change rsa key size

hosts.yaml

@@ -7,6 +7,8 @@ all:
   vars:
     ansible_become: false
   
+    certbotdomains:
+      - "jabber.0rpheus.net"
 
     haproxy_domains:
       # <Domain>: <Backend>

roles/haproxy/files/update_haproxy_certs.sh

@@ -13,12 +13,13 @@ do
           --agree-tos                        \
           --email micha@0rpheus.net          \
           --preferred-challenges=http        \
+          --rsa-key-size 4096                \
           --http-01-port=8888
     fi
 done < /etc/haproxy/domains.txt
 
 # renew all certificates
-certbot renew --http-01-port=8888 --preferred-challenges=http
+certbot renew --http-01-port=8888 --preferred-challenges=http --rsa-key-size 4096
 
 # copy certificates
 find /etc/letsencrypt/live/ -mindepth 1 -maxdepth 1 -type d | while read -r domain_path