Haproxy: acme.sh should get an RSA cert

OpenConext · Jul 2, 2024 · 15e5885 · 15e5885
1 parent 56d084f
commit 15e5885
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/haproxy/tasks/get_acme_certs.yml b/roles/haproxy/tasks/get_acme_certs.yml
@@ -1,7 +1,7 @@
 ---
 - name: Install the certificates using acme
   ansible.builtin.shell:
-    cmd: "/home/acme/.acme.sh/acme.sh --issue --stateless -d {{ base_domain }} {% for application in haproxy_applications %} -d {{ application.vhost_name }}  {% endfor %} --server https://acme.sectigo.com/v2/GEANTOV"
+    cmd: "/home/acme/.acme.sh/acme.sh --issue --stateless --keylength 2048  -d {{ base_domain }} {% for application in haproxy_applications %} -d {{ application.vhost_name }}  {% endfor %} --server https://acme.sectigo.com/v2/GEANTOV"
   become_user: acme
   become: true