14.78. cdist-type__letsencrypt_cert(7)¶

14.78.1. NAME¶

cdist-type__letsencrypt_cert - Get an SSL certificate from Let's Encrypt

14.78.2. DESCRIPTION¶

Automatically obtain a Let's Encrypt SSL certificate using Certbot.

14.78.3. REQUIRED PARAMETERS¶

admin-email: Where to send Let's Encrypt emails like "certificate needs renewal".

14.78.4. REQUIRED MULTIPLE PARAMETERS¶

domain: A domain to be included in the certificate.

14.78.5. OPTIONAL PARAMETERS¶

state

'present' or 'absent', defaults to 'present' where:

present: if the certificate does not exist, it will be obtained
absent: the certificate will be removed

webroot

The path to your webroot, as set up in your webserver config. If this parameter is not present, Certbot will be run in standalone mode.

14.78.6. OPTIONAL MULTIPLE PARAMETERS¶

renew-hook: Renew hook command directly passed to Certbot in cron job.

14.78.7. BOOLEAN PARAMETERS¶

automatic-renewal: Install a cron job, which attempts to renew certificates daily.
staging: Obtain a test certificate from a staging server.

14.78.8. MESSAGES¶

change: Certificte was changed.
create: Certificte was created.
remove: Certificte was removed.

14.78.9. EXAMPLES¶

__letsencrypt_cert example.com \
    --admin-email root@example.com \
    --automatic-renewal \
    --domain example.com \
    --domain foo.example.com \
    --domain bar.example.com \
    --renew-hook "service nginx reload" \
    --webroot /data/letsencrypt/root

14.78.10. AUTHORS¶

Nico Schottelius <nico-cdist--@--schottelius.org>
Kamila Součková <kamila--@--ksp.sk>
Darko Poljak <darko.poljak--@--gmail.com>
Ľubomír Kučera <lubomir.kucera.jr at gmail.com>

14.78.11. COPYING¶

Copyright (C) 2017-2018 Nico Schottelius, Kamila Součková, Darko Poljak and Ľubomír Kučera. You can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.