Copy valid certs from LE jitsi web at startup

cronjob to renew certs is not yet implemented.

docker-compose.yml

@@ -352,6 +352,7 @@ services:
             - TURN_CREDENTIALS
             - TURN_RELAY_MIN_PORT
             - TURN_RELAY_MAX_PORT
+            - TURNS_HOST
             - DOCKER_HOST_ADDRESS
             - JVB_DISABLE_STUN
         depends_on:

eturnal/Dockerfile

@@ -16,7 +16,7 @@ RUN set -x \
     && cp -r /opt/eturnal /rootfs/opt \
 # RUNTIME: install runtime init
     && ARCH=$(uname -m | sed -e 's/x86_64/amd64/;s/aarch64/arm64/;s/armv7l/arm/;s/s390x/s390x/;s/ppc64le/ppc64le/') \ 
-    && curl -fL -o /rootfs/tini https://github.com/krallin/tini/releases/download/v$TINI_VERSION/tini-$ARCH \ 
+    && curl -fL -o /rootfs/tini https://github.com/krallin/tini/releases/download/v$TINI_VERSION/tini-$ARCH \
     && chmod +x /rootfs/tini
 # RUNTIME: copy entrypoint script
 COPY rootfs /rootfs

eturnal/rootfs/usr/sbin/run.sh

@@ -32,8 +32,35 @@ eturnal:
     #  port: 8081           # This is the default.
     #  tls: false           # This is the default.
     #  vm_metrics: true     # This is the default.
+
 EOF
 
+# tls certificates
+TLS_CERT_FILE=$(find /etc/ -name fullchain.pem)
+TLS_KEY_FILE=$(find /etc/ -name key.pem)
+if [ ! -z $TLS_CERT_FILE ] || [ ! -z $TLS_KEY_FILE ]; then
+  echo "  ## TLS certificate/key files (must be readable by 'eturnal' user!):" >> /opt/eturnal/etc/eturnal.yml
+  if [ ! -z $TLS_CERT_FILE ]; then
+    cp -p $TLS_CERT_FILE /opt/eturnal/tls
+    echo "  tls_crt_file: /opt/eturnal/tls/fullchain.pem" >> /opt/eturnal/etc/eturnal.yml
+  fi
+  if [ ! -z $TLS_KEY_FILE ]; then
+    cp -p $TLS_KEY_FILE /opt/eturnal/tls
+    echo "  tls_key_file: /opt/eturnal/tls/key.pem" >> /opt/eturnal/etc/eturnal.yml
+  fi
+fi
+
+# change file permissions
+chown 9000:9000 /opt/eturnal/etc/eturnal.yml
+chmod 640 /opt/eturnal/etc/eturnal.yml
+chown 9000:9000 /opt/eturnal/tls/*
+
+# start certificate renewal cronjob
+#if [ ! -z $TURNS_HOST ]
+#then
+#  crond -b -d
+#fi
+
 # TURN credentials
 if [ ! -z $TURN_CREDENTIALS ]
 then