@@ -17,6 +17,7 @@ for automating the process on remote servers.
17
17
- [ ISPConfig] ( #ispconfig )
18
18
- [ Automating updates] ( #automating-updates )
19
19
- [ Structure] ( #structure )
20
+ - [ Custom template for configuration] ( #custom-template-for-configuration )
20
21
- [ Server-Types] ( #server-types )
21
22
- [ Revoke a certificate] ( #revoke-a-certificate )
22
23
- [ Elliptic curve keys] ( #elliptic-curve-keys )
@@ -455,6 +456,42 @@ RELOAD_CMD="service apache2 reload"
455
456
456
457
```
457
458
459
+ ## Custom template for configuration
460
+
461
+ You can create and customize a template that can be use to generate the ` ~/.getssl/yourdomain.com/getssl.cfg ` config file, instead of the default one.
462
+
463
+ Create one of fhe following allowed locations, according to your getssl installation:
464
+
465
+ ``` sh
466
+ /etc/getssl/getssl_default.cfg
467
+ /path/of/your/getssl/installation/getssl_default.cfg
468
+ ~ /.getssl/getssl_default.cfg
469
+
470
+ ```
471
+
472
+ And define the default values, optionally using the dynamic variables, as in the example below:
473
+
474
+ ``` sh
475
+ # Additional domains - this could be multiple domains / subdomains in a comma separated list
476
+ # Note: this is Additional domains - so should not include the primary domain.
477
+ SANS=" ${EX_SANS} "
478
+
479
+ ACL=(' /home/myuser/${DOMAIN}/public_html/.well-known/acme-challenge' )
480
+
481
+ USE_SINGLE_ACL=" true"
482
+
483
+ RELOAD_CMD=" sudo /bin/systemctl restart nginx.service"
484
+
485
+ # Define the server type. This can be https, ftp, ftpi, imap, imaps, pop3, pop3s, smtp,
486
+ # smtps_deprecated, smtps, smtp_submission, xmpp, xmpps, ldaps or a port number which
487
+ # will be checked for certificate expiry and also will be checked after
488
+ # an update to confirm correct certificate is running (if CHECK_REMOTE) is set to true
489
+ SERVER_TYPE=" https"
490
+ # CHECK_REMOTE="true"
491
+ CHECK_REMOTE_WAIT=" 1" # wait 1 second before checking the remote server
492
+
493
+ ```
494
+
458
495
## Server-Types
459
496
460
497
OpenSSL has built-in support for getting the certificate from a number of SSL services
0 commit comments