mirrors/caddy-website
1
0
Fork 0
mirror of https://github.com/caddyserver/website.git synced 2025-04-20 12:15:08 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge 5c827fd448 into e9db589e6b

Browse source
This commit is contained in:
Kekalainen 2024-10-28 16:13:58 -04:00 • committed by GitHub
commit 0e4ca74d04
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 17 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

25
src/docs/markdown/caddyfile/directives/tls.md
View file

@ -353,22 +353,31 @@ Obtains certificates using the ACME protocol. Note that `acme` is a default issu
- **any_common_name** <span id="any_common_name"/> is a list of one or more common names; Caddy will choose the first chain that has an issuer that matches with at least one of the specified common names.
<aside class="tip">
The `acme` issuer module will implicitly use [ZeroSSL's ACME endpoint](https://zerossl.com/documentation/acme/) (and generate EAB credentials) if you specify the the [`email` global option](/docs/caddyfile/options#email).
To provide your own EAB credentials for ZeroSSL, specify the `dir` and `eab` options.
</aside>
#### zerossl
Obtains certificates using the ACME protocol, specifically with ZeroSSL. Note that `zerossl` is a default issuer, so configuring it explicitly is usually unnecessary.
Obtains certificates using the [ZeroSSL API](https://zerossl.com/documentation/api/).
```caddy-d
... zerossl [<api_key>] {
...
... zerossl <api_key> {
validity_days <days>
alt_http_port <port>
dns <provider_name> [<options>]
propagation_delay <duration>
propagation_timeout <duration>
resolvers <dns_servers...>
dns_ttl <duration>
}
```
The syntax for `zerossl` is exactly the same as for [`acme`](#acme), except that its name is `zerossl` and it can optionally take your ZeroSSL API key.
Its functionality is also the same, except that it will use ZeroSSL's directory by default and it can automatically negotiate EAB credentials (whereas with the `acme` issuer, you have to manually provide EAB credentials and set the directory endpoint).
When explicitly configuring `zerossl`, configuring an `email` is required so that your certificates can appear in your ZeroSSL dashboard.
Fields for the `zerossl` issuer module share the syntax of those in common with the [`acme` issuer module](#acme).
#### internal