# Options for cert-proxy-server, appended to the command line of
# cert-proxy-server.service. For defaults see `cert-proxy-server -h` and
# cert-proxy-server(8).
#
# -certbase: the tree maintained by your ACME client, one directory per
# domain holding cert.pem, chain.pem, fullchain.pem and privkey.pem.
# The unit already passes -certbase /var/lib/dehydrated/certs (dehydrated);
# a -certbase in OPTS overrides it.
#
# dehydrated (the unit's default):
# OPTS="-certbase /var/lib/dehydrated/certs"
#
# certbot:
# OPTS="-certbase /etc/letsencrypt/live"
#
# Further examples:
# OPTS="-serve :443"
# OPTS="-certbase /etc/letsencrypt/live -serve 192.0.2.1:4433 -tls-min 1.3"
#
# Ports below 1024 work with the unit as shipped (root, CAP_NET_BIND_SERVICE),
# but not with the opt-in dynamic-user drop-in, see cert-proxy-server(8).
