Acme challenges are handled by the domain controller!

1 files changed, 6 insertions, 0 deletions

diff --git a/roles/relayd/templates/relayd.conf.j2 b/roles/relayd/templates/relayd.conf.j2
index dbd95ad..8ef03bc 100644
--- a/roles/relayd/templates/relayd.conf.j2
+++ b/roles/relayd/templates/relayd.conf.j2
@@ -41,9 +41,14 @@ http protocol "https" {
 {% endif %}
 {##}
 {% endfor %}
+	return error
 }
 
 http protocol "http" {
+	
+	# acme
+	pass request quick path "/.well-known/acme-challenge/*" forward to <local>
+
 	pass request header "Host" value "{{ global.domain_name }}" forward to <local>
 {% for h in groups["servers"] %}
 {% set h = dict(hostvars[h]) %}
@@ -55,6 +60,7 @@ http protocol "http" {
 {% endif %}
 {##}
 {% endfor %}
+	return error
 }
 
 # relays