Skip to content

Commit 78a2fd1

Browse files
authored
Merge pull request srvrco#810 from paulocoghi/patch-1
Custom configuration instructions
2 parents a3a26cb + 255b0a1 commit 78a2fd1

File tree

1 file changed

+37
-0
lines changed

1 file changed

+37
-0
lines changed

README.md

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,7 @@ for automating the process on remote servers.
1717
- [ISPConfig](#ispconfig)
1818
- [Automating updates](#automating-updates)
1919
- [Structure](#structure)
20+
- [Custom template for configuration](#custom-template-for-configuration)
2021
- [Server-Types](#server-types)
2122
- [Revoke a certificate](#revoke-a-certificate)
2223
- [Elliptic curve keys](#elliptic-curve-keys)
@@ -455,6 +456,42 @@ RELOAD_CMD="service apache2 reload"
455456

456457
```
457458

459+
## Custom template for configuration
460+
461+
You can create and customize a template that can be use to generate the `~/.getssl/yourdomain.com/getssl.cfg` config file, instead of the default one.
462+
463+
Create one of fhe following allowed locations, according to your getssl installation:
464+
465+
```sh
466+
/etc/getssl/getssl_default.cfg
467+
/path/of/your/getssl/installation/getssl_default.cfg
468+
~/.getssl/getssl_default.cfg
469+
470+
```
471+
472+
And define the default values, optionally using the dynamic variables, as in the example below:
473+
474+
```sh
475+
# Additional domains - this could be multiple domains / subdomains in a comma separated list
476+
# Note: this is Additional domains - so should not include the primary domain.
477+
SANS="${EX_SANS}"
478+
479+
ACL=('/home/myuser/${DOMAIN}/public_html/.well-known/acme-challenge')
480+
481+
USE_SINGLE_ACL="true"
482+
483+
RELOAD_CMD="sudo /bin/systemctl restart nginx.service"
484+
485+
# Define the server type. This can be https, ftp, ftpi, imap, imaps, pop3, pop3s, smtp,
486+
# smtps_deprecated, smtps, smtp_submission, xmpp, xmpps, ldaps or a port number which
487+
# will be checked for certificate expiry and also will be checked after
488+
# an update to confirm correct certificate is running (if CHECK_REMOTE) is set to true
489+
SERVER_TYPE="https"
490+
#CHECK_REMOTE="true"
491+
CHECK_REMOTE_WAIT="1" # wait 1 second before checking the remote server
492+
493+
```
494+
458495
## Server-Types
459496

460497
OpenSSL has built-in support for getting the certificate from a number of SSL services

0 commit comments

Comments
 (0)