From 61642b766baaa8cef62f5a7ea3c29d8ebdbd86ea Mon Sep 17 00:00:00 2001 From: Francis Lavoie Date: Sun, 9 May 2021 00:37:27 -0400 Subject: caddytls: Run replacer on ask URL, for env vars (#4154) Fixes #3922 --- modules/caddytls/tls.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/modules/caddytls/tls.go b/modules/caddytls/tls.go index c111bbba2..a93183e6f 100644 --- a/modules/caddytls/tls.go +++ b/modules/caddytls/tls.go @@ -87,6 +87,7 @@ func (TLS) CaddyModule() caddy.ModuleInfo { func (t *TLS) Provision(ctx caddy.Context) error { t.ctx = ctx t.logger = ctx.Logger(t) + repl := caddy.NewReplacer() // set up a new certificate cache; this (re)loads all certificates cacheOpts := certmagic.CacheOptions{ @@ -176,6 +177,11 @@ func (t *TLS) Provision(ctx caddy.Context) error { onDemandRateLimiter.SetWindow(0) } + // run replacer on ask URL (for environment variables) + if t.Automation != nil && t.Automation.OnDemand != nil && t.Automation.OnDemand.Ask != "" { + t.Automation.OnDemand.Ask = repl.ReplaceAll(t.Automation.OnDemand.Ask, "") + } + // load manual/static (unmanaged) certificates - we do this in // provision so that other apps (such as http) can know which // certificates have been manually loaded, and also so that -- cgit v1.2.3