• ale's avatar
    Simplify lifecycle management of public certificates · 16b8589d
    ale authored
    There is no need to hold on to selfsigned certs once the ACME
    automation takes over: this removes the requirement for the link-based
    switch mechanism we had in place. We can instead just make everything
    in /etc/credentials/public a real directory, create the selfsigned
    cert there if missing, and just overwrite everything periodically from
    the replds@acme directory.
default 1.35 KB