Add clarification to acme_ca about .local TLDs

This commit is contained in:
Duncan Ogilvie 2023-04-29 20:12:55 +02:00 committed by GitHub
parent 6e83f75a99
commit 049203ee04
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -295,6 +295,7 @@ Skips the attempts to install the local CA's root into the system trust store, a
##### `acme_ca` ##### `acme_ca`
Specifies the URL to the ACME CA's directory. It is strongly recommended to set this to Let's Encrypt's [staging endpoint](https://letsencrypt.org/docs/staging-environment/) for testing or development. Default: ZeroSSL and Let's Encrypt's production endpoints. Specifies the URL to the ACME CA's directory. It is strongly recommended to set this to Let's Encrypt's [staging endpoint](https://letsencrypt.org/docs/staging-environment/) for testing or development. Default: ZeroSSL and Let's Encrypt's production endpoints.
Note that the [hostname requirements](/docs/automatic-https#hostname-requirements) apply, and ACME CA directory will not be used for IP addresses, `localhost` and hostnames with a `.local` TLD.
##### `acme_ca_root` ##### `acme_ca_root`
Specifies a PEM file that contains a trusted root certificate for ACME CA endpoints, if not in the system trust store. Specifies a PEM file that contains a trusted root certificate for ACME CA endpoints, if not in the system trust store.