nixo
/
guix-devel
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

services: certbot: Add --manual-public-ip-logging-ok for manual challenges 

* gnu/services/certbot.scm (certbot-command): Add
  --manual-public-ip-logging-ok flag to the certbot command when doing a
  manual challenge.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
This commit is contained in:
Carlo Zancanaro 2019-08-10 22:52:50 +10:00 committed by Ludovic Courtès
parent fb6e550d6b
commit ec36339dfd
No known key found for this signature in database
GPG Key ID: 090B11993D9AEBB5
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/guix.texi
View File

@ -20302,7 +20302,9 @@ all domains will be Subject Alternative Names on the certificate.
The challenge type that has to be run by certbot. If @code{#f} is specified, The challenge type that has to be run by certbot. If @code{#f} is specified,
default to the HTTP challenge. If a value is specified, defaults to the default to the HTTP challenge. If a value is specified, defaults to the
manual plugin (see @code{authentication-hook}, @code{cleanup-hook} and manual plugin (see @code{authentication-hook}, @code{cleanup-hook} and
the documentation at @url{https://certbot.eff.org/docs/using.html#hooks}). the documentation at @url{https://certbot.eff.org/docs/using.html#hooks}),
and gives Let's Encrypt permission to log the public IP address of the
requesting machine.
@item @code{authentication-hook} (default: @code{#f}) @item @code{authentication-hook} (default: @code{#f})
Command to be run in a shell once for each certificate challenge to be Command to be run in a shell once for each certificate challenge to be

1
gnu/services/certbot.scm
View File

@ -99,6 +99,7 @@
"--manual" "--manual"
(string-append "--preferred-challenges=" challenge) (string-append "--preferred-challenges=" challenge)
"--cert-name" name "--cert-name" name
"--manual-public-ip-logging-ok"
"-d" (string-join domains ",")) "-d" (string-join domains ","))
(if rsa-key-size `("--rsa-key-size" ,rsa-key-size) '()) (if rsa-key-size `("--rsa-key-size" ,rsa-key-size) '())
(if authentication-hook (if authentication-hook