frieze.conf

[app]
name="frieze"

[rootca]
# Use this to specify the location of a higher signing authority that
# will be used to generated the CA for your domain. If this is left
# empty, frieze will create its own root certification authority and
# use it to sign SSH keys and bastion certificates.
private_key='~/src/certauth/ca_root/private/ca.key.pem'
certificate='~/src/certauth/ca_root/certs/ca.cert.pem'
password='05Xuk02zeurp1984'

# Some default values for self-signed CA certificate
contact_email='admininstrator'
country='US'
province='NV'
locality='Carson City'
organization='OpenRelay Root CA'
organization_unit='Engineering'

[acme]
# Use this to specify the external certificate provider used to provide
# certificates for endpoints.
provider='letsencrypt'
env='prod'
useragent='frieze-openrelay'
keylen=2048

[extdns]
provider='aws'

[extcreds]

[extcreds.vultr]
apikey='IPFF5LJEBOVWMMIU7VUKSTK355JNC6XDRA3A'

[extcreds.aws]
apikey='AKIA2SA7PH2A6RBLCNXM'
apisecret='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'