moepman/acertmgr
1
0
Fork 0
mirror of https://github.com/moepman/acertmgr.git synced 2024-06-15 07:22:34 +02:00
Code Releases Activity
Automated Certificate Manager using ACME
10 Commits 2 Branches 20 Tags 318 KiB
Python 100%
5c58580585
Go to file
David Klaftenegger 5c58580585 Adds some different small improvements 
Add a check that the server key is present
Add a check for temporaty file conflicts
Use python3-compatible functions
Skip more things when there is nothing to be done
Add a few more comments/TODOs
2016-04-12 11:47:22 +02:00
acertmgr.py Adds some different small improvements 2016-04-12 11:47:22 +02:00
LICENSE Initial commit 2016-01-10 15:00:43 +01:00
README.md Split cert_get into cert_get and cert_put 2016-04-12 11:46:50 +02:00

README.md

ACERTMGR

This is an automated certificate manager using ACME/letsencrypt.

Running ACERTMGR

The main file acertmgr.py is intended to be run regularly (e.g. as daily cron job) as root.

Configuration

The main configuration is read from /etc/acme/acme.conf, domains for which certificates should be obtained/renewed should be configured in /etc/acme/domains.d/{fqdn}.conf.

All configuration files use yaml syntax.

  • Example global configuration file:
---

mode: webdir
#mode: standalone
webdir: /var/www/acme-challenge/

defaults:
  format: split
  • Example domain configuration file:
---

mail.example.com:
- user: postfix
  group: postfix
  perm: '400'
  notify: '/etc/init.d/postfix reload'
- user: dovecot
  group: dovecot
  perm: '400'
  notify: '/etc/init.d/dovecot reload'

Security

Please keep the following in mind when using this software:

  • DO read the source code, since it is intended to be run as root
  • Make sure that your configuration files are NOT writable by other users - arbitrary commands can be executed after updating certificates