From ebd0c7d8d083be16081c8ff6a272f53e24328cc6 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Sun, 5 Nov 2023 01:32:44 -0500
Subject: [PATCH] add staging nameserver certbot setup

---
 certbot/ns1.staging.grapheneos.org | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 certbot/ns1.staging.grapheneos.org

diff --git a/certbot/ns1.staging.grapheneos.org b/certbot/ns1.staging.grapheneos.org
new file mode 100644
index 0000000..6234fcd
--- /dev/null
+++ b/certbot/ns1.staging.grapheneos.org
@@ -0,0 +1,6 @@
+certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
+    --key-type ecdsa --reuse-key --must-staple --preferred-chain "ISRG Root X1" \
+    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
+    --cert-name ns1.staging.grapheneos.org \
+    -d ns1.staging.grapheneos.org \
+    -d ns1.staging.attestation.app