From 7c3fe4d0c0a71e530f8235cd82a92c1d3af0d282 Mon Sep 17 00:00:00 2001
From: William Lallemand <wlallemand@haproxy.com>
Date: Thu, 2 Apr 2026 13:29:43 +0200
Subject: [PATCH] MINOR: acme: set the default dns-delay to 30s

Set the default dns-delay to 30s so it can be more efficient with fast
DNS providers. The dns-timeout is set to 600s by default so this does
not have a big impact, it will only do more check and allow the
challenge to be started more quickly.
---
 doc/configuration.txt | 2 +-
 src/acme.c            | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/configuration.txt b/doc/configuration.txt
index f579bc157..f4d57874b 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -32314,7 +32314,7 @@ directory <string>
 dns-delay <time>
   When "challenge-ready" includes "dns", configure the delay before the first
   DNS resolution attempt and between retries. The value is a time expressed in
-  HAProxy time format (e.g. "5m", "300s"). Default is 300 seconds.
+  HAProxy time format (e.g. "5m", "300s"). Default is 30 seconds.
 
   Note that the resolution goes through the configured "default" resolvers
   section, not the authoritative name servers. Results may therefore still be
diff --git a/src/acme.c b/src/acme.c
index a1e88250f..bb5d86aa7 100644
--- a/src/acme.c
+++ b/src/acme.c
@@ -197,7 +197,7 @@ struct acme_cfg *new_acme_cfg(const char *name)
 	ret->linenum = 0;
 
 	ret->challenge = strdup("http-01"); /* default value */
-	ret->dns_delay = 300; /* default DNS re-trigger delay in seconds */
+	ret->dns_delay = 30; /* default DNS re-trigger delay in seconds */
 	ret->dns_timeout = 600; /* default DNS retry timeout */
 
 	/* The default generated keys are EC-384 */