[GH-ISSUE #172] tls = "letsencrypt" and acme-dns.service #68

New issue

Closed

opened 2026-03-13 15:38:54 +03:00 by kerem · 3 comments

kerem commented

2026-03-13 15:38:54 +03:00

Owner

Originally created by @lateagain on GitHub (Jul 10, 2019).
Original GitHub issue: https://github.com/acme-dns/acme-dns/issues/172

Had a problem enabling ssl with tls = "letsencrypt" combined with the limited user service.

Followed the README to run as a service with user acme-dns and it only worked when run in the foreground. (could do with some logging for the certificate request).

Used lsof -p <pid of acme-dns> to see what the differences were.
The cwd for the service is "\" and it can't create the api-certs directory there.

Fixed by adding "WorkingDirectory=~" to the acme-dns.service file.

Originally created by @lateagain on GitHub (Jul 10, 2019). Original GitHub issue: https://github.com/acme-dns/acme-dns/issues/172 Had a problem enabling ssl with tls = "letsencrypt" combined with the limited user service. Followed the README to run as a service with user acme-dns and it only worked when run in the foreground. (could do with some logging for the certificate request). Used lsof -p \<pid of acme-dns\> to see what the differences were. The cwd for the service is "\\" and it can't create the api-certs directory there. Fixed by adding "WorkingDirectory=~" to the acme-dns.service file.

kerem

2026-03-13 15:38:54 +03:00

closed this issue
added the
Documentation
label

kerem commented

2026-03-13 15:39:10 +03:00

Author

Owner

@joohoi commented on GitHub (Sep 3, 2019):

Good to hear that you got it fixed. Another option to handle this would be to define a full path to config.cfg acme_cache_dir. This could be documented better in the installation instructions and / or the config.cfg itself.

@joohoi commented on GitHub (Sep 3, 2019): Good to hear that you got it fixed. Another option to handle this would be to define a full path to `config.cfg` `acme_cache_dir`. This could be documented better in the installation instructions and / or the `config.cfg` itself.

kerem commented

2026-03-13 15:39:15 +03:00

Author

Owner

@lateagain commented on GitHub (Sep 11, 2019):

I added a pull request (set working directory in the systemd service file) because with the default working directory the service can't create the "api-certs" directory for ssl certificate.

@lateagain commented on GitHub (Sep 11, 2019): I added a pull request (set working directory in the systemd service file) because with the default working directory the service can't create the "api-certs" directory for ssl certificate.

kerem commented

2026-03-13 15:39:20 +03:00

Author

Owner

@joohoi commented on GitHub (Oct 20, 2019):

Closing as resolved

@joohoi commented on GitHub (Oct 20, 2019): Closing as resolved

kerem referenced this issue

2026-03-13 16:14:57 +03:00

[PR #68] [MERGED] README: add acme.sh and change Certbot hook URL #272