Mike Geppert
e39e002351
This commit adds support for configuring the HTTP port used by the standalone validation method when generating Let's Encrypt certificates. This allows using a non-privileged port (e.g., 8080) instead of the default port 80, which requires root privileges. Changes include: - Add http_port option to the letsencrypt section in config.json - Update ssl_manager.py to use the configured HTTP port - Add documentation for the http_port option in guidelines.md
48 lines
2.3 KiB
JSON
48 lines
2.3 KiB
JSON
{
|
|
"cert_dir": "~/.ssl-certs",
|
|
"default_port": 443,
|
|
"connection_timeout": 3.0,
|
|
"default_validity_days": 365,
|
|
"key_size": 2048,
|
|
"debug": false,
|
|
"unifi": {
|
|
"host": "mgeppert.com",
|
|
"username": "SSLCertificate",
|
|
"password": "cYu2E1OWt0XseVf9j5ML",
|
|
"site": "default",
|
|
"ssh_port": 22,
|
|
"ssh_username": "root",
|
|
"ssh_password": "RH6X64FAAiE7CrcV84lQ",
|
|
"ssh_key_path": "~/.ssh/id_rsa"
|
|
},
|
|
"letsencrypt": {
|
|
"email": "mgeppert1@gmail.com",
|
|
"validation_method": "standalone",
|
|
"http_port": 8080,
|
|
"use_staging": false,
|
|
"agree_tos": true
|
|
},
|
|
"comments": {
|
|
"cert_dir": "Directory where certificates and keys will be stored",
|
|
"default_port": "Default port to use when checking certificate expiration",
|
|
"connection_timeout": "Timeout in seconds for SSL connections",
|
|
"default_validity_days": "Default validity period in days for generated certificates",
|
|
"key_size": "Key size in bits for generated certificates",
|
|
"debug": "Enable debug logging with line numbers and file names (default: false)",
|
|
"unifi": "UniFi device connection parameters",
|
|
"unifi.host": "Hostname or IP address of the UniFi device",
|
|
"unifi.username": "Username for authenticating with the UniFi device",
|
|
"unifi.password": "Password for authenticating with the UniFi device",
|
|
"unifi.site": "Site name for the UniFi device (default: 'default')",
|
|
"unifi.ssh_port": "SSH port for the UniFi device (default: 22)",
|
|
"unifi.ssh_username": "Username for SSH authentication with the UniFi device",
|
|
"unifi.ssh_password": "Password for SSH authentication (leave empty to use SSH key)",
|
|
"unifi.ssh_key_path": "Path to the SSH private key file for authentication",
|
|
"letsencrypt": "Let's Encrypt certificate settings",
|
|
"letsencrypt.email": "Email address for Let's Encrypt registration and important notifications",
|
|
"letsencrypt.validation_method": "Method to use for domain validation (standalone, webroot, dns)",
|
|
"letsencrypt.http_port": "Port to use for HTTP validation when using standalone method (default: 80, requires root privileges)",
|
|
"letsencrypt.use_staging": "Whether to use Let's Encrypt's staging environment for testing (true/false)",
|
|
"letsencrypt.agree_tos": "Whether to automatically agree to the Terms of Service (true/false)"
|
|
}
|
|
} |