harden: disable acme-dns registration

2026-08-31 17:14:15 +00:00
parent 1c2d5e9f7f b7bf41057a
commit 1c70b9e61a
1 changed files with 3 additions and 3 deletions
@@ -27,9 +27,9 @@ let
    ip = "127.0.0.1"
    port = "8080"
    tls = "none"
-    # Bootstrap registration is deliberately temporary. Once the single Lego
-    # account exists, change this to true in a follow-up reviewed deployment.
-    disable_registration = false
+    # The one Lego account was bootstrapped before this configuration was
+    # hardened. Updates authenticated by that account remain available.
+    disable_registration = true
    corsorigins = []

    [logconfig]