__PAGE__?{"version":"v0.17","data":"[{\"slug\":\"certbot\",\"name\":\"Certbot\",\"about\":\"Generate SSL certificates using Certbot.\",\"longAbout\":\"This job uses Certbot to obtain and renew SSL certificates for a specified domain.\\nIt is designed to run each 2 weeks and can be configured to use a test certificate.\\nThe generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\",\"tags\":[\"job\",\"security\"],\"latestVersion\":\"0.1.0\",\"yamlPath\":\"/statefiles/v0.17/certbot/0.1.0.yml\",\"yamlText\":\"ApiVersion: v0.17\\n\\nMetadata:\\n Name: Certbot\\n Tags:\\n - job\\n - security\\n About: Generate SSL certificates using Certbot.\\n LongAbout: |\\n This job uses Certbot to obtain and renew SSL certificates for a specified domain.\\n It is designed to run each 2 weeks and can be configured to use a test certificate.\\n The generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\\nArgs:\\n- Name: email\\n Kind: String\\n Required: true\\n Description: Email address for Certbot registration and recovery contact.\\n- Name: domain\\n Kind: String\\n Required: true\\n Description: Domain name for which to generate the SSL certificate.\\n- Name: test\\n Kind: Boolean\\n Description: Use a test certificate from Let's Encrypt.\\n\\nJobs:\\n- Name: certbot-gen-${{ Args.domain }}\\n Schedule: 0 0 */14 * *\\n Containers:\\n - Image: ubuntu:24.10\\n Tty: false\\n HostConfig:\\n NetworkMode: host\\n PidMode: container:nproxy.system.c\\n VolumesFrom:\\n - nproxy.system.c\\n Cmd:\\n - /bin/sh\\n - -c\\n - |\\n export DEBIAN_FRONTEND=noninteractive\\n apt-get update -yqq\\n apt-get install --force-yes -yqq wget certbot python3-certbot-nginx nginx-extras\\n wget https://github.com/nxthat/nanocl/releases/download/nanocl-0.16.0-nightly/nanocl_0.16.0_amd64.deb\\n dpkg -i nanocl_0.16.0_amd64.deb\\n certbot --nginx -n \\\\\\n --agree-tos \\\\\\n --email ${{ Args.email }} \\\\\\n --force-renewal \\\\\\n -d ${{ Args.domain }} \\\\\\n {% if Args.test %}--test-cert {% endif %} \\\\\\n --nginx-server-root /var/lib/nanocl/proxy\\n FULL_CHAIN=`cat /etc/letsencrypt/live/${{ Args.domain }}/fullchain.pem | awk 1 ORS='\\\\\\\\\\\\n'`\\n PRIV_KEY=`cat /etc/letsencrypt/live/${{ Args.domain }}/privkey.pem | awk 1 ORS='\\\\\\\\\\\\n'`\\n cat < /tmp/secret.yaml\\n ApiVersion: v0.16\\n Secrets:\\n - Name: cert.{% if Args.test %}test.{% endif %}${{ Args.domain }}\\n Kind: nanocl.io/tls\\n Data:\\n Certificate: \\\"$FULL_CHAIN\\\"\\n CertificateKey: \\\"$PRIV_KEY\\\"\\n EOF\\n cat /tmp/secret.yaml\\n nanocl state apply -ys /tmp/secret.yaml\\n\",\"versions\":{\"0.1.0\":{\"version\":\"0.1.0\",\"name\":\"Certbot\",\"about\":\"Generate SSL certificates using Certbot.\",\"longAbout\":\"This job uses Certbot to obtain and renew SSL certificates for a specified domain.\\nIt is designed to run each 2 weeks and can be configured to use a test certificate.\\nThe generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\",\"tags\":[\"job\",\"security\"],\"yamlPath\":\"/statefiles/v0.17/certbot/0.1.0.yml\",\"yamlText\":\"ApiVersion: v0.17\\n\\nMetadata:\\n Name: Certbot\\n Tags:\\n - job\\n - security\\n About: Generate SSL certificates using Certbot.\\n LongAbout: |\\n This job uses Certbot to obtain and renew SSL certificates for a specified domain.\\n It is designed to run each 2 weeks and can be configured to use a test certificate.