Added LE_KEYSIZE environment variable

config

@@ -46,7 +46,7 @@ CERTDIR="/etc/ssl"
 WELLKNOWN="/var/www/.well-known/acme-challenge"
 
 # Default keysize for private keys (default: 4096)
-#KEYSIZE="4096"
+KEYSIZE="4096"
 
 # Path to openssl config file (default: <unset> - tries to figure out system default)
 #OPENSSL_CNF=
@@ -85,4 +85,4 @@ KEY_ALGO=secp384r1
 #LOCKFILE="${BASEDIR}/lock"
 
 # Option to add CSR-flag indicating OCSP stapling to be mandatory (default: no)
-OCSP_MUST_STAPLE="yes"
+OCSP_MUST_STAPLE="yes"

docker-entrypoint.sh

@@ -37,5 +37,13 @@ else
     fi
 fi
 
+if [ "${LE_KEYSIZE}" == '2048' ]; then
+    echo "***** KEY SIZE ${LE_KEYSIZE} bits *****"
+    sed -i 's@KEYSIZE=.*@KEYSIZE="2048"@g' /etc/dehydrated/config
+else
+    echo "***** KEY SIZE 4096 bits *****"
+fi
+
+
 echo "${@}"
 exec "${@}"