certbot had been using the default config directory (which includes the certificate store) in /etc/letsencrypt. This meant that on system upgrade, certs would be regenerated on boot. This worked but is improper, and it is a possible point of failure, and certainly a cause of delay, during the boot config load. Move the config dir to /config/auth so that it will persist under system upgrade. The change is invisible to the config file, and so does not require migration.
Description
Description
Details
Details
- Difficulty level
- Unknown (require assessment)
- Version
- vyos-1.3
- Why the issue appeared?
- Will be filled on close
- Is it a breaking change?
- Perfectly compatible
- Issue type
- Internal change (not visible to end users)