guix/gnu/services/certbot.scm, branch master

services: certbot: Add dry-run? certificate option.

2025-07-08T07:54:06+00:00

* gnu/services/certbot.scm (certificate-configuration): Add dry-run? field.
(certbot-command): Use it to pass --dry-run to certbot.
* doc/guix.texi (Certificate Services): Document dry-run? option.

Change-Id: I26b0dc06e2b7e5fb34305deee09e311d085f8a4b
Signed-off-by: Maxim Cournoyer 
Modified-by: Maxim Cournoyer

services: certbot: Remove deprecated --manual-public-ip-logging-ok.

2025-07-08T07:54:06+00:00

The --manual-public-ip-logging-ok flag is now a no-op and was deprecated
https://github.com/certbot/certbot/pull/8381

* gnu/sevices/certbot.scm (certbot-command): Remove
--manual-public-ip-logging-ok when doing a manual challenge.

Signed-off-by: Maxim Cournoyer

services: certbot: Turn into a Shepherd timer.

2025-03-23T18:29:57+00:00

* gnu/services/certbot.scm (certbot-renewal-jobs): Rename to…
(certbot-renewal-shepherd-services): … this.  Return a list of Shepherd
services, including ‘renew-certbot-certificates’, formally defined…
(certbot-renewal-one-shot): … here.  Remove.
(certbot-service-type): Adjust accordingly.

Reviewed-by: Maxim Cournoyer 
Change-Id: I25ad9fc1277f4f6f948ab5fce7c6626f22591d10

services: certbot: Add certbot-configuration-package to profile.

2024-09-03T11:59:33+00:00

As the manual suggests running a certbot command to view the issued
certificates, add it to the profile.

* gnu/services/certbot.scm (certbot-service-type): Extend profile-service-type
with certbot-configuration-package.

Change-Id: I92618597bbdc8d838420b2e0f82de601b0bc609b
Signed-off-by: Ludovic Courtès

services: certbot: Add one-shot service to renew certificates.

2024-01-31T15:54:19+00:00

* gnu/services/certbot.scm (certbot-renewal-one-shot): New procedure.
(certbot-service-type)[extensions]: Add it to shepherd-root extension.
(certbot-command): Make connection errors return a different exit code.
(certbot-activation): Remove message with certificate renewal instructions.

Change-Id: I614ac6214a753dba0396e2385a75926c8355caa1
Signed-off-by: Clément Lassieur

services: certbot: Reload nginx in deploy hook.

2024-01-31T15:54:16+00:00

* gnu/services/certbot.scm (certbot-deploy-hook): Reload nginx.
* doc/guix.texi (Certificate services): Remove deploy-hook from example.

Change-Id: Ibb10481170a6fda7df72492072b939dd6a6ad176
Signed-off-by: Clément Lassieur

services: certbot: Create self-signed certificates before certbot runs.

2024-01-31T15:54:12+00:00

* gnu/services/certbot.scm (): Add
start-self-signed? field.
(generate-certificate-gexp): New procedure.
(certbot-activation): Generate self-signed certificates when
start-self-signed? is #t.
* doc/guix.texi (Certificate services): Document start-self-signed?.

Change-Id: Icfd85ae0c3e29324acbcde6ba283546cf0e27a1d
Signed-off-by: Clément Lassieur

services: certbot: Symlink certificates to /etc/certs.

2024-01-31T15:54:03+00:00

* gnu/services/certbot.scm (certbot-deploy-hook): New procedure.
(certbot-command): Pass new deploy hook to certbot.
* doc/guix.texi: Replace "letsencrypt/live" with "certs" throughout, except in
the certbot deploy-hook description.

Change-Id: I2ba5e4903d1e293e566b732a84b07d5a134b697d
Signed-off-by: Clément Lassieur

services: certbot: Fix nginx crash when certbot is used without domains.

2023-06-18T21:12:10+00:00

* gnu/services/certbot.scm (certbot-nginx-server-configurations):
Don't return a broken nginx-server-configuration with empty server_name
when no certificate domains are configured. Instead add a separate
server for every certificate, so 0 certificates adds 0 servers.

Signed-off-by: Ludovic Courtès 
Reviewed-by: Bruno Victal

services: certbot: Fix broken link.

2023-01-03T21:34:44+00:00

* gnu/services/certbot.scm (certbot-renewal-jobs): Fix broken link.

Signed-off-by: Maxim Cournoyer