|
|
@ -795,6 +795,16 @@ environment.systemPackages = [ |
|
|
|
the deprecated <option>services.radicale.config</option> is used. |
|
|
|
the deprecated <option>services.radicale.config</option> is used. |
|
|
|
</para> |
|
|
|
</para> |
|
|
|
</listitem> |
|
|
|
</listitem> |
|
|
|
|
|
|
|
<listitem> |
|
|
|
|
|
|
|
<para> |
|
|
|
|
|
|
|
In the <option>security.acme</option> module, use of <literal>--reuse-key</literal> |
|
|
|
|
|
|
|
parameter for Lego has been removed. It was introduced for HKPK, but this security |
|
|
|
|
|
|
|
feature is now deprecated. It is a better security practice to rotate key pairs |
|
|
|
|
|
|
|
instead of always keeping the same. If you need to keep this parameter, you can add |
|
|
|
|
|
|
|
it back using <literal>extraLegoRenewFlags</literal> as an option for the |
|
|
|
|
|
|
|
appropriate certificate. |
|
|
|
|
|
|
|
</para> |
|
|
|
|
|
|
|
</listitem> |
|
|
|
</itemizedlist> |
|
|
|
</itemizedlist> |
|
|
|
</section> |
|
|
|
</section> |
|
|
|
|
|
|
|
|
|
|
|