Skip to content

Conversation

henti
Copy link

@henti henti commented May 10, 2025

When adding mulitple hosts on a single cloudflare domain, the additional domains will be added as "Subject Alternative Name" and the certificate will need to be updated. Since the default setting in certbot is to ask, this fails.

This change adds support for CERTBOT_EXPAND, which when set to true, will add the --expand option on the certbot run.

Fixes #20

henti-smith-oxa and others added 3 commits May 10, 2025 12:35
When adding mulitple hosts on a single cloudflare domain, the additional domains will be added as "Subject Alternative Name" and the certificate will need to be updated. Since the default setting in certbot is to ask, this fails.

This change adds support for CERTBOT_EXPAND, which when set to true, will add the `--expand` option on the certbot run.
Removed entry for CERTBOT_EXPAND in Dockerfile as it's optional.
Updated docs to include CERTBOT_EXPAND
Updated README to clarify usage of CERTBOT_DOMAINS and introduced CERTBOT_CERT_NAME for explicit certificate management. Marked CERTBOT_EXPAND as deprecated, recommending the use of CERTBOT_CERT_NAME instead. Adjusted Dockerfile to include new environment variable and set default values accordingly.
@jaydrogers
Copy link
Member

Thanks for your patience on this! I had a lot of open source work that I had drown my inbox 😅

I just pushed up some changes. Please take a look.

Things I changed:

  1. I added defaults in the Dockerfile
  2. Instead of using --expand as the suggested option, I added support for --cert-name (which is recommended in their docs). I still added support for --expand though
  3. I changed the execution around to be POSIX compliant and also easier if we need to add more flags in the future

Try it out and let me know your thoughts! 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Updating domains breaks startup.
3 participants