NAME

SYNOPSIS

acmetool [<flags>] <command> [<args> ...]

DESCRIPTION

You use acmetool by configuring targets (typically using the "want") command. acmetool then requests certificates as necessary to satisfy the configured targets. New certificates are requested where existing ones are soon to expire.

acmetool stores its state in a state directory. It can be specified on invocation via the --state option; otherwise, the path in ACME_STATE_DIR is used, or, failing that, the path "/var/db/acme" (recommended).

The --xlog options control the logging. The --service options control privilege dropping and daemonization and are applicable only to the redirector subcommand.

OPTIONS

--help

Show context-sensitive help (also try --help-long and --help-man).

--state=/var/db/acme

Path to the state directory (env: ACME_STATE_DIR)

--hooks=/usr/local/libexec/acme/hooks

Path to the notification hooks directory (env: ACME_HOOKS_DIR)

--batch

Do not attempt interaction; useful for cron jobs. (acmetool can still obtain responses from a response file, if one was provided.)

--stdio

Don't attempt to use console dialogs; fall back to stdio prompts

--response-file=RESPONSE-FILE

Read dialog responses from the given file (default: $ACME_STATE_DIR/conf/responses)

--version

Print version information

--xlog.facility=daemon

Syslog facility to use

--xlog.syslog

Log to syslog?

--xlog.syslogseverity=DEBUG

Syslog severity limit

--xlog.journal

Log to systemd journal?

--xlog.journalseverity=DEBUG

Systemd journal severity limit

--xlog.severity=NOTICE

Log severity (any syslog severity name or number)

--xlog.file=""

Log to filename

--xlog.fileseverity=TRACE

File logging severity limit

--xlog.stderr

Log to stderr?

--xlog.stderrseverity=TRACE

stderr logging severity limit

--service.cpuprofile=""

Write CPU profile to file

--service.debugserveraddr=""

Address for debug server to listen on (do not specify a public address) (default: disabled)

--service.uid=""

UID to run as (default: don't drop privileges)

--service.gid=""

GID to run as (default: don't drop privileges)

--service.daemon

Run as daemon? (doesn't fork)

--service.stderr

Keep stderr open when daemonizing

--service.chroot=""

Chroot to a directory (must set UID, GID) ("/" disables)

--service.pidfile=""

Write PID to file with given filename and hold a write lock

--service.fork

Fork? (implies -daemon)

SUBCOMMANDS

AUTHOR

SEE ALSO

Report bugs at: <https://github.com/hlandau/acmetool/issues>