]> git.street.me.uk Git - andy/dehydrated.git/blob - config.sh.example
A single HOOK to handle challenge, cleaning of challenge files and uploading of certs.
[andy/dehydrated.git] / config.sh.example
1 #!/bin/bash
2
3 # Default values are commented
4
5 #CA="https://acme-v01.api.letsencrypt.org"
6 #WELLKNOWN=".acme-challenges"
7 #KEYSIZE=4096
8 #BASEDIR=./
9 #OPENSSL_CNF=.... # system default (see openssl version -d)
10 #ROOTCERT="lets-encrypt-x1-cross-signed.pem"
11
12 # Program or function called in certain situations
13 #
14 # After generating the challenge-response, or after failed challenge
15 # Given arguments: clean_challenge|deploy_challenge token-filename token-content
16 #
17 # After successfully signing certificate
18 # Given arguments: deploy_cert path/to/privkey.pem path/to/cert.pem path/to/fullchain.pem
19 #
20 # BASEDIR and WELLKNOWN variables are exported and can be used in an external program
21 #HOOK=
22
23 # try to renew certs that are within RENEW_DAYS days of their expiration date
24 #RENEW_DAYS="14"
25
26 # create new private key for each csr (yes|no)
27 #PRIVATE_KEY_RENEW=no
28
29 # email to use during the registration
30 #CONTACT_EMAIL=