renewal

type Account ¶

type Account struct {
	// contains filtered or unexported fields
}

Account stores the information required for the lego library to use the LetsEncrypt account details.

func (a *Account) GetEmail() string

func (a *Account) GetPrivateKey() crypto.PrivateKey

func (a *Account) GetRegistration() *registration.Resource

type LetsEncryptAccount ¶

type LetsEncryptAccount struct {
	Email      string `yaml:"email"`
	PrivateKey string `yaml:"key"`
}

type LetsEncryptConfig ¶

type LetsEncryptConfig struct {
	Account     LetsEncryptAccount `yaml:"account"`
	Directory   string             `yaml:"directory"`
	Certificate string             `yaml:"certificate"`
	// contains filtered or unexported fields
}

type Service ¶

type Service struct {
	// contains filtered or unexported fields
}

Service manages the scheduled renewal of certificates stored in the database and outputs the latest certificates to the certDir folder. If the certificate does not have a key already defined in keyDir then a new key is generated.

The service makes use of an HTTP ACME challenge provider, and a DNS ACME challenge provider. These ensure the `.wellknown/acme-challenges` files and `_acme-challenges` TXT records are updated to validate the ownership of the specified domains.

func NewService(wg *sync.WaitGroup, db *database.Queries, httpAcme challenge.Provider, leConfig LetsEncryptConfig, certDir, keyDir string) (*Service, error)

func (s *Service) Shutdown()