step_acme_cert
: Replace with a more generic host-autorenewal-certificate role
#339
Labels
enhancement
New feature or improvement to an existing one
roles
Something affecting one or more roles
Milestone
As discussed in #127 and #129, the current
step_acme_cert
role could easily be reworked to support all possible types of certificates, with automatic renewal still happening on the host throughstep renew
.Having such a role would provide a host-based alternative to the controller-based renewal proposed in #188.
#129 could potentially serve as a template, but with the major changes to
step_ca_certificate
it might be better to start from scratch. I would suggest a role that only runsstep_ca_certificate
, then installs the renewal daemon.To-Dos:
step_certificate
role, supporting multiple provisioners #129 to be implementedstep_certificate
would conflict with a potential future module. Maybehost_certificate
?step_ca_certificate
callThe text was updated successfully, but these errors were encountered: