Obtain automated SSL/TLS certificates with wildcard support using this Makefile. Can run on CI (e.g. Github Actions).
- ZeroSSL EAB credentials, see details at https://zerossl.com/documentation/acme/
- DNS for the domain must be managed by Cloudflare.
email = root@example.com
agree-tos = true
no-eff-email = true
non-interactive = true
staple-ocsp = true
rsa-key-size = 4096
server = https://acme.zerossl.com/v2/DV90
eab-kid = ...
eab-hmac-key = ...Optionally you may want to configure the following CAA records for your apex domain:
iodef mailto:youremail@example.comissuewild sectigo.comissue sectigo.com