add note about certbot

This commit is contained in:
xfnw 2022-07-30 19:19:21 -04:00
parent 67191fd363
commit ec87474b91

View file

@ -31,3 +31,12 @@ name.of.the.server linkpass=yourreceivepassword sid=123 autoconn=other.server.na
## caveats ## caveats
- ini seems to have horrible variable typing, so weird things can happen like `sid=2E5` turning into `sid=200000` (even if you quote it, wtf). use yaml for your hosts file if you need strict typing - ini seems to have horrible variable typing, so weird things can happen like `sid=2E5` turning into `sid=200000` (even if you quote it, wtf). use yaml for your hosts file if you need strict typing
- this playbook currently only supports each server having one server set to `autoconn` - this playbook currently only supports each server having one server set to `autoconn`
## certbot
consider adding `--preferred-chain 'ISRG Root X1'` to
certbot invocations if getting cert from letsencrypt. their
old cross signature is expired but still included to support
older android devices, however this breaks some irc clients
like mIRC. this option requests the cert without the expired
cross signature