Roman KivalinandClaude Opus 4.6 c717da348a Add custom file permissions for key and certificate files ...

Support key_mode, key_owner, key_group and cert_mode, cert_owner,
cert_group per certificate. Mode is an octal string (e.g. "0640"),
owner/group are resolved by name via getpwnam/getgrnam.

Permissions are checked before applying — system calls are only made
when the current state differs from the desired state, and changes
are logged. Runs on every renew for existing files, not just when
certificates are renewed. Defaults: key 0600, cert 0644, owner/group
unchanged.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-17 21:03:59 +02:00

..

certforge.service

Initial implementation of certforge ACME certificate manager

2026-04-12 20:07:27 +02:00

certforge.timer

Initial implementation of certforge ACME certificate manager

2026-04-12 20:07:27 +02:00

config.toml

Add custom file permissions for key and certificate files

2026-04-17 21:03:59 +02:00