|
|
# Uncomment and modify any variables you need
|
|
|
# see https://github.com/srvrco/getssl/wiki/Config-variables for details
|
|
|
# see https://github.com/srvrco/getssl/wiki/Example-config-files for example configs
|
|
|
#
|
|
|
CA="https://pebble:14000/dir"
|
|
|
|
|
|
VALIDATE_VIA_DNS=true
|
|
|
DNS_ADD_COMMAND="/getssl/dns_scripts/dns_add_challtestsrv"
|
|
|
DNS_DEL_COMMAND="/getssl/dns_scripts/dns_del_challtestsrv"
|
|
|
PUBLIC_DNS_SERVER=10.30.50.3
|
|
|
DNS_EXTRA_WAIT=""
|
|
|
|
|
|
# Ignore directory domain (i.e. the domain passed on the command line), and just use the domains in the SANS list
|
|
|
IGNORE_DIRECTORY_DOMAIN="true"
|
|
|
SANS="getssl.test,$GETSSL_HOST"
|
|
|
|
|
|
# Acme Challenge Location. The first line for the domain, the following ones for each additional domain.
|
|
|
ACL=(
|
|
|
'/var/www/html/.well-known/acme-challenge'
|
|
|
'/var/www/html/.well-known/acme-challenge'
|
|
|
)
|
|
|
|
|
|
#Set USE_SINGLE_ACL="true" to use a single ACL for all checks
|
|
|
USE_SINGLE_ACL="false"
|
|
|
|
|
|
# Location for all your certs, these can either be on the server (full path name)
|
|
|
# or using ssh /sftp as for the ACL
|
|
|
DOMAIN_CERT_LOCATION="/etc/nginx/pki/server.crt"
|
|
|
DOMAIN_KEY_LOCATION="/etc/nginx/pki/private/server.key"
|
|
|
CA_CERT_LOCATION="/etc/nginx/pki/chain.crt"
|
|
|
DOMAIN_CHAIN_LOCATION="" # this is the domain cert and CA cert
|
|
|
DOMAIN_PEM_LOCATION="" # this is the domain_key, domain cert and CA cert
|
|
|
|
|
|
# The command needed to reload apache / nginx or whatever you use
|
|
|
RELOAD_CMD="cp /getssl/test/test-config/nginx-ubuntu-ssl ${NGINX_CONFIG} && /getssl/test/restart-nginx"
|
|
|
|
|
|
# Define the server type and confirm correct certificate is installed
|
|
|
SERVER_TYPE="https"
|
|
|
CHECK_REMOTE="true"
|