open/docs/guide/config-cert.md

44 lines
1.3 KiB
Markdown
Raw Normal View History

2025-02-28 19:15:32 +08:00
# Cert
## CADir
- Type: `string`
- Version`>= v2.0.0-beta.37`
When applying for a Let's Encrypt certificate, we use the default CA address of Let's Encrypt. If you need to debug or
obtain certificates from other providers, you can set CADir to their address.
::: tip
Please note that the address provided by
CADir needs to comply with the `RFC 8555` standard.
:::
## RecursiveNameservers
- Version`>= v2.0.0-beta.37`
- Type: `[]string`
- Example: `8.8.8.8:53,1.1.1.1:53`
This option is used to set the recursive nameservers used by
Nginx UI in the DNS challenge step of applying for a certificate.
If this option is not configured, Nginx UI will use the nameservers settings of the operating system.
## CertRenewalInterval
- Version`>= v2.0.0-beta.37`
- Type: `int`
- Default value: `7`
This option is used to set the automatic renewal interval of the Let's Encrypt certificate.
By default, Nginx UI will automatically renew the certificate every 7 days.
## HTTPChallengePort
- Version`>= v2.0.0-beta.37`
- Type: `int`
- Default: `9180`
This option is used to set the port for backend listening in the HTTP01 challenge mode when obtaining Let's Encrypt
certificates. The HTTP01 challenge is a domain validation method used by Let's Encrypt to verify that you control the
domain for which you're requesting a certificate.