933,33 @@ services: # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true # Domains gRPC client certificates - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true @@ -999,17 +999,17 @@ services: # Users gRPC client certificates - type: bind source: ${SMQ_USERS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /users-grpc-client${SMQ_USERS_GRPC_CLIENT_CERT:+.crt} + target: /users-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_USERS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /users-grpc-client${SMQ_USERS_GRPC_CLIENT_KEY:+.key} + target: /users-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_USERS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /users-grpc-server-ca${SMQ_USERS_GRPC_SERVER_CA_CERTS:+.crt} + target: /users-grpc-server-ca.crt bind: create_host_path: true @@ -1112,86 +1112,86 @@ services: # Groups gRPC server certificates - type: bind source: ${SMQ_GROUPS_GRPC_SERVER_CERT:-ssl/certs/dummy/server_cert} - target: /groups-grpc-server${SMQ_GROUPS_GRPC_SERVER_CERT:+.crt} + target: /groups-grpc-server.crt bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_SERVER_KEY:-ssl/certs/dummy/server_key} - target: /groups-grpc-server${SMQ_GROUPS_GRPC_SERVER_KEY:+.key} + target: /groups-grpc-server.key bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca_certs} - target: /groups-grpc-server-ca${SMQ_GROUPS_GRPC_SERVER_CA_CERTS:+.crt} + target: /groups-grpc-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_GROUPS_GRPC_CLIENT_CA_CERTS:-ssl/certs/dummy/client_ca_certs} - target: /groups-grpc-client-ca${SMQ_GROUPS_GRPC_CLIENT_CA_CERTS:+.crt} + target: /groups-grpc-client-ca.crt bind: create_host_path: true # Auth gRPC client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true # Clients gRPC client certificates - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_CERT:+.crt} + target: /clients-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_KEY:+.key} + target: /clients-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /clients-grpc-server-ca${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:+.crt} + target: /clients-grpc-server-ca.crt bind: create_host_path: true # Channels gRPC client certificates - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_CERT:+.crt} + target: /channels-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_KEY:+.key} + target: /channels-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true # Domains gRPC client certificates - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true @@ -1266,70 +1266,70 @@ services: # TLS certificate for MQTT - type: bind source: ${SMQ_MQTT_ADAPTER_CERT_FILE:-ssl/certs/dummy/server_cert} - target: /mqtt-adapter${SMQ_MQTT_ADAPTER_CERT_FILE:+.crt} + target: /mqtt-adapter.crt bind: create_host_path: true - type: bind source: ${SMQ_MQTT_ADAPTER_KEY_FILE:-ssl/certs/dummy/server_key} - target: /mqtt-adapter${SMQ_MQTT_ADAPTER_KEY_FILE:+.key} + target: /mqtt-adapter.key bind: create_host_path: true - type: bind source: ${SMQ_MQTT_ADAPTER_SERVER_CA_FILE:-ssl/certs/dummy/server_ca} - target: /mqtt-adapter-server-ca${SMQ_MQTT_ADAPTER_SERVER_CA_FILE:+.crt} + target: /mqtt-adapter-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_MQTT_ADAPTER_CLIENT_CA_FILE:-ssl/certs/dummy/client_ca} - target: /mqtt-adapter-client-ca${SMQ_MQTT_ADAPTER_CLIENT_CA_FILE:+.crt} + target: /mqtt-adapter-client-ca.crt bind: create_host_path: true # Clients gRPC mTLS client certificates - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_CERT:+.crt} + target: /clients-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_KEY:+.key} + target: /clients-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /clients-grpc-server-ca${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:+.crt} + target: /clients-grpc-server-ca.crt bind: create_host_path: true # Channels gRPC mTLS client certificates - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_CERT:+.crt} + target: /channels-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_KEY:+.key} + target: /channels-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true # Domains gRPC mTLS client certificates - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true @@ -1384,65 +1384,65 @@ services: # Clients gRPC mTLS client certificates - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_CERT:+.crt} + target: /clients-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_KEY:+.key} + target: /clients-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /clients-grpc-server-ca${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:+.crt} + target: /clients-grpc-server-ca.crt bind: create_host_path: true # Channels gRPC mTLS client certificates - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_CERT:+.crt} + target: /channels-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_KEY:+.key} + target: /channels-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true # Auth gRPC mTLS client certificates - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_CERT:+.crt} + target: /auth-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /auth-grpc-client${SMQ_AUTH_GRPC_CLIENT_KEY:+.key} + target: /auth-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_AUTH_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /auth-grpc-server-ca${SMQ_AUTH_GRPC_SERVER_CA_CERTS:+.crt} + target: /auth-grpc-server-ca.crt bind: create_host_path: true # Domains gRPC mTLS client certificates - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true @@ -1497,70 +1497,70 @@ services: # DTLS certificates for CoAP - type: bind source: ${SMQ_COAP_ADAPTER_SERVER_CERT_FILE:-ssl/certs/dummy/server_cert} - target: /coap-server${SMQ_COAP_ADAPTER_SERVER_CERT_FILE:+.crt} + target: /coap-server.crt bind: create_host_path: true - type: bind source: ${SMQ_COAP_ADAPTER_SERVER_KEY_FILE:-ssl/certs/dummy/server_key} - target: /coap-server${SMQ_COAP_ADAPTER_SERVER_KEY_FILE:+.key} + target: /coap-server.key bind: create_host_path: true - type: bind source: ${SMQ_COAP_ADAPTER_SERVER_CA_FILE:-ssl/certs/dummy/server_ca} - target: /coap-server-ca${SMQ_COAP_ADAPTER_SERVER_CA_FILE:+.crt} + target: /coap-server-ca.crt bind: create_host_path: true # Clients gRPC mTLS client certificates - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_CERT:+.crt} + target: /clients-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /clients-grpc-client${SMQ_CLIENTS_GRPC_CLIENT_KEY:+.key} + target: /clients-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /clients-grpc-server-ca${SMQ_CLIENTS_GRPC_SERVER_CA_CERTS:+.crt} + target: /clients-grpc-server-ca.crt bind: create_host_path: true # Channels gRPC mTLS client certificates - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_CERT:+.crt} + target: /channels-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /channels-grpc-client${SMQ_CHANNELS_GRPC_CLIENT_KEY:+.key} + target: /channels-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /channels-grpc-server-ca${SMQ_CHANNELS_GRPC_SERVER_CA_CERTS:+.crt} + target: /channels-grpc-server-ca.crt bind: create_host_path: true - type: bind source: ${SMQ_CHANNELS_GRPC_CLIENT_CA_CERTS:-ssl/certs/dummy/client_ca} - target: /channels-grpc-client-ca${SMQ_CHANNELS_GRPC_CLIENT_CA_CERTS:+.crt} + target: /channels-grpc-client-ca.crt bind: create_host_path: true # Domains gRPC mTLS client certificates - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_CERT:-ssl/certs/dummy/client_cert} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_CERT:+.crt} + target: /domains-grpc-client.crt bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_CLIENT_KEY:-ssl/certs/dummy/client_key} - target: /domains-grpc-client${SMQ_DOMAINS_GRPC_CLIENT_KEY:+.key} + target: /domains-grpc-client.key bind: create_host_path: true - type: bind source: ${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:-ssl/certs/dummy/server_ca} - target: /domains-grpc-server-ca${SMQ_DOMAINS_GRPC_SERVER_CA_CERTS:+.crt} + target: /domains-grpc-server-ca.crt bind: create_host_path: true