acme/certificate: Enabled OCSP must-stable for certificates

5 years ago · bae56869f6
parent 9ba13c5d73
commit bae56869f6
1 changed files with 1 additions and 0 deletions
--- a/roles/acme/certificate/tasks/main.yml
+++ b/roles/acme/certificate/tasks/main.yml
@ -7,6 +7,7 @@
    ./acme.sh --issue
    --domain "{{ domain }}"
    --webroot "{{ nginx_validation_root_directory }}"
+    --ocsp-must-staple
  args:
    chdir: "~/.acme.sh"
  register: acme_issue_result