summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2018-04-04 16:17:33 +0200
committerGuilhem Moulin <guilhem@fripost.org>2018-04-04 16:17:33 +0200
commitc75190a4f0a2213c1a6933f2b89d32e4e88c67e6 (patch)
treef166620a4676ac9df0053c5027e9135edcc7c38b
parentb560b9aa10268b642de528d34e47fdca1d9ae197 (diff)
lacme: explicitely bind to [::]:80.
-rw-r--r--roles/lacme/files/etc/lacme/lacme.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/lacme/files/etc/lacme/lacme.conf b/roles/lacme/files/etc/lacme/lacme.conf
index 2956f1a..5aa1252 100644
--- a/roles/lacme/files/etc/lacme/lacme.conf
+++ b/roles/lacme/files/etc/lacme/lacme.conf
@@ -37,41 +37,41 @@ group = nogroup
# Timeout in seconds after which the client stops polling the ACME
# server and considers the request failed.
#
#timeout = 10
# Whether to verify the server certificate chain.
SSL_verify = yes
# Specify the version of the SSL protocol used to transmit data.
SSL_version = SSLv23:!TLSv1_1:!TLSv1:!SSLv3:!SSLv2
# Specify the cipher list for the connection.
SSL_cipher_list = EECDH+AESGCM:!MEDIUM:!LOW:!EXP:!aNULL:!eNULL
[webserver]
# Specify the local address to listen on, in the form ADDRESS[:PORT].
#
#listen = 0.0.0.0:80
-#listen = [::]:80
+listen = [::]:80
# If a webserver is already running, specify a non-existent directory
# under which the webserver is configured to serve GET requests for
# challenge files under "/.well-known/acme-challenge/" (for each virtual
# hosts requiring authorization) as static files.
#
challenge-directory = /var/www/acme-challenge
# username to drop privileges to (setting both effective and real uid).
# Preserve root privileges if the value is empty (not recommended).
#
user = www-data
# groupname to drop privileges to (setting both effective and real gid,
# and also setting the list of supplementary gids to that single group).
# Preserve root privileges if the value is empty (not recommended).
#
user = www-data
# Path to the ACME webserver executable.