acme.conf.{5,sample}: document ACME_DATADIR

2 files changed, 11 insertions, 9 deletions

diff --git a/acme.conf.5 b/acme.conf.5
index 8b2d297..f03f777 100644
--- a/acme.conf.5
+++ b/acme.conf.5
@@ -17,15 +17,17 @@ The following variables may be set:
 .It Va ACME_URL
 (Required.)
 The URL of the ACME server.
-.It Va ACME_DIR
-(Required.)
-The path to the base configuration directory, where certificates will be stored.
+.It Va ACME_DATADIR
+The path to the runtime datadirectory, where the ACME account key and any
+issued certificates will be stored.
+The default value is
+.Pa /var/db/lfacme .
 .It Va ACME_HOOKDIR
 The path to a directory containing hooks to invoke when issuing certificates
 (see
 .Xr domains.conf 5 ) .
 The default value is
-.Pa ${ACME_DIR}/hooks .
+.Pa /usr/local/etc/lfacme/hooks .
 .It Va ACME_KERBEROS_PRINCIPAL
 The Kerberos principal to use when responding to a
 .Dq dns-01
diff --git a/acme.conf.sample b/acme.conf.sample
index 573520b..2fb4ca6 100644
--- a/acme.conf.sample
+++ b/acme.conf.sample
@@ -12,15 +12,15 @@
 #ACME_URL="https://acme-staging-v02.api.letsencrypt.org/directory"
 
 
-### ACME_DIR: The path to lfacme's configuration directory.
-# This is also where generated certificates are stored.
-# No default, you must set this.
+### ACME_DATADIR: Runtime data directory.
+# This is where the ACME account key and the issued certificates are stored.
+# The default is /var/db/lfacme.
 
-#ACME_DIR="/usr/local/etc/acme"
+#ACME_DATADIR="/var/db/lfacme"
 
 
 ### ACME_HOOKDIR: The path to the directory containing certificate hooks.
-# The default is "${ACME_DIR}/hooks".
+# The default is "/usr/local/etc/lfacme/hooks".
 # There is usually no need to change this.
 
 #ACME_HOOKDIR="/some/directory"