nixos/acme: Update release notes

Changed files
+36 -1
nixos
doc
manual
from_md
release-notes
release-notes
+25 -1
nixos/doc/manual/from_md/release-notes/rl-2205.section.xml
···
</itemizedlist>
<section xml:id="sec-release-22.05-highlights">
<title>Highlights</title>
-
<itemizedlist spacing="compact">
<listitem>
<para>
PHP 8.1 is now available
···
value of <literal>true</literal> is now deprecated and will be
changed to <literal>false</literal> in 22.11. Configurations
using this default will print a warning when rebuilt.
</para>
</listitem>
<listitem>
···
</itemizedlist>
<section xml:id="sec-release-22.05-highlights">
<title>Highlights</title>
+
<itemizedlist>
+
<listitem>
+
<para>
+
<literal>security.acme.defaults</literal> has been added to
+
simplify configuring settings for many certificates at once.
+
This also opens up the the option to use DNS-01 validation
+
when using <literal>enableACME</literal> on web server virtual
+
hosts (e.g.
+
<literal>services.nginx.virtualHosts.*.enableACME</literal>).
+
</para>
+
</listitem>
<listitem>
<para>
PHP 8.1 is now available
···
value of <literal>true</literal> is now deprecated and will be
changed to <literal>false</literal> in 22.11. Configurations
using this default will print a warning when rebuilt.
+
</para>
+
</listitem>
+
<listitem>
+
<para>
+
<literal>security.acme</literal> certificates will now
+
correctly check for CA revokation before reaching their
+
minimum age.
+
</para>
+
</listitem>
+
<listitem>
+
<para>
+
Removing domains from
+
<literal>security.acme.certs._name_.extraDomainNames</literal>
+
will now correctly remove those domains during rebuild/renew.
</para>
</listitem>
<listitem>
+11
nixos/doc/manual/release-notes/rl-2205.section.md
···
## Highlights {#sec-release-22.05-highlights}
- PHP 8.1 is now available
## New Services {#sec-release-22.05-new-services}
···
- The `services.unifi.openPorts` option default value of `true` is now deprecated and will be changed to `false` in 22.11.
Configurations using this default will print a warning when rebuilt.
- The option
[services.ssh.enableAskPassword](#opt-services.ssh.enableAskPassword) was
···
## Highlights {#sec-release-22.05-highlights}
+
- `security.acme.defaults` has been added to simplify configuring
+
settings for many certificates at once. This also opens up the
+
the option to use DNS-01 validation when using `enableACME` on
+
web server virtual hosts (e.g. `services.nginx.virtualHosts.*.enableACME`).
+
- PHP 8.1 is now available
## New Services {#sec-release-22.05-new-services}
···
- The `services.unifi.openPorts` option default value of `true` is now deprecated and will be changed to `false` in 22.11.
Configurations using this default will print a warning when rebuilt.
+
+
- `security.acme` certificates will now correctly check for CA
+
revokation before reaching their minimum age.
+
+
- Removing domains from `security.acme.certs._name_.extraDomainNames`
+
will now correctly remove those domains during rebuild/renew.
- The option
[services.ssh.enableAskPassword](#opt-services.ssh.enableAskPassword) was