Add NEWS files with breaking changes.

1 files changed, 19 insertions, 0 deletions

diff --git a/debian/lacme.NEWS b/debian/lacme.NEWS
index d20acdc..91ddd30 100644
--- a/debian/lacme.NEWS
+++ b/debian/lacme.NEWS
@@ -1,3 +1,22 @@
+lacme (0.8.0-1) UNRELEASED; urgency=medium
+
+    The internal webserver now runs as system user _lacme-www:nogroup instead of
+    www-data:www-data by default.  The internal ACME client now runs as system
+    user _lacme-client:nogroup instead of nobody:nogroup by default.  Both
+    settings are configurable in the lacme(8) configuration file.
+
+    lacme(8) loads its configuration file from /etc/lacme/lacme.conf when
+    running as root, and from $XDG_CONFIG_HOME/lacme/lacme.conf otherwise.
+    There is no lookup in the current directory anymore, nor fallback lookup to
+    /etc.
+
+    'challenge-directory' now needs to be set to an *existing* directory
+    (writable by the lacme client user).  Since lacme(8) spawns a builtin
+    webserver by default the change only affects configurations with a custom
+    'challenge-directory' setting.
+
+ -- Guilhem Moulin <guilhem@debian.org>  Mon, 22 Feb 2021 02:00:00 +0100
+
 lacme (0.7-1) unstable; urgency=high
 
     The certificate indicated by 'CAfile' is no longer used as is in