security/lego 5.5.2_2 FreeBSD

Configuration

No options to configure.

USES

go:modules

Service scripts

none

Message after installing

There are sample scripts in
    /usr/local/etc/lego
that you can use for renewing and deploying certificates.

In order to run the script regularly to update the certificates add this line
to /etc/periodic.conf:

    weekly_lego_enable="YES"

Additionally the following parameters may be added to /etc/periodic.conf:

Script to run to renew certificates, will be run as _lego (required)
    weekly_lego_renewscript="/usr/local/etc/lego/lego.sh"

To run a script after the renewal to deploy certificates
    weekly_lego_deployscript="/usr/local/etc/lego/deploy.sh"

Note that the deploy script is provided as a sample and may need to be modified
for your environment. The script will attempt to deploy certificates to
    /usr/local/etc/ssl/certs
and private keys to
    /usr/local/etc/ssl/private.
The script also tries to restart nginx.

If using the sample renew script, lego will load its configuration from
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details.

To run lego for the first time, configure an account and certificate in
    /usr/local/etc/lego/lego.yml.
Then execute lego as the _lego user:
    $ lego --config /usr/local/etc/lego/lego.yml

To migrate from lego v4 to v5 run

    $ lego migrate --path /usr/local/etc/ssl/lego

as the _lego user. This command migrates to a new file structure and
outputs configuration that can be used as the basis for
    /usr/local/etc/lego/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details on the configuration file format.

    /usr/local/etc/lego/lego.sh
will need to be updated as well, as the renew command has been
removed. The script can also be simplified when a configuration file is used.
See
    /usr/local/etc/lego/lego.sh.sample
for an example.