[
{ type: install
  message: <<EOM
There are sample scripts in
    %%ETCDIR%%
that you can use for renewing and deploying certificates.

In order to run the script regularly to update the certificates add this line
to /etc/periodic.conf:

    weekly_lego_enable="YES"

Additionally the following parameters may be added to /etc/periodic.conf:

Script to run to renew certificates, will be run as %%LEGO_USER%% (required)
    weekly_lego_renewscript="%%ETCDIR%%/lego.sh"

To run a script after the renewal to deploy certificates
    weekly_lego_deployscript="%%ETCDIR%%/deploy.sh"

Note that the deploy script is provided as a sample and may need to be modified
for your environment. The script will attempt to deploy certificates to
    %%PREFIX%%/etc/ssl/certs
and private keys to
    %%PREFIX%%/etc/ssl/private.
The script also tries to restart nginx.

If using the sample renew script, lego will load its configuration from
    %%ETCDIR%%/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details.

To run lego for the first time, configure an account and certificate in
    %%ETCDIR%%/lego.yml.
Then execute lego as the %%LEGO_USER%% user:
    $ lego --config %%ETCDIR%%/lego.yml
EOM
},
{ type: upgrade
  maximum_version: 5.0
  message: <<EOM
To migrate from lego v4 to v5 run

    $ lego migrate --path %%PREFIX%%/etc/ssl/lego

as the %%LEGO_USER%% user. This command migrates to a new file structure and
outputs configuration that can be used as the basis for
    %%ETCDIR%%/lego.yml.
See https://go-acme.github.io/lego/references/ref-file/index.html for more
details on the configuration file format.

    %%ETCDIR%%/lego.sh
will need to be updated as well, as the renew command has been
removed. The script can also be simplified when a configuration file is used.
See
    %%ETCDIR%%/lego.sh.sample
for an example.
EOM
}
]