nginx/generate-dhparam


1
2
3
4
5
6
7
8
9
10
11
12
13
14

#!/bin/bash

readonly dhparam=$(openssl dhparam 2048 | base64 -w0)

echo "Inserting new DH parameter ..."
kubectl replace --force -f - <<EOF
apiVersion: v1
kind: Secret
metadata:
  name: nginx-dhparam
data:
  tls.dhparam: ${dhparam}
EOF