From 63f6a3181fea59360b2bfe430f5c798f88b22527 Mon Sep 17 00:00:00 2001
From: Lexi Winter <ivy@FreeBSD.org>
Date: Wed, 4 Jun 2025 08:51:26 +0100
Subject: add a TSIG-based dns validation handler

while here, reorganise and improve documentation a bit.
---
 lfacme-http.5 | 13 +++++++++++++
 1 file changed, 13 insertions(+)

(limited to 'lfacme-http.5')

diff --git a/lfacme-http.5 b/lfacme-http.5
index c66f9f8..ed5ca8e 100644
--- a/lfacme-http.5
+++ b/lfacme-http.5
@@ -37,6 +37,19 @@ in
 .Xr acme.conf 5 .
 This directory must be mapped to the appropriate path on the web server for
 the challenge to succeed.
+.Sh CONFIGURATION
+The
+.Nm
+challenge hook supports the following configuration options in
+.Xr acme.conf 5 :
+.Bl -tag -width indent
+.It Va ACME_HTTP_CHALLENGE_DIR
+(Required.)
+The directory to place the challenge tokens in.
+The contents of this directory should be served at the path
+.Dq /.well-known/acme-challenge
+on the web server for the domain to be validated.
+.El
 .Sh SEE ALSO
 .Xr acme.conf 5 ,
 .Xr domains.conf 5 ,
-- 
cgit v1.2.3