# Improvements to web.letsencrypt.ssl.template.yml

**URL:** https://meta.discourse.org/t/improvements-to-web-letsencrypt-ssl-template-yml/328033
**Category:** Development
**Tags:** docker, letsencrypt
**Created:** [September 25, 2024, 7:00am UTC](https://meta.discourse.org/t/improvements-to-web-letsencrypt-ssl-template-yml/328033 "2024-09-25T07:00:20Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Tealk](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tealk/32/525923_2.png) [@Tealk](https://meta.discourse.org/u/Tealk)
#### Post date: [September 25, 2024, 7:00am UTC](https://meta.discourse.org/t/improvements-to-web-letsencrypt-ssl-template-yml/328033/1 "2024-09-25T07:00:20Z")

</div>

Since I’m not sure which category it belongs in if you want to talk about improvements, I’ll post it here. If it is wrong please move it.

I would like to talk about [discourse\_docker/templates/web.letsencrypt.ssl.template.yml at main · discourse/discourse\_docker · GitHub](https://github.com/discourse/discourse_docker/blob/main/templates/web.letsencrypt.ssl.template.yml).

First of all, I wonder why there are 2 variables in the template `“${LETSENCRYPT_DIR}”` and `$$ENV_LETSENCRYPT_DIR`. This harbors the potential that the paths could differ.

Then why an RSA4096 is generated, I don’t know of any browser that doesn’t already support ECDSA P-384.

Finally, I would add ` --server letsencrypt` to the issue\_cert command, for security reasons.