Florent Daigniere
|
0816cb9497
|
simplify as per ghostwheel42's suggestion
|
3 years ago |
|
Florent Daigniere
|
e4a32b55f5
|
Send ISRG_X1 on port 25, make DANE pin that
|
3 years ago |
|
Florent Daigniere
|
3e676e232a
|
fix #1270
|
3 years ago |
|
Jack Murray
|
dd127f8f06
|
Change letsencrypt timer from 1h --> 1 day
There's no need to be calling certbot so frequently
|
3 years ago |
|
Jack Murray
|
e304c352a1
|
Change letsencrypt timer from 1h --> 1 day
There's no need to be calling certbot so frequently
|
3 years ago |
|
Florent Daigniere
|
c76a76c0b0
|
make it optional, add a knob
|
3 years ago |
|
Florent Daigniere
|
109a8aa000
|
Ensure that we always have CERT+INTERMEDIARY CA
Let's encrypt may change things up in the future...
|
3 years ago |
|
Florent Daigniere
|
12c842c4b9
|
In fact in fullchain we want all but the last
|
3 years ago |
|
Florent Daigniere
|
24f9bf1064
|
format certs for nginx
|
3 years ago |
|
Florent Daigniere
|
f05cc99dc0
|
Add ECC certs for modern clients
|
3 years ago |
|
Florent Daigniere
|
cb68cb312b
|
Reduce the size of the RSA key to 3072bits
This is already generous for certificates that have a 3month validity!
We rekey every single time.
|
3 years ago |
|
Tim Möhlmann
|
42e2dbe35d
|
Standarize image by using shared / similair layers
|
6 years ago |
|
kaiyou
|
ac53b3ed97
|
Merge branch 'master' into refactor-repo
|
7 years ago |
|
kaiyou
|
689be5f2d9
|
Move all directories per theme
|
7 years ago |