The service has 4 IP-addresses, and I was the fortunate guy to run into an issue with an ISP breaking 1.1.1.1 (but not 1.0.0.1). This also fixes IPv6-only networks.
```
$ host one.one.one.one
one.one.one.one has address 1.0.0.1
one.one.one.one has address 1.1.1.1
one.one.one.one has IPv6 address 2606:4700:4700::1111
one.one.one.one has IPv6 address 2606:4700:4700::1001
```
Use-case is being able to proxy these requests over an internal host.
Allowing access to 1.1.1.1 from the DC-LAN wouldn't work for us.
Example config for Apache
```
ProxyPass /dns-query https://cloudflare-dns.com/dns-query
ProxyPass /api/v1/purge https://one.one.one.one/api/v1/purge
```
Building a service that sits in our DMZ where internal hosts request creation/deletion of _acme-challenge TXT RRs using an API. This same host can be used to proxy the Cloudflare purge and query requests.
* implement basic haproxy deploy
HAProxy requires the certificate chain and key to be concatenated and placed somewhere (can be anywhere). This script expects a single environment variable with the path where the concatenated PEM file should be written
* add docs for HAProxy deployment
* Add conditional check to ensure path is provided
* remove whitespace
* remove more whitespace (trying to get TravisCI working)
* add reload
* update for POSIX compliance
* add documentation for reload command
* Update haproxy deploy hook
Add functionality to add OCSP stapling info (.ocsp file), issuer (.issuer file) and multi-cert bundles (suffix on pem file based on key type).
This also corrects the order of key, certificate and intermediate in the PEM file, which although HAProxy does not seem to care, was incorrect in the prior version.
* Document updated haproxy deploy hook
* Fix variable name
* whitespace fixes
* Support HAPROXY_DEPLOY_PEM_PATH
Adds compatibility to original haproxy deploy hook while still allowing custom PEM file name (via HAPROXY_DEPLOY_PEM_NAME)
* update for new haproxy deploy vars
* Fix return from reload
* Fix Le_Keylength case
* Update cert suffix for bundles .ocsp generation
* Whitepspace
* Change default for reload
* Readme update
* Actually set reload default
* Fix README.md confict
