From b6d92556e124fa99318b8f708e064109cb526a15 Mon Sep 17 00:00:00 2001
From: Grant Slater <github@firefishy.com>
Date: Wed, 26 Feb 2025 15:19:02 +0000
Subject: [PATCH] letsencrypt: ensure certs are renewed as ecdsa key type

---
 cookbooks/letsencrypt/files/default/bin/renew | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cookbooks/letsencrypt/files/default/bin/renew b/cookbooks/letsencrypt/files/default/bin/renew
index 147abf1e4..f3c7cd0cd 100755
--- a/cookbooks/letsencrypt/files/default/bin/renew
+++ b/cookbooks/letsencrypt/files/default/bin/renew
@@ -1,6 +1,7 @@
 #!/bin/sh
 
 /usr/bin/certbot renew \
+    --key-type ecdsa \
     --quiet \
     --config-dir /srv/acme.openstreetmap.org/config \
     --work-dir /srv/acme.openstreetmap.org/work \
-- 
2.39.5