From f22cd6c4e05ba78d3d4ad0960b5799ead0232577 Mon Sep 17 00:00:00 2001 From: Moritz Marquardt Date: Sat, 20 Nov 2021 21:12:28 +0100 Subject: [PATCH] Make it possible to disable rate limits --- README.md | 1 + certificates.go | 10 +++++++--- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 85d47ad..f545228 100644 --- a/README.md +++ b/README.md @@ -11,6 +11,7 @@ - `ACME_EMAIL` (default: `noreply@example.email`): Set this to "true" to accept the Terms of Service of your ACME provider. - `ACME_EAB_KID` & `ACME_EAB_HMAC` (default: don't use EAB): EAB credentials, for example for ZeroSSL. - `ACME_ACCEPT_TERMS` (default: use self-signed certificate): Set this to "true" to accept the Terms of Service of your ACME provider. +- `ACME_USE_RATE_LIMITS` (default: true): Set this to false to disable rate limits, e.g. with ZeroSSL. - `ENABLE_HTTP_SERVER` (default: false): Set this to true to enable the HTTP-01 challenge and redirect all other HTTP requests to HTTPS. Currently only works with port 80. - `DNS_PROVIDER` (default: use self-signed certificate): Code of the ACME DNS provider for the main domain wildcard. See https://go-acme.github.io/lego/dns/ for available values & additional environment variables. diff --git a/certificates.go b/certificates.go index 89961b1..e5aca5c 100644 --- a/certificates.go +++ b/certificates.go @@ -278,12 +278,16 @@ func obtainCert(acmeClient *lego.Client, domains []string, renew *certificate.Re var res *certificate.Resource var err error if renew != nil { - acmeClientRequestLimit.Take() + if os.Getenv("ACME_USE_RATE_LIMITS") != "false" { + acmeClientRequestLimit.Take() + } log.Printf("Renewing certificate for %v", domains) res, err = acmeClient.Certificate.Renew(*renew, true, false, "") } else { - acmeClientOrderLimit.Take() - acmeClientRequestLimit.Take() + if os.Getenv("ACME_USE_RATE_LIMITS") != "false" { + acmeClientOrderLimit.Take() + acmeClientRequestLimit.Take() + } log.Printf("Requesting new certificate for %v", domains) res, err = acmeClient.Certificate.Obtain(certificate.ObtainRequest{ Domains: domains,