\\n The generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\\nArgs:\\n- Name: email\\n Kind: String\\n Required: true\\n Description: Email address for Certbot registration and recovery contact.\\n- Name: domain\\n Kind: String\\n Required: true\\n Description: Domain name for which to generate the SSL certificate.\\n- Name: test\\n Kind: Boolean\\n Description: Use a test certificate from Let's Encrypt.\\n\\nJobs:\\n- Name: certbot-gen-${{ Args.domain }}\\n Schedule: 0 0 */14 * *\\n Containers:\\n - Image: ubuntu:24.10\\n Tty: false\\n HostConfig:\\n NetworkMode: host\\n PidMode: container:nproxy.system.c\\n VolumesFrom:\\n - nproxy.system.c\\n Cmd:\\n - /bin/sh\\n - -c\\n - |\\n export DEBIAN_FRONTEND=noninteractive\\n apt-get update -yqq\\n apt-get install --force-yes -yqq wget certbot python3-certbot-nginx nginx-extras\\n wget https://github.com/nxthat/nanocl/releases/download/nanocl-0.16.0-nightly/nanocl_0.16.0_amd64.deb\\n dpkg -i nanocl_0.16.0_amd64.deb\\n certbot --nginx -n \\\\\\n --agree-tos \\\\\\n --email ${{ Args.email }} \\\\\\n --force-renewal \\\\\\n -d ${{ Args.domain }} \\\\\\n {% if Args.test %}--test-cert {% endif %} \\\\\\n --nginx-server-root /var/lib/nanocl/proxy\\n FULL_CHAIN=`cat /etc/letsencrypt/live/${{ Args.domain }}/fullchain.pem | awk 1 ORS='\\\\\\\\\\\\n'`\\n PRIV_KEY=`cat /etc/letsencrypt/live/${{ Args.domain }}/privkey.pem | awk 1 ORS='\\\\\\\\\\\\n'`\\n cat < /tmp/secret.yaml\\n ApiVersion: v0.16\\n Secrets:\\n - Name: cert.{% if Args.test %}test.{% endif %}${{ Args.domain }}\\n Kind: nanocl.io/tls\\n Data:\\n Certificate: \\\"$FULL_CHAIN\\\"\\n CertificateKey: \\\"$PRIV_KEY\\\"\\n EOF\\n cat /tmp/secret.yaml\\n nanocl state apply -ys /tmp/secret.yaml\\n\"}}},{\"slug\":\"openssl-self-signed\",\"name\":\"Openssl Self-Signed\",\"about\":\"Generate a self-signed SSL certificate using OpenSSL and store it as a Nanocl secret.\",\"longAbout\":\"This job generates a self-signed SSL certificate using OpenSSL and stores it as a Nanocl secret.\\nIt is useful for testing purposes or internal services where a trusted CA-signed certificate is not required.\\n\",\"tags\":[\"job\",\"ssl\",\"certificate\",\"security\"],\"latestVersion\":\"0.1.0\",\"yamlPath\":\"/statefiles/v0.17/openssl-self-signed/0.1.0.yml\",\"yamlText\":\"ApiVersion: v0.17\\n\\nMetadata:\\n Name: Openssl Self-Signed\\n Tags:\\n - job\\n - ssl\\n - certificate\\n - security\\n About: Generate a self-signed SSL certificate using OpenSSL and store it as a Nanocl secret.\\n LongAbout: |\\n This job generates a self-signed SSL certificate using OpenSSL and stores it as a Nanocl secret.\\n It is useful for testing purposes or internal services where a trusted CA-signed certificate is not required.\\n\\nArgs:\\n- Name: domain\\n Kind: String\\n Required: true\\n\\nJobs:\\n- Name: openssl-self-signed\\n Ttl: 5\\n Containers:\\n - Image: ubuntu:25.04\\n HostConfig:\\n Binds:\\n - /run/nanocl/nanocl.sock:/run/nanocl/nanocl.sock\\n Cmd:\\n - /bin/sh\\n - '-c'\\n - |\\n export DEBIAN_FRONTEND=noninteractive\\n apt-get update -yqq\\n apt-get install -yqq openssl wget\\n wget https://github.com/nxthat/nanocl/releases/download/nanocl-0.17.0-nightly/nanocl_0.17.0_amd64.deb\\n dpkg -i nanocl_0.17.0_amd64.deb\\n openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365 -subj \\\"/CN=${{ Args.domain }}\\\"\\n # Test if secret already exists and patch it instead\\n if nanocl secret inspect tls.${{ Args.domain }} > /dev/null 2>&1; then\\n nanocl secret patch tls.