diff options
| author | Matthew Fennell <matthew@fennell.dev> | 2025-12-28 20:04:00 +0000 |
|---|---|---|
| committer | Matthew Fennell <matthew@fennell.dev> | 2025-12-29 01:48:06 +0000 |
| commit | 93cf32f25aa5faf62e8864a68d998ef2baafcf30 (patch) | |
| tree | ae266a70e15a9d831f8a50ceb55aeadd9c7a7c24 /renew-all | |
| parent | da6ba6ddb6c55ca685b59880b078ccea31d7ec19 (diff) | |
Add --reuse-key to command
If we are renewing via DNS-01, we need to make sure to reuse the same key -
otherwise, we will need a different hash to be propagated via DNS, which
reuqires multiple days for a proper rollover. DANE will break if this rollover
is not done.
Diffstat (limited to 'renew-all')
| -rwxr-xr-x | renew-all | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -42,6 +42,7 @@ def main() -> None: + subdomain_requests + [ "renew", + "--reuse-key", "--renew-hook", domain[f"renew_script_{args.env}"], ] |
