feat: add possibility to use custom CA with XO

Author: ronivay

README.md

@@ -111,6 +111,8 @@ services:
           # mount certificate files to container if HTTPS is set with cert/key paths
           #- /path/to/cert.pem:/cert.pem
           #- /path/to/cert.key:/cert.key
+	  # mount your custom CA to container if host certificates are issued by it and you want XO to trust it
+	  #- /path/to/ca.pem:/host-ca.pem
         # logging
         logging: &default_logging
             driver: "json-file"

conf/monit-services

@@ -4,7 +4,7 @@ set httpd port 2812 and
 
 check process xo-server with pidfile /var/run/xo-server.pid
 	depends on redis
-	start program = "/usr/local/bin/forever start -a --pidFile /var/run/xo-server.pid --sourceDir /etc/xen-orchestra/packages/xo-server -l /var/log/xo-server.log dist/cli.mjs"
+	start program = "/usr/bin/env NODE_EXTRA_CA_CERTS=/host-ca.pem /usr/local/bin/forever start -a --pidFile /var/run/xo-server.pid --sourceDir /etc/xen-orchestra/packages/xo-server -l /var/log/xo-server.log dist/cli.mjs"
 	stop program = "/usr/local/bin/forever stop /etc/xen-orchestra/packages/xo-server/dist/cli.mjs"
 
 check process redis with pidfile /var/run/redis.pid

docker-compose.yml

@@ -30,6 +30,8 @@ services:
           # mount certificate files to container if HTTPS is set with cert/key paths
           #- /path/to/cert.pem:/cert.pem
           #- /path/to/cert.key:/cert.key
+          # mount your custom CA to container if host certificates are issued by it and you want XO to trust it
+          #- /path/to/ca.pem:/host-ca.pem
         # logging
         logging: &default_logging
             driver: "json-file"