${{ Args.domain }} tls --certificate-path ./cert.pem --certificate-key-path ./key.pem\\n echo \\\"Self-signed certificate for domain '${{ Args.domain }}' has been updated and stored as secret 'tls.${{ Args.domain }}'.\\\"\\n else\\n nanocl secret create tls.${{ Args.domain }} tls --certificate-path ./cert.pem --certificate-key-path ./key.pem\\n echo \\\"Self-signed certificate for domain '${{ Args.domain }}' has been created and stored as secret 'tls.${{ Args.domain }}'.\\\"\\n fi\",\"versions\":{\"0.1.0\":{\"version\":\"0.1.0\",\"name\":\"Openssl Self-Signed\",\"about\":\"Generate a self-signed SSL certificate using OpenSSL and store it as a Nanocl secret.\",\"longAbout\":\"This job generates a self-signed SSL certificate using OpenSSL and stores it as a Nanocl secret.\\nIt is useful for testing purposes or internal services where a trusted CA-signed certificate is not required.\\n\",\"tags\":[\"job\",\"ssl\",\"certificate\",\"security\"],\"yamlPath\":\"/statefiles/v0.17/openssl-self-signed/0.1.0.yml\",\"yamlText\":\"ApiVersion: v0.17\\n\\nMetadata:\\n Name: Openssl Self-Signed\\n Tags:\\n - job\\n - ssl\\n - certificate\\n - security\\n About: Generate a self-signed SSL certificate using OpenSSL and store it as a Nanocl secret.\\n LongAbout: |\\n This job generates a self-signed SSL certificate using OpenSSL and stores it as a Nanocl secret.\\n It is useful for testing purposes or internal services where a trusted CA-signed certificate is not required.\\n\\nArgs:\\n- Name: domain\\n Kind: String\\n Required: true\\n\\nJobs:\\n- Name: openssl-self-signed\\n Ttl: 5\\n Containers:\\n - Image: ubuntu:25.04\\n HostConfig:\\n Binds:\\n - /run/nanocl/nanocl.sock:/run/nanocl/nanocl.sock\\n Cmd:\\n - /bin/sh\\n - '-c'\\n - |\\n export DEBIAN_FRONTEND=noninteractive\\n apt-get update -yqq\\n apt-get install -yqq openssl wget\\n wget https://github.com/nxthat/nanocl/releases/download/nanocl-0.17.0-nightly/nanocl_0.17.0_amd64.deb\\n dpkg -i nanocl_0.17.0_amd64.deb\\n openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365 -subj \\\"/CN=${{ Args.domain }}\\\"\\n # Test if secret already exists and patch it instead\\n if nanocl secret inspect tls.${{ Args.domain }} > /dev/null 2>&1; then\\n nanocl secret patch tls.${{ Args.domain }} tls --certificate-path ./cert.pem --certificate-key-path ./key.pem\\n echo \\\"Self-signed certificate for domain '${{ Args.domain }}' has been updated and stored as secret 'tls.${{ Args.domain }}'.\\\"\\n else\\n nanocl secret create tls.${{ Args.domain }} tls --certificate-path ./cert.pem --certificate-key-path ./key.pem\\n echo \\\"Self-signed certificate for domain '${{ Args.domain }}' has been created and stored as secret 'tls.${{ Args.domain }}'.\\\"\\n fi\"}}},{\"slug\":\"remote-nanocld\",\"name\":\"Remote Nanocld\",\"about\":\"Enable remote access to the Nanocl daemon.\",\"longAbout\":\"This job enables remote access to the Nanocl daemon by generating TLS certificates and creating a proxy rule.\\nIt generates a self-signed CA and server certificate, which are used to secure the connection to the Nanocl daemon.\\nThe client certificate is also generated and can be used to authenticate clients connecting to the daemon.