# managed by Ansible
{% import 'macros.j2' as macros with context %}

authority {{ acme_authority.name }} {
	api url "{{ acme_authority.url }}"
	account key "{{ acme_authority.key }}"
}

{% call(h) macros.loop_valid_hosts(relayd_connected_hosts) -%}
{% for rule in h.acme_rules %}

domain {{ rule.domain }} {
	alternative names { www.{{ rule.domain }} }
	domain key "{{ acme_keys_dir }}/{{ rule.domain }}.key"
	domain full chain certificate "{{ acme_certificates_dir }}/{{ rule.domain }}.crt"
	sign with {{ acme_authority.name }}
}
{% endfor %}
{%- endcall %}