You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
45 lines
1.7 KiB
45 lines
1.7 KiB
# vim: filetype=sh
|
|
#
|
|
# This file is read first and is common to all domains
|
|
#
|
|
# Uncomment and modify any variables you need
|
|
# see https://github.com/srvrco/getssl/wiki/Config-variables for details
|
|
#
|
|
# The staging server is best for testing (hence set as default)
|
|
CA="https://acme-staging-v02.api.letsencrypt.org"
|
|
# This server issues full certificates, however has rate limits
|
|
#CA="https://acme-v02.api.letsencrypt.org"
|
|
|
|
# The agreement that must be signed with the CA, if not defined the default agreement will be used
|
|
#AGREEMENT=""
|
|
|
|
# Set an email address associated with your account - generally set at account level rather than domain.
|
|
#ACCOUNT_EMAIL="me@example.com"
|
|
ACCOUNT_KEY_LENGTH=4096
|
|
ACCOUNT_KEY="/etc/getssl/account.key"
|
|
|
|
# Account key and private key types - can be rsa, prime256v1, secp384r1 or secp521r1
|
|
#ACCOUNT_KEY_TYPE="rsa"
|
|
PRIVATE_KEY_ALG="rsa"
|
|
#REUSE_PRIVATE_KEY="true"
|
|
|
|
# The command needed to reload apache / nginx or whatever you use
|
|
#RELOAD_CMD=""
|
|
|
|
# The time period within which you want to allow renewal of a certificate
|
|
# this prevents hitting some of the rate limits.
|
|
# Creating a file called FORCE_RENEWAL in the domain directory allows one-off overrides
|
|
# of this setting
|
|
RENEW_ALLOW="30"
|
|
|
|
# Define the server type. This can be https, ftp, ftpi, imap, imaps, pop3, pop3s, smtp,
|
|
# smtps_deprecated, smtps, smtp_submission, xmpp, xmpps, ldaps or a port number which
|
|
# will be checked for certificate expiry and also will be checked after
|
|
# an update to confirm correct certificate is running (if CHECK_REMOTE) is set to true
|
|
SERVER_TYPE="https"
|
|
CHECK_REMOTE="true"
|
|
|
|
# Use the following 3 variables if you want to validate via DNS
|
|
#VALIDATE_VIA_DNS="true"
|
|
#DNS_ADD_COMMAND=
|
|
#DNS_DEL_COMMAND=
|