Ralf Zerres
b312305899
acmed.toml: include the nginx_hooks toml file
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
4 years ago
Ralf Zerres
c17d2dde85
nginx_hooks.toml: new hook handling `nginx webserver` adaptions
This hook uses the ACMEd's API to create two templates files.
* `challange-location`
* `certificate-location`
Both names will be dynamicaly resolved using the enviroment variables
* NGINX_CHALLENGE_LOCTION -> default: 001-challenge-letsencrypt.conf
* NGINX_TLS_CERTIFICATE -> default: 002-tls-certificates.conf
The files will be stored inside the target filesystem as defined with the
environment variable
* NGINX_CONFDIR -> default: /etc/nginx/conf.d
A website admin needs to include
* $NGINX_CHALLENGE_LOCATION and
* $NGINX_TLS_CERTIFICATE
inside the [virtual-]host configuration block of websites to
activate the templates (non automated task)
Within the API, the hooks are addressed using their group names
* `nginx-config-challenge-location`
this will generate -> $NGINX_CONFDIR/$NGINX_CHALLENGE_LOCATION
* `nginx-config-certificate-location`
this will generate -> $NGINX_CONFDIR/$NGINX_TLS_CERTIFICATE
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
4 years ago
Rodolphe Bréard
ac1c920381
Add a packager tip in the README
4 years ago
Rodolphe Bréard
9a41c1dbe0
Add a link to the Rust documentation in the README
4 years ago
Rodolphe Bréard
21435f4954
Update the ACMED_DEFAULT_CERT_FORMAT default value in the README
4 years ago
Rodolphe Bréard
fc4e442c0b
Set the default log level to info
4 years ago
Rodolphe Bréard
9a52340303
Add new verbs to the polkit rule
4 years ago
Rodolphe Bréard
5d9e1e3626
ACMEd v0.17.0
4 years ago
Rodolphe Bréard
2fa21bb7b7
Add the rev_labels template formatter
4 years ago
Rodolphe Bréard
25900e7418
Update the change log
4 years ago
Rodolphe Bréard
464cc7c4c9
Merge branch 'main' of github.com:breard-r/acmed
4 years ago
Rodolphe Bréard
30be12c79f
Change the template engine for TinyTemplate
As discussed in the issue linked below, the template engine needed to be
changed for various reasons. After a long search, it has been decided to
use TinyTemplate since it is the best match so far.
fixes #8
4 years ago
Rodolphe Bréard
3238c01111
Merge pull request #51 from rzerres/wip-acmed-service
systemd.unit: reworked `acmed.service`
4 years ago
Ralf Zerres
849b24b261
systemd.unit: reworked `acmed.service`
acmed.service: hardened sandbox systemd unit
* comments the logical units
* update working directory (ACMEd needs write access)
* update runtime directory (write/update the pid-file)
* reduce privileges for filesystem and kernel-space
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
4 years ago
Rodolphe Bréard
6b58ebac18
Remove the invalid file inclusion
4 years ago
Rodolphe Bréard
45fd53de4d
Add a polkit policy that enables ACMEd to restart services
4 years ago
Rodolphe Bréard
49cd59c7ff
Merge pull request #50 from breard-r/dependabot/add-v2-config-file
Upgrade to GitHub-native Dependabot
4 years ago
Rodolphe Bréard
5928156351
Merge pull request #48 from rzerres/wip-toml
Update toml files
4 years ago
dependabot-preview[bot]
4a560d3415
Upgrade to GitHub-native Dependabot
4 years ago
Rodolphe Bréard
d8f53d506f
Merge pull request #47 from rzerres/wip-run
update LFS compliance volatile runtime data
4 years ago
Ralf Zerres
fb7704056e
acmed.toml: comment updates
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
4 years ago
Ralf Zerres
c9c12692c9
update LFS compliance volatile runtime data
* the former /var/run is depreciated -> using /run
* update rust build scripts sources to use the new path
* update CHANGELOG to reflect the changes
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
4 years ago
Ralf Zerres
aaf641cc68
letsencrypt.toml: wording update
* use precise strings referencing endpoint name and limits
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
4 years ago
Ralf Zerres
3d2929dca2
Makefile: include missing letsencrypt.toml reference
Signed-off-by: Ralf Zerres <ralf.zerres@networkx.de>
4 years ago
Rodolphe Bréard
988f250694
Create the config dir
4 years ago
Rodolphe Bréard
90282482d8
Move the account and certificate default directories
Those directories were located in /etc/acmed/, which is not the best
choice. According to the Filesystem Hierarchy Standard, they should be
located in /var/lib/acmed/.
