lego/cmd/internal/configuration/testdata/reference.yml at d6447a3207b09ff8155486a82cfe606c9de48e0c · ldez/lego · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
# This is not a valid configuration file.
# Don't use it.

storage: /tmp/lego/
networkStack: ipv6only
userAgent: foo

servers:
  myserver:
    url: https://example.com
    overallRequestLimit: 18
    tlsSkipVerify: true
    httpTimeout: 0
    certTimeout: 30

accounts:
  foo:
    server: https://example.com
    email: foo@example.com
    keyType: RSA2048
    acceptsTermsOfService: true
    eab:
      kid: foo
      hmacKey: foo

challenges:
  one:
    http:
      address: ":80"
      delay: 0s
      proxyHeader: Host
      webroot: /tmp/webroot
      memcachedHosts:
        - memcached:11211
      s3Bucket: 's3-bucket'
  two:
    tls:
      address: ":443"
      delay: 0s
  three:
    dns:
      provider: cloudflare
      envFile: /tmp/secrets/.env.cf
      propagation:
        disableAuthoritativeNameservers: true
        disableRecursiveNameservers: true
        wait: 0s
      dnsTimeout: 10
      resolvers:
        - 1.1.1.1:53
  four:
    dnsPersist:
      issuerDomainName: example.com
      persistUntil: 2020-01-01T00:00:00Z
      propagation:
        disableAuthoritativeNameservers: true
        disableRecursiveNameservers: true
        wait: 0s

certificates:
  foo: # when a section is removed, clean/archive the related files.
    challenge: one
    account: foo
    keyType: RSA2048 # if not set, use the account keyType
    domains:
      - example.com
      - '*.example.com'
    csr: /tmp/foo.csr
    preferredChain: "ISRG Root X1"
    profile: "tls"
    enableCommonName: true
    notBefore: ""
    notAfter: ""
    noBundle: false
    mustStaple: false
    alwaysDeactivateAuthorizations: false
    renew:
      reuseKey: true
      days: 1
      disableRandomSleep: true
      ari:
        disable: false
        waitToRenewDuration: 1m
    pfx:
      password: xxx
      format: SHA256

hooks:
  pre:
    command: "./my-pre-hook.sh"
    timeout: 3s
  deploy:
    command: "./my-deploy-hook.sh"
    timeout: 3s
  post:
    command: "./my-post-hook.sh"
    timeout: 3s

log:
  level: debug
  format: text