nixpkgs/nixos/modules
Vincent Bernat cbe0e663ec nixos/acme: don't use --reuse-key
Reusing the same private/public key on renewal has two issues:

 - some providers don't accept to sign the same public key
   again (Buypass Go SSL)

 - keeping the same private key forever partly defeats the purpose of
   renewing the certificate often

Therefore, let's remove this option. People wanting to keep the same
key can set extraLegoRenewFlags to `[ --reuse-key ]` to keep the
previous behavior. Alternatively, we could put this as an option whose
default value is true.

(cherry picked from commit 632c8e1d54e299f656aa677f25552e1127f12849)
2021-05-31 23:02:21 +00:00
..
config Merge pull request #101071 from ju1m/apparmor 2021-04-24 11:24:26 +00:00
hardware maintainers: rename metadark -> kira-bruneau (#124035) 2021-05-22 16:47:40 +02:00
i18n/input-method input methods: add kime 2021-04-19 03:05:07 +09:00
installer nix: 2.3.10 -> 2.3.11 2021-05-14 12:24:54 +00:00
misc 21.05 beta release 2021-05-22 17:56:13 -07:00
profiles Merge pull request #85073 from hyperfekt/systemd-pstore 2021-05-17 00:00:52 +02:00
programs maintainers: rename metadark -> kira-bruneau (#124035) 2021-05-22 16:47:40 +02:00
security nixos/acme: don't use --reuse-key 2021-05-31 23:02:21 +00:00
services nixos/wordpress: regenerate secret keys if misspelled key name is found 2021-05-29 20:16:47 +00:00
system nixos/networkd: add missing [DHCPServer] options 2021-05-17 18:30:37 +02:00
tasks Merge pull request #123902 from hyperfekt/mount-pstore-quiet 2021-05-23 15:04:41 +02:00
testing treewide: use perl.withPackages when possible 2021-03-31 21:35:37 +02:00
virtualisation Update nixos/modules/virtualisation/libvirtd.nix 2021-05-30 14:56:41 +00:00
module-list.nix nixos/dendrite: remove (#124524) 2021-05-27 10:41:05 +02:00
rename.nix quagga: remove 2021-04-22 12:48:48 +02:00