movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

Merge pull request #91121 from m1cr0man/master

Browse source 
Restructure acme module
This commit is contained in:
Florian Klink 2020-09-06 18:26:22 +02:00 • committed by GitHub
commit d7046947e5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
16 changed files with 897 additions and 733 deletions
Download patch file Download diff file Expand all files Collapse all files

14
nixos/doc/manual/release-notes/rl-2009.xml
View file

@ -394,6 +394,20 @@ php.override {
</para>
</listitem>
<listitem>
<para>
The ACME module has been overhauled for simplicity and maintainability.
Cert generation now implicitly uses the <literal>acme</literal>
user, and the <literal>security.acme.certs._name_.user</literal> option
has been removed. Instead, certificate access from other services is now
managed through group permissions. The module no longer runs lego
twice under certain conditions, and will correctly renew certificates if
their configuration is changed. Services which reload nginx and httpd after
certificate renewal are now properly configured too so you no longer have
to do this manually if you are using HTTPS enabled virtual hosts. A mechanism
for regenerating certs on demand has also been added and documented.
</para>
</listitem>
<listitem>
<para>
Gollum received a major update to version 5.x and you may have to change