2020-11-03 23:19:19 +01:00
|
|
|
# {{ ansible_managed }}
|
2020-05-09 12:54:38 +02:00
|
|
|
|
|
|
|
|
# Pour appliquer cette conf et générer la conf de renewal :
|
|
|
|
|
# certbot --config wildcard.ini certonly
|
|
|
|
|
|
|
|
|
|
# Use a 4096 bit RSA key instead of 2048
|
|
|
|
|
rsa-key-size = 4096
|
|
|
|
|
|
|
|
|
|
# Always use the staging/testing server
|
|
|
|
|
# server = https://acme-staging.api.letsencrypt.org/directory
|
|
|
|
|
|
|
|
|
|
# Uncomment and update to register with the specified e-mail address
|
|
|
|
|
email = {{ certbot.mail }}
|
|
|
|
|
|
|
|
|
|
# Uncomment to use a text interface instead of ncurses
|
|
|
|
|
text = True
|
|
|
|
|
|
|
|
|
|
# Use DNS-01 challenge
|
|
|
|
|
authenticator = dns-rfc2136
|
|
|
|
|
dns-rfc2136-credentials = /etc/letsencrypt/rfc2136.ini
|
|
|
|
|
dns-rfc2136-propagation-seconds = 30
|
|
|
|
|
|
|
|
|
|
# Wildcard the domain
|
|
|
|
|
cert-name = {{ certbot.certname }}
|
|
|
|
|
domains = {{ certbot.domains }}
|
