acme-redirect.conf(5)

🎀 acme-redirect.conf(5) 🎀

ok so this is a File Formats Manual page, bestie — it's acme-redirect.conf, and it's about the config files for acme-redirect. welcome to the group chat 💅

---

✨ NAME ✨

acme-redirect.conf — the config files for acme-redirect, literally the settings home base 🏠

---

✨ SYNOPSIS ✨

/etc/acme-redirect.conf

that's the path, that's the vibe, memorize it 💖

---

✨ DESCRIPTION ✨

okay so this file is where you configure the general settings for acme-redirect. that's it, that's the job 💅

and if you're here looking to configure your certificates? wrong page bestie, you want acme-redirect.d(5) — go check that one out 🦋

---

✨ OPTIONS ([acme]) ✨

🌸 the [acme] section 🌸

• acme_email= — the contact email so your acme provider can actually reach you 😭 like, they're usually gonna notify you if your automatic renew doesn't seem to be working, or if the acme protocol is about to get updated. give them a way to slide into your inbox fr fr
• acme_url= — the acme endpoint you're using. the default is LetsEncrypt production, no cap 👑
• renew_if_days_left= — renew the certificate if the number of days left is equal to or lower than this. ⚠️ heads up: you're gonna run into issues if you set it lower than 1, so maybe don't 🙈 the default is 30 🎀

---

✨ OPTIONS ([system]) ✨

🦋 the [system] section 🦋

• exec= — a list of global fallback hooks that get executed if the certificate config didn't specify any hooks at all. these hooks are expected to be shell commands, so write 'em like you mean it ✨
• exec_extra= — a list of global hooks that run after any certificate is renewed and its own hooks have been executed. also shell commands 🫶 so like, the afterparty hooks 💃

---

✨ EXAMPLE ✨

here's what it actually looks like in the wild, copy-paste ready bestie 🍓

[acme]
acme_email = "nobody@example.com"
acme_url = "https://acme-staging-v02.api.letsencrypt.org/directory"
renew_if_days_left = 30

[system]
## Default hooks if the certificate config doesn't define any
exec = [
    "systemctl reload nginx",
]
## Execute these hooks globally for all certificates
exec_extra = [
    "systemctl reload dovecot",
]

the way that exec is the fallback and exec_extra is the always-runs-after one… iconic differentiation honestly 💀✨

---

✨ SEE ALSO ✨

• acme-redirect(1)
• acme-redirect.d(5)

go read those too, iykyk 📚

---

✨ AUTHORS ✨

acme-redirect was originally written by kpcyrd and is hosted at https://github.com/kpcyrd/acme-redirect — go show them some love, they ate 👑💖

---

and that's the whole page! 🎀 this was acme-redirect.conf(5) from the File Formats Manual, dated 2026-10-22 — mwah, go configure something gorgeous, bestie 💅✨🦋