change Caddy ACME profile to shortlived

Signed-off-by: Simon L. <szaimen@e.mail.de>
This commit is contained in:
Simon L.
2026-08-25 13:46:40 +02:00
parent aeecdd73e0
commit 0f666d2d4b
2 changed files with 3 additions and 1 deletions
+1 -1
View File
@@ -89,7 +89,7 @@ http://{$APACHE_HOST}.nextcloud-aio:23973, # For Collabora callback and WOPI req
# TLS options
tls {
issuer acme {
profile tlsserver
profile shortlived
# Disable HTTP challenge because that would require port 80, which we don't get (it's exposed to the mastercontainer).
# This container by default only exposes port 443 if not configured otherwise via APACHE_PORT.
disable_http_challenge
+2
View File
@@ -947,6 +947,8 @@ if [ "$TALK_ENABLED" = 'yes' ]; then
elif [ "$SKIP_UPDATE" != 1 ]; then
php /var/www/html/occ app:update spreed
fi
# We auto-renew the certs via caddy so the outdated cert warning should not be displayed
php /var/www/html/occ config:app:set certificate_expiration_days --type int --value="0"
# Add turn server
# shellcheck disable=SC2153
if ! php /var/www/html/occ talk:turn:list --output="plain" | grep server | grep -q " $TURN_DOMAIN:$TALK_PORT"; then