update ocsp cache path for certbot deploy hook

certbot/0.grapheneos.network

@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name grapheneos.network \
     -d grapheneos.network \
     -d grapheneos.network \
@@ -19,6 +19,6 @@ certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
 
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type rsa --rsa-key-size 3072 --reuse-key --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name supl.grapheneos.org \
     -d supl.grapheneos.org

certbot/0.grapheneos.org

@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name grapheneos.org \
     -d grapheneos.org \
     -d www.grapheneos.org \

certbot/0.releases.grapheneos.org

@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name releases.grapheneos.org \
     -d releases.grapheneos.org \
     -d apps.grapheneos.org \

certbot/attestation.app

@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name attestation.app \
     -d attestation.app \
     -d www.attestation.app

certbot/discuss.grapheneos.org

@@ -1,5 +1,5 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name discuss.grapheneos.org \
     -d discuss.grapheneos.org

certbot/grapheneos.social

@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name grapheneos.social \
     -d grapheneos.social \
     -d www.grapheneos.social

certbot/matrix.grapheneos.org

@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name matrix.grapheneos.org \
     -d matrix.grapheneos.org \
     -d element.grapheneos.org

certbot/mta-sts.mail.grapheneos.org

@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name mta-sts.mail.grapheneos.org \
     -d mta-sts.mail.grapheneos.org \
     -d mail.grapheneos.org \

certbot/staging.attestation.app

@@ -1,5 +1,5 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name staging.attestation.app \
     -d staging.attestation.app

certbot/staging.grapheneos.org

@@ -1,5 +1,5 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
-    --deploy-hook "certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
     --cert-name staging.grapheneos.org \
     -d staging.grapheneos.org