aboutsummaryrefslogtreecommitdiffstats
path: root/domains.conf.sample.in
diff options
context:
space:
mode:
authorLexi Winter <ivy@FreeBSD.org>2025-06-04 10:42:19 +0100
committerLexi Winter <ivy@FreeBSD.org>2025-06-04 10:56:04 +0100
commit15010d062ae276a92065cd6ea7dc94b749e20756 (patch)
tree8745f89f933826afbb329b4fc447186a1200610d /domains.conf.sample.in
parent09aa3870070960d37d7bdbb724f4ac7b68395fdf (diff)
downloadlfacme-15010d062ae276a92065cd6ea7dc94b749e20756.tar.gz
lfacme-15010d062ae276a92065cd6ea7dc94b749e20756.tar.bz2
allow PREFIX to be customised
Diffstat (limited to 'domains.conf.sample.in')
-rw-r--r--domains.conf.sample.in33
1 files changed, 33 insertions, 0 deletions
diff --git a/domains.conf.sample.in b/domains.conf.sample.in
new file mode 100644
index 0000000..59ce539
--- /dev/null
+++ b/domains.conf.sample.in
@@ -0,0 +1,33 @@
+##
+# Domains configuration file for lfacme.
+#
+# This is NOT a shell script (unlike acme.conf) so you cannot use shell
+# syntax here.
+#
+# Empty lines and lines beginning with a '#' character are ignored.
+#
+# A few examples are provided here; see acme.conf(5) for complete documentation.
+
+
+# To use RSA (instead of the default ECDSA) for all certificates:
+* type=rsa
+
+# To use HTTP for all challenges:
+* challenge=http
+
+# Issue a cert for example.org using the default options.
+# We don't provide any SANs, so the certificate name is used as the domain.
+example.org
+
+# Issue a cert for example.org with some SANs.
+# Notice that because we specify one SAN, we now have to specify all of them.
+example.org example.org www.example.org
+
+# Issue two certs for an SMTP server, one EC and one RSA.
+# Some older SMTP clients still don't like EC certs.
+# Run a hook after the certificate is (re)issued.
+smtp-ec smtp.example.org type=ec hook=install-smtp-cert
+smtp-rsa smtp.example.org type=rsa hook=install-smtp-cert
+
+# Issue a certificate for a server and run multiple hooks.
+server.example.org hook=nginx hook=postfix hook=node-exporter