Stalwart: Difference between revisions
m Note about this page documenting the process for stalwart <0.16, link to upstream docs |
m →Auto update TLSA records: correct typo |
||
| Line 294: | Line 294: | ||
Stalwart [https://github.com/stalwartlabs/stalwart/issues/1664 does not yet] automatically update the TLSA record if your ACME certificate changes. | Stalwart [https://github.com/stalwartlabs/stalwart/issues/1664 does not yet] automatically update the TLSA record if your ACME certificate changes. | ||
Following script is a possible | Following script is a possible workaround. It extracts the ACME cert every five minute, calculates the TLSA hash and compares it with the upstream record. If it doesn't match, it uses [https://github.com/Stenstromen/gotlsaflare gotlsaflare] to update the TLSA record on Cloudflare. | ||
<syntaxhighlight lang="nixos">systemd.services.tlsa-cloudflare-update = { | <syntaxhighlight lang="nixos">systemd.services.tlsa-cloudflare-update = { | ||