diff options
| author | Cristian Le <github@lecris.me> | 2022-02-08 14:45:35 +0900 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-02-08 13:45:35 +0800 |
| commit | 60f203385e6f27fae47f3cc8c5d71309f4fd88dc (patch) | |
| tree | 3be2a41b96ab7ab0419e0e63676a5fc16e20cd7d /custom | |
| parent | a60e8be8d15e90a44f2a746a4e8d81a81e03d2db (diff) | |
| download | gitea-60f203385e6f27fae47f3cc8c5d71309f4fd88dc.tar.gz gitea-60f203385e6f27fae47f3cc8c5d71309f4fd88dc.zip | |
Support custom ACME provider (#18340)
* Added ACMECAURL option to support custom ACME provider. Closes #18306
* Refactor setting.go https settings, renamed options and variables, and documented app.example.ini
* Refactored runLetsEncrypt to runACME
* Improved documentation
Diffstat (limited to 'custom')
| -rw-r--r-- | custom/conf/app.example.ini | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/custom/conf/app.example.ini b/custom/conf/app.example.ini index 8dac6ab3ab..f16b1d6a40 100644 --- a/custom/conf/app.example.ini +++ b/custom/conf/app.example.ini @@ -178,6 +178,36 @@ RUN_MODE = ; prod ;OFFLINE_MODE = false ;DISABLE_ROUTER_LOG = false ;; +;; TLS Settings: Either ACME or manual +;; (Other common TLS configuration are found before) +;ENABLE_ACME = false +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; ACME automatic TLS settings +;; +;; ACME directory URL (e.g. LetsEncrypt's staging/testing URL: https://acme-staging-v02.api.letsencrypt.org/directory) +;; Leave empty to default to LetsEncrypt's (production) URL +;ACME_URL = +;; +;; Explicitly accept the ACME's TOS. The specific TOS cannot be retrieved at the moment. +;ACME_ACCEPTTOS = false +;; +;; If the ACME CA is not in your system's CA trust chain, it can be manually added here +;ACME_CA_ROOT = +;; +;; Email used for the ACME registration service +;; Can be left blank to initialize at first run and use the cached value +;ACME_EMAIL = +;; +;; ACME live directory (not to be confused with ACME directory URL: ACME_URL) +;; (Refer to caddy's ACME manager https://github.com/caddyserver/certmagic) +;ACME_DIRECTORY = https +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Manual TLS settings: (Only applicable if ENABLE_ACME=false) +;; ;; Generate steps: ;; $ ./gitea cert -ca=true -duration=8760h0m0s -host=myhost.example.com ;; |