diff options
Diffstat (limited to '')
| -rw-r--r-- | debian/open-infrastructure-dehydrated-tools.templates | 121 |
1 files changed, 121 insertions, 0 deletions
diff --git a/debian/open-infrastructure-dehydrated-tools.templates b/debian/open-infrastructure-dehydrated-tools.templates new file mode 100644 index 0000000..a29c550 --- /dev/null +++ b/debian/open-infrastructure-dehydrated-tools.templates @@ -0,0 +1,121 @@ +Template: open-infrastructure-dehydrated-tools/title +Type: title +Description: dehydrated-tools: Setup + +Template: open-infrastructure-dehydrated-tools/auto-cleanup +Type: boolean +Default: no +Description: dehydrated auto clean: + Please select the Certificate Authority to use with dehydrated. + . + If unsure, use letsencrypt (default). + +Template: open-infrastructure-dehydrated-tools/ca +Type: select +Choices: letsencrypt, letsencrypt-test, zerossl, buypass, buypass-test +Default: letsencrypt +Description: dehydrated Certificate Authority (CA): + Please select the Certificate Authority to use with dehydrated. + . + If unsure, use letsencrypt (default). + +Template: open-infrastructure-dehydrated-tools/challengetype +Type: select +Choices: dns-01, http-01 +Default: http-01 +Description: dehydrated Challenge Type: + Please select the challenge type to use with dehydrated. + . + If unsure, use http-01 (default). + +Template: open-infrastructure-dehydrated-tools/contact-email +Type: string +Default: +Description: dehydrated Contact Email: + Please select an optional contact email address for notifications of your CA. + . + If unsure, leave empty (default). + +Template: open-infrastructure-dehydrated-tools/key-algo +Type: select +Choices: prime256v1, rsa, secp384r1 +Default: secp384r1 +Description: dehydrated key algorithm: + Please select the key algorithm to use. + . + If unsure, use 'secp384r1' (default). + +Template: open-infrastructure-dehydrated-tools/ocsp-fetch +Type: boolean +Default: false +Description: dehydrated OCSP fetch: + Should dehydrated automatically fetch the OCSP signature? + . + If unsure, use 'no' (default). + +Template: open-infrastructure-dehydrated-tools/ocsp-must-staple +Type: boolean +Default: false +Description: dehydrated OCSP must staple: + Should dehydrated request certificates that must use OCSP stapling? + . + If unsure, use 'no' (default). + +Template: open-infrastructure-dehydrated-tools/preferred-chain +Type: string +Default: +Description: dehydrated preferred chain: + Should an alternative root certificate by used in the certificat verification chain? + . + If unsure, leave empty. + +Template: open-infrastructure-dehydrated-tools/basedir +Type: string +Default: +Description: dehydrated base directory: + Please enter the base directory where all the certificates are stored. + . + If unsure, use /var/lib/dehydrated (default). + +Template: open-infrastructure-dehydrated-tools/hooks +Type: multiselect +Choices: ${HOOKS_CHOICES} +Default: +Description: dehydrated hooks: + Please select any hooks that should be enabled for dehydrated. + +Template: open-infrastructure-dehydrated-tools/domains +Type: string +Default: +Description: dehydrated domains: + Please enter the domains to be configured for dehydrated. + . + If unsure, leave empty (default) which will use the hostname + of the system. Use 'none' to not generate any certificates. + . + Multiple certificates can be separated by '|', additional + names (SAN) can are whitespace separated. + +Template: open-infrastructure-dehydrated-tools/tsig +Type: string +Default: +Description: dehydrated TSIG: + When using the dehydrated-nsupdate hook, a TSIG can be used. If you like + to do so, please enter either the path to the TSIG file or the TSIG string + itself (format as used by nsupdate -y in algorithm:name:base64). + . + If unsure, leave empty (default). + +Template: open-infrastructure-dehydrated-tools/register +Type: boolean +Default: false +Description: dehydrated register: + Should a 'dehydrated --register --accept-terms' be executed now to create + an account for this system with your CA. + +Template: open-infrastructure-dehydrated-tools/run +Type: boolean +Default: false +Description: dehydrated: + Should a 'dehydrated --cron --keep-going' be executed now to renew + non-existent/changed/expiring certificates for this system. |