Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-07-26 16:25:25 -04:00
Code Issues Projects Releases Packages Wiki Activity

add authenticated DNS-over-TLS to nameservers

Browse source
This commit is contained in:
Daniel Micay 2023-11-04 22:16:56 -04:00
parent 3a92693611
commit 38bb002a01
10 changed files with 59 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

19
certbot/0.ns2.grapheneos.org Normal file
View file

@ -0,0 +1,19 @@
certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
--key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
--deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
--cert-name ns2.grapheneos.org \
-d ns2.attestation.app \
-d ns2.grapheneos.app \
-d ns2.grapheneos.ca \
-d ns2.grapheneos.com \
-d ns2.grapheneos.dev \
-d ns2.grapheneos.info \
-d ns2.grapheneos.net \
-d ns2.grapheneos.network \
-d ns2.grapheneos.online \
-d ns2.grapheneos.org \
-d ns2.grapheneos.ovh \
-d ns2.grapheneos.page \
-d ns2.grapheneos.social \
-d ns2.seamlessupdate.app \
-d ns2.vanadium.app

19
certbot/ns1.grapheneos.org Normal file
View file

@ -0,0 +1,19 @@
certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
--key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
--deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
--cert-name ns1.grapheneos.org \
-d ns1.attestation.app \
-d ns1.grapheneos.app \
-d ns1.grapheneos.ca \
-d ns1.grapheneos.com \
-d ns1.grapheneos.dev \
-d ns1.grapheneos.info \
-d ns1.grapheneos.net \
-d ns1.grapheneos.network \
-d ns1.grapheneos.online \
-d ns1.grapheneos.org \
-d ns1.grapheneos.ovh \
-d ns1.grapheneos.page \
-d ns1.grapheneos.social \
-d ns1.seamlessupdate.app \
-d ns1.vanadium.app