\\nThe generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\\nYou can display the client certificate using the command:\\n```bash\\nnanocl secret inspect cert.client.nanocl.io\\n```\\n\",\"tags\":[\"job\",\"security\",\"access\"],\"latestVersion\":\"0.1.0\",\"yamlPath\":\"/statefiles/v0.17/remote-nanocld/0.1.0.yml\",\"yamlText\":\"ApiVersion: v0.17\\n\\nMetadata:\\n Name: Remote Nanocld\\n Tags:\\n - job\\n - security\\n - access\\n About: Enable remote access to the Nanocl daemon.\\n LongAbout: |\\n This job enables remote access to the Nanocl daemon by generating TLS certificates and creating a proxy rule.\\n It generates a self-signed CA and server certificate, which are used to secure the connection to the Nanocl daemon.\\n The client certificate is also generated and can be used to authenticate clients connecting to the daemon.\\n The generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\\n You can display the client certificate using the command:\\n ```bash\\n nanocl secret inspect cert.client.nanocl.io\\n ```\\n\\nArgs:\\n- Name: port\\n Kind: Number\\n Default: 9943\\n Description: Port to expose the nanocld API on.\\n\\nJobs:\\n- Name: enable-remote-nanocld\\n Ttl: 5\\n Containers:\\n - Image: ubuntu:latest\\n Entrypoint:\\n - /bin/sh\\n HostConfig:\\n Binds:\\n - /run/nanocl/nanocl.sock:/run/nanocl/nanocl.sock\\n Cmd:\\n - -c\\n - |\\n apt-get update -y\\n apt-get install -y openssl wget\\n openssl req -x509 -newkey rsa:4096 -keyout ca.key -out ca.crt -days 365 -nodes -subj \\\"/CN=NanoclCA\\\"\\n openssl req -newkey rsa:4096 -keyout server.key -out server.csr -nodes -subj \\\"/CN=*\\\"\\n openssl x509 -req -in server.csr -out server.crt -CA ca.crt -CAkey ca.key -CAcreateserial -days 365\\n openssl req -newkey rsa:4096 -keyout client.key -out client.csr -nodes -subj \\\"/CN=NanoclClient\\\"\\n openssl x509 -req -in client.csr -out client.crt -CA ca.crt -CAkey ca.key -CAcreateserial -days 365\\n wget https://github.com/next-hat/nanocl/releases/download/nanocl-0.16.0-nightly/nanocl_0.16.0_amd64.deb\\n dpkg -i nanocl_0.16.0_amd64.deb\\n CERT=`cat server.crt | awk 1 ORS='\\\\\\\\\\\\n'`\\n CERT_KEY=`cat server.key | awk 1 ORS='\\\\\\\\\\\\n'`\\n CERT_CLIENT=`cat ca.crt | awk 1 ORS='\\\\\\\\\\\\n'`\\n cat < /tmp/secret.yaml\\n ApiVersion: v0.16\\n Secrets:\\n - Name: cert.daemon.nanocl.io\\n Kind: nanocl.io/tls\\n Data:\\n Certificate: \\\"$CERT\\\"\\n CertificateKey: \\\"$CERT_KEY\\\"\\n CertificateClient: \\\"$CERT_CLIENT\\\"\\n VerifyClient: true\\n EOF\\n cat /tmp/secret.yaml\\n nanocl state apply -ys /tmp/secret.yaml\\n CERT=`cat client.crt | awk 1 ORS='\\\\\\\\\\\\n'`\\n CERT_KEY=`cat client.key | awk 1 ORS='\\\\\\\\\\\\n'`\\n cat < tmp/secret.yaml\\n ApiVersion: v0.16\\n Secrets:\\n - Name: cert.client.nanocl.io\\n Kind: nanocl.io/tls\\n Metadata:\\n nanocl.io/secret-type: client\\n Data:\\n Certificate: \\\"$CERT\\\"\\n CertificateKey: \\\"$CERT_KEY\\\"\\n EOF\\n cat /tmp/secret.yaml\\n nanocl state apply -ys /tmp/secret.yaml\\n\\nResources:\\n- Name: tcp.${{ Args.port }}.daemon.nanocl.io\\n Kind: ncproxy.io/rule\\n Data:\\n Rules:\\n - Protocol: Tcp\\n Port: ${{ Args.port }}\\n Network: All\\n Ssl: cert.daemon.nanocl.io\\n Target:\\n UnixPath: /run/nanocl/nanocl.sock\\n\",\"versions\":{\"0.1.0\":{\"version\":\"0.1.0\",\"name\":\"Remote Nanocld\",\"about\":\"Enable remote access to the Nanocl daemon.\",\"longAbout\":\"This job enables remote access to the Nanocl daemon by generating TLS certificates and creating a proxy rule.\\nIt generates a self-signed CA and server certificate, which are used to secure the connection to the Nanocl daemon.