security/dehydrated 0.7.2_1

Configuration

Options name: security_dehydrated

USES

shebangfix

Service scripts

none

Message after installing

To use this script you should copy the examples in
/usr/local/etc/dehydrated/ and at least add a
domain and a contact mail address.

In order to run the script regularly to update
the certificates add this line to /etc/periodic.conf

weekly_dehydrated_enable="YES"

Additionally the following parameters can be added to
/etc/periodic.conf

To run the certification renenewal as a different user
weekly_dehydrated_user="_letsencrypt"

To run a script after the renewal (as root)
weekly_dehydrated_deployscript="/usr/local/etc/dehydrated/deploy.sh"

Additional flags for the periodic run go into
weekly_dehydrated_flags="-g"

If weekly run is not frequent enough, such as when fetching OCSP
response files (expires in 7 days), replace "weekly_" with "daily_"
as follows to run dehydrated daily. Options are exactly same with
weekly.

daily_dehydrated_enable="YES"
daily_dehydrated_user="_letsencrypt"
daily_dehydrated_deployscript="/usr/local/etc/dehydrated/deploy.sh"
daily_dehydrated_flags="-g"