OA4DOA-FDMR-Monitor-dashboard.md

-Christian, OA4DOA has very kindly customised HBMonitor for FreeDMR. This is now the default dashboard we install with FreeDMR. If, however, you have a need to set this up manually with docker, please replace any existing dasboard definitions with the below code in your docker-compose.yml file:
+Christian, OA4DOA has very kindly customised HBMonitor for FreeDMR. This is now the default dashboard we install with FreeDMR. If, however, you have a need to set this up manually with docker, Please replace any existing dasboard definitions with the below code in your docker-compose.yml file:
 
 
     freedmrmonitor2:
@@ -18,22 +18,39 @@ Christian, OA4DOA has very kindly customised HBMonitor for FreeDMR. This is now
               driver: json-file
 
 
+  
     freedmrmonpache:
         container_name: freedmrmonapache
         cpu_shares: 512
         depends_on:
              - freedmrmonitor2
+        #where to store TLS certificates
+        #and acme.sh files
         volumes:
-        #    - '/var/www/html/:/var/www/html/'
-        #    - '/var/www/html/images/:/var/www/html/images/'
-             - '/etc/freedmr/ph.jpg:/var/www/html/img/logo.png'
+             - '/etc/freedmr/certs/:/opt/apachecerts/'
+             - '/etc/freedmr/acme.sh:/root/.acme.sh/'
         ports:
             - '80:80/tcp'
-        image: 'gitlab.hacknix.net:5050/freedmr/freedmrmonitor2/freedmrmonitor2:apache-development-latest'
+            - '443:443/tcp'
+        image: 'gitlab.hacknix.net:5050/freedmr/freedmrmonitor2/freedmrmonitor2:apache-latest'
         restart: "unless-stopped"
+        environment:
+          #Set to 1 to enable TLS support
+          #you'll need to actually generate the certtificates too
+          #using these commands when the container is running:
+
+          #docker exec -it freedmrmonapache gencert.sh <admin email> <server FQDN>
+          #docker-compose restart freedmrmonapache
+
+          #This only needs to be done once - unless the files in the volumes above are deleted.
+
+          #The container will handle renewing the certificates every 60 days.
+
+          #Note -the gencert.sh script only works when the webserver is available on the default port 80
+          #If it's on non-standard ports, you'll need to request the certificates manually.
+          - 'USE_TLS=1'
         networks:
            app_net:
              ipv4_address: 172.16.238.30
-
         logging:
               driver: json-file
\ No newline at end of file