ACME

Configuration for the ACME automated TLS certificate resolver.

Example:

acme:
  email: foo@example.com
  domains:
  - example.com

`email`

acme:
  email: foo@example.com

Type: String

Email address for ACME account registration.

`domains`

acme:
  domains:
  - example.com

Type: List

Domains to obtain certificates for.

`ca_server`

acme:
  ca_server: staging

Type: String

Default: production

ACME CA server URL.

Options:

production: LetsEncrypt production server (https://acme-v02.api.letsencrypt.org/directory)
staging: LetsEncrypt staging server (https://acme-staging-v02.api.letsencrypt.org/directory)
Custom URL

`http_port`

acme:
  http_port: 6080

Type: Integer

Default: 8402

Port for the ACME HTTP-01 challenge server, which listens on 127.0.0.1. Varnish routes /.well-known/acme-challenge/ requests to this port, so the challenge server no longer binds to port 80 directly. The server is only started when domains are configured.

`renew_before_days`

acme:
  renew_before_days: `15`

Type: Integer

Default: 30

Days before expiry to renew certificates.

`fetch_timeout_sec`

acme:
  fetch_timeout_sec: 150

Type: Integer

Default: 300

Timeout for initial certificate fetching.