about summary refs log tree commit diff
path: root/nginx/generate-dhparam
blob: ef923cc7f6daba50825ec6c83617050ebdffce7a (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
#!/bin/bash

readonly dhparam=$(openssl dhparam 2048 | base64 -w0)

echo "Inserting new DH parameter ..."
kubectl replace --force -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: nginx-dhparam
data:
  tls.dhparam: ${dhparam}
EOF