harden: disable acme-dns registration #26

Merged

autonomic-bot merged 1 commits from harden/acme-dns-registration into main 2026-08-31 17:14:15 +00:00

Conversation 0 Commits 1 Files Changed 1

+3 -3

autonomic-bot commented 2026-08-31 17:14:14 +00:00

Owner

Copy Link

Copy Source

What changed

Turns off the acme-dns registration endpoint after the sole restricted Lego account was created.

Why

The server needs no further account creation. Existing authenticated updates continue, while disabling registration removes an unnecessary localhost API capability.

Evidence

• Bootstrap created exactly one account outside Git/Nix at mode 0600.
• The account target is restricted to 9d3f0428-eb97-4b14-bb07-da2f0f6c2073.acme.commoninternet.net.
• NixOS configuration evaluation succeeds.
• No Gandi credential or DNS change was used.

## What changed Turns off the acme-dns registration endpoint after the sole restricted Lego account was created. ## Why The server needs no further account creation. Existing authenticated updates continue, while disabling registration removes an unnecessary localhost API capability. ## Evidence - Bootstrap created exactly one account outside Git/Nix at mode `0600`. - The account target is restricted to `9d3f0428-eb97-4b14-bb07-da2f0f6c2073.acme.commoninternet.net`. - NixOS configuration evaluation succeeds. - No Gandi credential or DNS change was used.

autonomic-bot added 1 commit 2026-08-31 17:14:15 +00:00

harden: disable acme-dns registration b7bf41057a

autonomic-bot merged commit 1c70b9e61a into main 2026-08-31 17:14:15 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/cc-ci#26