use clientEmail/privateKey instead of keyFilename

Author: adamlacombe

Dockerfile

@@ -12,6 +12,5 @@ EXPOSE 443
 EXPOSE 80
 
 VOLUME /usr/src/app/cache
-VOLUME /usr/src/app/acme
 
 CMD [ "npm", "run", "start" ]

package.json

@@ -13,7 +13,7 @@
   },
   "dependencies": {
     "@interactivetraining/le-challenge-cloudflare": "1.3.1",
-    "@interactivetraining/le-store-gcloud-storage": "0.0.1",
+    "@interactivetraining/le-store-gcloud-storage": "0.0.2",
     "compression": "^1.7.3",
     "cors": "^2.8.5",
     "dotenv": "^5.0.1",

sample.env

@@ -10,5 +10,6 @@ LETS_ENCRYPT_EMAIL=
 LETS_ENCRYPT_AGREE_TO_TOS=true
 GOOGLE_CLOUD_BUCKET_NAME=my-certs
 GOOGLE_CLOUD_PROJECT_ID=my-google-cloud-project-id
-GOOGLE_CLOUD_KEY_FILE_PATH=/path/to/google-cloud-key-file.json
 GOOGLE_CLOUD_CERT_DB_FILE=cert-db.json
+GOOGLE_CLOUD_CLIENT_EMAIL=client-email@my-google-cloud-project-id.iam.gserviceaccount.com
+GOOGLE_CLOUD_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\nEXAMPLE_PRIVATE_KEY\n-----END PRIVATE KEY-----\n"

src/index.ts

@@ -70,8 +70,9 @@ if (process.env.ENABLE_SSL === "1") {
     store: GCloudStoreCreate({
       bucketName: process.env.GOOGLE_CLOUD_BUCKET_NAME,
       projectId: process.env.GOOGLE_CLOUD_PROJECT_ID,
-      keyFilename: process.env.GOOGLE_CLOUD_KEY_FILE_PATH,
-      dbFileName: process.env.GOOGLE_CLOUD_CERT_DB_FILE
+      dbFileName: process.env.GOOGLE_CLOUD_CERT_DB_FILE,
+      privateKey: process.env.GOOGLE_CLOUD_PRIVATE_KEY.trim(),
+      clientEmail: process.env.GOOGLE_CLOUD_CLIENT_EMAIL
     }),
     challengeType: 'dns-01',
     challenge: new CloudflareChallenge({