markt-de / puppet-acme

Centralized SSL certificate management using acme.sh and the ACME protocol
https://forge.puppet.com/markt/acme
Apache License 2.0
9 stars 17 forks source link

Set timeout for Exec dynamically #9

Closed fraenki closed 4 years ago

fraenki commented 6 years ago

When using DNS-01 and a high value for dnssleep the exec may terminate due to a timeout:

Error: /Stage[main]/Acme::Request::Handler/Acme::Request[foobar.example.com]/Exec[issue-certificate-foobar.example.com]/returns: change from 'notrun' to ['0'] failed: Command exceeded timeout

Maybe we should set the exec timeout dynamically, depending on the value of dnssleep.

fraenki commented 4 years ago

I don't think this is strictly necessary. Anyone who requires higher values for Exec timeout should probably set it globally or disable it.