Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restructure acme module #91121

Merged
merged 6 commits into from
Sep 6, 2020
Merged

Restructure acme module #91121

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
982c5a1
nixos/acme: Restructure module
m1cr0man Jun 19, 2020
61dbf4b
nixos/acme: Add proper nginx/httpd config reload checks
m1cr0man Aug 30, 2020
1b6cfd9
nixos/acme: Fix race condition, dont be smart with keys
m1cr0man Sep 3, 2020
67a5d66
nixos/acme: Run postRun script as root
m1cr0man Sep 4, 2020
f57824c
nixos/acme: Update docs, use assert more effectively
m1cr0man Sep 4, 2020
34b5c5c
nixos/acme: More features and fixes
m1cr0man Sep 4, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions nixos/doc/manual/release-notes/rl-2009.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -394,6 +394,20 @@ php.override {

</para>
</listitem>
<listitem>
<para>
The ACME module has been overhauled for simplicity and maintainability.
Cert generation now implicitly uses the <literal>acme</literal>
user, and the <literal>security.acme.certs._name_.user</literal> option
has been removed. Instead, certificate access from other services is now
managed through group permissions. The module no longer runs lego
twice under certain conditions, and will correctly renew certificates if
their configuration is changed. Services which reload nginx and httpd after
certificate renewal are now properly configured too so you no longer have
to do this manually if you are using HTTPS enabled virtual hosts. A mechanism
for regenerating certs on demand has also been added and documented.
</para>
</listitem>
<listitem>
<para>
Gollum received a major update to version 5.x and you may have to change
Expand Down
Loading