letsencrypt: ensure certs are renewed as ecdsa key type

diff --git a/cookbooks/letsencrypt/files/default/bin/renew b/cookbooks/letsencrypt/files/default/bin/renew
index 147abf1e4ec3cf976933d9f0f7a80861d8417c92..f3c7cd0cd16bb3a43c0710c066abeda3b6de5c3c 100755 (executable)
--- a/cookbooks/letsencrypt/files/default/bin/renew
+++ b/cookbooks/letsencrypt/files/default/bin/renew
@@ -1,6 +1,7 @@
 #!/bin/sh
 
 /usr/bin/certbot renew \
+    --key-type ecdsa \
     --quiet \
     --config-dir /srv/acme.openstreetmap.org/config \
     --work-dir /srv/acme.openstreetmap.org/work \