From: Grant Slater <github@firefishy.com>
Date: Wed, 26 Feb 2025 15:19:02 +0000 (+0000)
Subject: letsencrypt: ensure certs are renewed as ecdsa key type
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/b6d92556e124fa99318b8f708e064109cb526a15?ds=inline

letsencrypt: ensure certs are renewed as ecdsa key type
---

diff --git a/cookbooks/letsencrypt/files/default/bin/renew b/cookbooks/letsencrypt/files/default/bin/renew
index 147abf1e4..f3c7cd0cd 100755
--- a/cookbooks/letsencrypt/files/default/bin/renew
+++ b/cookbooks/letsencrypt/files/default/bin/renew
@@ -1,6 +1,7 @@
 #!/bin/sh
 
 /usr/bin/certbot renew \
+    --key-type ecdsa \
     --quiet \
     --config-dir /srv/acme.openstreetmap.org/config \
     --work-dir /srv/acme.openstreetmap.org/work \