\\nThe client certificate is also generated and can be used to authenticate clients connecting to the daemon.\\nThe generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\\nYou can display the client certificate using the command:\\n```bash\\nnanocl secret inspect cert.client.nanocl.io\\n```\\n\",\"tags\":[\"job\",\"security\",\"access\"],\"yamlPath\":\"/statefiles/v0.17/remote-nanocld/0.1.0.yml\",\"yamlText\":\"ApiVersion: v0.17\\n\\nMetadata:\\n Name: Remote Nanocld\\n Tags:\\n - job\\n - security\\n - access\\n About: Enable remote access to the Nanocl daemon.\\n LongAbout: |\\n This job enables remote access to the Nanocl daemon by generating TLS certificates and creating a proxy rule.\\n It generates a self-signed CA and server certificate, which are used to secure the connection to the Nanocl daemon.\\n The client certificate is also generated and can be used to authenticate clients connecting to the daemon.\\n The generated certificates are stored as secrets in Nanocl for easy integration with other services.\\n\\n You can display the client certificate using the command:\\n ```bash\\n nanocl secret inspect cert.client.nanocl.io\\n ```\\n\\nArgs:\\n- Name: port\\n Kind: Number\\n Default: 9943\\n Description: Port to expose the nanocld API on.\\n\\nJobs:\\n- Name: enable-remote-nanocld\\n Ttl: 5\\n Containers:\\n - Image: ubuntu:latest\\n Entrypoint:\\n - /bin/sh\\n HostConfig:\\n Binds:\\n - /run/nanocl/nanocl.sock:/run/nanocl/nanocl.sock\\n Cmd:\\n - -c\\n - |\\n apt-get update -y\\n apt-get install -y openssl wget\\n openssl req -x509 -newkey rsa:4096 -keyout ca.key -out ca.crt -days 365 -nodes -subj \\\"/CN=NanoclCA\\\"\\n openssl req -newkey rsa:4096 -keyout server.key -out server.csr -nodes -subj \\\"/CN=*\\\"\\n openssl x509 -req -in server.csr -out server.crt -CA ca.crt -CAkey ca.key -CAcreateserial -days 365\\n openssl req -newkey rsa:4096 -keyout client.key -out client.csr -nodes -subj \\\"/CN=NanoclClient\\\"\\n openssl x509 -req -in client.csr -out client.crt -CA ca.crt -CAkey ca.key -CAcreateserial -days 365\\n wget https://github.com/next-hat/nanocl/releases/download/nanocl-0.16.0-nightly/nanocl_0.16.0_amd64.deb\\n dpkg -i nanocl_0.16.0_amd64.deb\\n CERT=`cat server.crt | awk 1 ORS='\\\\\\\\\\\\n'`\\n CERT_KEY=`cat server.key | awk 1 ORS='\\\\\\\\\\\\n'`\\n CERT_CLIENT=`cat ca.crt | awk 1 ORS='\\\\\\\\\\\\n'`\\n cat < /tmp/secret.yaml\\n ApiVersion: v0.16\\n Secrets:\\n - Name: cert.daemon.nanocl.io\\n Kind: nanocl.io/tls\\n Data:\\n Certificate: \\\"$CERT\\\"\\n CertificateKey: \\\"$CERT_KEY\\\"\\n CertificateClient: \\\"$CERT_CLIENT\\\"\\n VerifyClient: true\\n EOF\\n cat /tmp/secret.yaml\\n nanocl state apply -ys /tmp/secret.yaml\\n CERT=`cat client.crt | awk 1 ORS='\\\\\\\\\\\\n'`\\n CERT_KEY=`cat client.key | awk 1 ORS='\\\\\\\\\\\\n'`\\n cat < tmp/secret.yaml\\n ApiVersion: v0.16\\n Secrets:\\n - Name: cert.client.nanocl.io\\n Kind: nanocl.io/tls\\n Metadata:\\n nanocl.io/secret-type: client\\n Data:\\n Certificate: \\\"$CERT\\\"\\n CertificateKey: \\\"$CERT_KEY\\\"\\n EOF\\n cat /tmp/secret.yaml\\n nanocl state apply -ys /tmp/secret.yaml\\n\\nResources:\\n- Name: tcp.${{ Args.port }}.daemon.nanocl.io\\n Kind: ncproxy.io/rule\\n Data:\\n Rules:\\n - Protocol: Tcp\\n Port: ${{ Args.port }}\\n Network: All\\n Ssl: cert.daemon.nanocl.io\\n Target:\\n UnixPath: /run/nanocl/nanocl.sock\\n\"}}}]"}

Nanocl Registry

v0.17

job