Because systems may have different conventions, those values are now
configuration at build time.
https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard
4 years ago
Rodolphe Bréard
2a2e743f6a
Allow the configuration of some default values at compile time using environment variables
4 years ago
Rodolphe Bréard
cd60eaf85c
Update the attohttpc dependency
4 years ago
Rodolphe Bréard
3bc7c236af
Merge pull request #44 from breard-r/dependabot/cargo/attohttpc-0.17
Update attohttpc requirement from 0.16 to 0.17
4 years ago
dependabot-preview[bot]
4b0bd843be
Update attohttpc requirement from 0.16 to 0.17
Updates the requirements on [attohttpc](https://github.com/sbstp/attohttpc ) to permit the latest version.
- [Release notes](https://github.com/sbstp/attohttpc/releases )
- [Commits](https://github.com/sbstp/attohttpc/compare/v0.16.0...v0.17.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
4 years ago
Rodolphe Bréard
8edd8c0bc5
Merge pull request #43 from clarfonthey/main
Move LE endpoints to separate config file
4 years ago
ltdk
c68c111619
Move LE endpoints to separate config file
4 years ago
Rodolphe Bréard
a82837421a
Finish the bot's job
Machines will never replace us...
5 years ago
Rodolphe Bréard
7b4c208cbd
Merge pull request #42 from breard-r/dependabot/cargo/nix-0.20
Update nix requirement from 0.19 to 0.20
5 years ago
dependabot-preview[bot]
a7a1125662
Update nix requirement from 0.19 to 0.20
Updates the requirements on [nix](https://github.com/nix-rust/nix ) to permit the latest version.
- [Release notes](https://github.com/nix-rust/nix/releases )
- [Changelog](https://github.com/nix-rust/nix/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nix-rust/nix/commits )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
5 years ago
Rodolphe Bréard
9c34066a3d
Rename the get_data function in get_jws_data
5 years ago
Rodolphe Bréard
f2831345f8
Remove the redundant encode_jwk_no_nonce function
5 years ago
Rodolphe Bréard
e588c0ca94
Remove the superfluous reference to identifier_tls_alpn
5 years ago
Rodolphe Bréard
f3838532b6
Merge pull request #41 from chmodas/minor-documentation-fixes
Minor documentation fixes
5 years ago
Borislav Borisov
42168f83d8
Minor documentation fixes
5 years ago
Rodolphe Bréard
ba1f5a0102
Fix build status
5 years ago
Rodolphe Breard
7c74e3b247
ACMEd v0.16.0
5 years ago
Rodolphe Breard
9e18254b73
Update the certificate's subject attributes
5 years ago
Rodolphe Breard
d738e794b9
Fix typo in the man
5 years ago
Rodolphe Breard
675a75b470
ACMEd v0.15.0
5 years ago
Rodolphe Breard
b7d848adef
Add the file_name_format config directive
5 years ago
Rodolphe Breard
f8a74cfd7d
Fix the storage log
5 years ago
Rodolphe Breard
eb6e363307
Include config files only once
5 years ago
Rodolphe Breard
e0ffe377a2
Allow certificates to have the same name but different key type
5 years ago
Rodolphe Breard
5506fbe71b
Add Rust 1.42 compatibility
5 years ago