Yann Autissier
f429b8c38d
The hostnames are already declared, once, in the fabio route tags. A domains.txt would be a second source of truth free to disagree with what is actually served, so myos cert reads the tags instead and decides on its own which name needs a wildcard: one is asked for where a tag uses one, and it absorbs the concrete names it covers. A wildcard covers a single label, so a.b.example.org keeps its own certificate. dehydrated issues them: a shell script, no python, which fits a tool that has to install on any server. It answers http-01 itself on a port bound to the loopback and routed by fabio, and delegates dns-01 to a provider hook. The deploy hook writes the two file names fabio watches for, through a temporary name so fabio never reads half a certificate. Fixed on the way: the port parser wanted six spaces of indentation and the catalogue writes four, so every stack that binds its ports was reported unbound.
5 lines
236 B
Plaintext
5 lines
236 B
Plaintext
WARNING: myos[0] cert-rule-exists: target cert unavailable in app myos
|
|
WARNING: myos[0] list-rule-exists: target list unavailable in app myos
|
|
WARNING: myos[0] host/consul-rule-exists: target host/consul unavailable in app myos
|
|
[exit 0]
|