From ccfa4cb18d764ce2e4ef02545c829eaa0296ecf0 Mon Sep 17 00:00:00 2001 From: Egor Tensin Date: Tue, 26 Dec 2023 21:38:37 +0100 Subject: letsencrypt: don't sort SANs Sort them in the /etc status file only, for consistency. This should allow users to supply the SANs in custom order, preserving the intended main certificate domain (or whatever the technical term is). --- roles/letsencrypt/templates/domain_list.txt.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'roles/letsencrypt/templates/domain_list.txt.j2') diff --git a/roles/letsencrypt/templates/domain_list.txt.j2 b/roles/letsencrypt/templates/domain_list.txt.j2 index d37e0bd..4641e2f 100644 --- a/roles/letsencrypt/templates/domain_list.txt.j2 +++ b/roles/letsencrypt/templates/domain_list.txt.j2 @@ -2,6 +2,6 @@ {{ letsencrypt_email }} {{ letsencrypt_credentials_ini }} -{% for domain in certificate_domains %} +{% for domain in certificate_domains | sort %} {{ domain }} {% endfor %} -- cgit v1.2.3