fix: serve acme-dns nameserver address

harden: disable acme-dns registration
2026-08-31 17:15:21 +00:00 · 2026-08-31 17:14:15 +00:00 · 2026-08-31 17:14:03 +00:00 · 2026-08-31 17:11:52 +00:00 · 2026-08-31 17:11:34 +00:00 · 2026-08-31 17:09:17 +00:00
1 changed files with 7 additions and 4 deletions
@@ -14,20 +14,23 @@ let
    nsadmin = "hostmaster.commoninternet.net"
    records = [
      "acme.commoninternet.net. NS ns-acme.commoninternet.net.",
      "ns-acme.commoninternet.net. A 91.98.47.73",
    ]
    debug = false
    [database]
-    engine = "sqlite3"
+    # acme-dns 2.x registers the embedded driver under `sqlite` (not the
    # legacy `sqlite3` identifier).
    engine = "sqlite"
    connection = "/var/lib/acme-dns/acme-dns.db"
    [api]
    ip = "127.0.0.1"
    port = "8080"
    tls = "none"
-    # Bootstrap registration is deliberately temporary. Once the single Lego
+    # The one Lego account was bootstrapped before this configuration was
-    # account exists, change this to true in a follow-up reviewed deployment.
+    # hardened. Updates authenticated by that account remain available.
-    disable_registration = false
+    disable_registration = true
    corsorigins = []
    [logconfig]
Author	SHA1	Message	Date
autonomic-bot	8de2b125e9	fix: serve acme-dns nameserver address	2026-08-31 17:15:21 +00:00
autonomic-bot	1c70b9e61a	harden: disable acme-dns registration	2026-08-31 17:14:15 +00:00
autonomic-bot	b7bf41057a	harden: disable acme-dns registration	2026-08-31 17:14:03 +00:00
autonomic-bot	1c2d5e9f7f	fix: use acme-dns sqlite backend	2026-08-31 17:11:52 +00:00
autonomic-bot	f6e977c69e	fix: use acme-dns sqlite backend	2026-08-31 17:11:34 +00:00
autonomic-bot	0db8194dd5	feat: prepare restricted acme-dns renewal	2026-08-31 17:09:17 +00:00