From 5f7267c043e7bc21d85ee36e1b2beb9c861b5923 Mon Sep 17 00:00:00 2001 From: Ali Date: Thu, 4 Jun 2026 06:58:04 +0330 Subject: [PATCH 1/3] support for skip ssl verify of S3 endpoint --- Dockerfile | 2 +- README.md | 1 + backup.sh | 5 ++++- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 2c5a7a9..c07a9e3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -17,7 +17,7 @@ LABEL maintainer="ITBM" RUN apk update \ && apk upgrade \ - && apk add coreutils postgresql17-client aws-cli openssl pigz \ + && apk add coreutils postgresql17-client aws-cli openssl pigz ca-certificates \ && rm -rf /var/cache/apk/* COPY --from=build /app/out/go-cron /usr/local/bin/go-cron diff --git a/README.md b/README.md index 7851d1d..9b23347 100644 --- a/README.md +++ b/README.md @@ -88,6 +88,7 @@ spec: | S3_PREFIX | backup | | Path prefix in your bucket | | S3_REGION | us-west-1 | | The AWS S3 bucket region | | S3_ENDPOINT | | | The AWS Endpoint URL, for S3 Compliant APIs such as [minio](https://minio.io) | +| S3_SSL_VERIFY | | | Check S3 endpoint ssl | | S3_S3V4 | no | | Set to `yes` to enable AWS Signature Version 4, required for [minio](https://minio.io) servers | | SCHEDULE | | | Backup schedule time, see explainatons below | | ENCRYPTION_PASSWORD | | | Password to encrypt/decrypt the backup | diff --git a/backup.sh b/backup.sh index 8fd1932..9c30be3 100644 --- a/backup.sh +++ b/backup.sh @@ -48,7 +48,10 @@ fi if [ "${S3_ENDPOINT}" == "**None**" ]; then AWS_ARGS="" else - AWS_ARGS="--endpoint-url ${S3_ENDPOINT}" + if [ "${S3_SSL_VERIFY}" == "false" ]; then + AWS_ARGS="--endpoint-url --no-verify-ssl ${S3_ENDPOINT}" + else + AWS_ARGS="--endpoint-url ${S3_ENDPOINT}" fi export AWS_ACCESS_KEY_ID=$S3_ACCESS_KEY_ID From c7b8f3d6535c4c93178021c7033c53faa3f33775 Mon Sep 17 00:00:00 2001 From: Ali Date: Thu, 4 Jun 2026 07:04:27 +0330 Subject: [PATCH 2/3] add S3_SSL_VERIFY env to Dockerfile --- Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile b/Dockerfile index c07a9e3..edb64da 100644 --- a/Dockerfile +++ b/Dockerfile @@ -34,6 +34,7 @@ ENV S3_BUCKET **None** ENV S3_REGION us-west-1 ENV S3_PREFIX 'backup' ENV S3_ENDPOINT **None** +ENV S3_SSL_VERIFY true ENV S3_S3V4 no ENV SCHEDULE **None** ENV ENCRYPTION_PASSWORD **None** From 812f4dc6c8e9ff1f6ea77c717f92ceb97edf110f Mon Sep 17 00:00:00 2001 From: Ali Date: Thu, 4 Jun 2026 07:22:59 +0330 Subject: [PATCH 3/3] fix if block typo --- backup.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/backup.sh b/backup.sh index 9c30be3..110d972 100644 --- a/backup.sh +++ b/backup.sh @@ -49,9 +49,10 @@ if [ "${S3_ENDPOINT}" == "**None**" ]; then AWS_ARGS="" else if [ "${S3_SSL_VERIFY}" == "false" ]; then - AWS_ARGS="--endpoint-url --no-verify-ssl ${S3_ENDPOINT}" + AWS_ARGS="--endpoint-url ${S3_ENDPOINT} --no-verify-ssl" else AWS_ARGS="--endpoint-url ${S3_ENDPOINT}" + fi fi export AWS_ACCESS_KEY_ID=$S3_ACCESS_KEY_ID