nyacme/README.md

53 lines
1.5 KiB
Markdown
Raw Normal View History

2024-07-23 12:27:27 +00:00
# nyacme
*a uacme wrapper that maybe probably doesn't suck too much*
2024-07-23 12:36:26 +00:00
usage:
```
usage: nyacme [-h] [-c CONFIG] [-o OUTPUT]
fun uacme wrapper
options:
-h, --help show this help message and exit
-c CONFIG, --config CONFIG
path to your config file (default: /etc/nyacme.toml)
-o OUTPUT, --output OUTPUT
path to the certificate output directory (default: /etc/ssl/uacme)
```
2024-07-23 12:27:27 +00:00
example configuration:
```toml
post_acquire = [
"doas service haproxy reload"
]
certificates = [
"ptrc.gay",
"*.dev.ptrc.gay"
]
[domains]
"ptrc.gay" = "hetzner"
2024-08-11 10:24:47 +00:00
"porkbunned.example" = "porkbun"
"yet.another.domain.tld" = { handler = "hetzner", secret = "this_is_a_different_secret" }
2024-07-23 12:27:27 +00:00
[secrets]
hetzner = "your_secret_goes_here"
2024-08-11 10:24:47 +00:00
porkbun = { apikey = "owo", secretapikey = "uwu" }
2024-07-23 12:27:27 +00:00
```
configuration options:
- `post_acquire` - list of commands to be ran after a new certificate is acquired
- `certificates` - list of CNs for the desired certificates (note: `*.domain.tld` also adds a `domain.tld` CN)
- `domains` - dict of domains and their respective handlers (note: it is expected that a domain is also the root of the zone)
- `secrets` - dict of secrets to be used by handlers; *usually* with the same name as handler itself
2024-07-23 12:27:27 +00:00
- `acme_path` - string, path to your `.well-known/acme-challenge/`
currently implemented handlers:
2024-07-23 12:27:27 +00:00
- `cloudflare`
- `hetzner`
- `http`
2024-08-11 10:24:47 +00:00
- `porkbun` (with secrets `apikey` and `secretapikey`, see example config)
2024-07-27 17:59:44 +00:00
- `he` ( hurricane electric )