chore: update doc and certmagic policy

example/talk.auto.tls.example.yaml

@@ -0,0 +1,9 @@
+server:
+  # Provide your domain list and email, server will try to generate cert for you.
+  # Port 80 and 443 will be used. Request to HTTP(80) will be redirected to HTTPS(443)
+  # By default, CertMagic stores assets on the local file system in $HOME/.local/share/certmagic (and honors $XDG_DATA_HOME if set). CertMagic will create the directory if it does not exist. If writes are denied, things will not be happy, so make sure CertMagic can write to it!
+  tls:
+    auto-tls-domains:
+      - "a.example.com"
+      - "b.example.com"
+    auto-tls-lets-encrypt-email: "you@yours.com"

internal/start_server.go

@@ -70,7 +70,7 @@ func StartServer() {
 		// provide an email address
 		certmagic.DefaultACME.Email = tls.AutoTlsLetsEncryptEmail
 		// use the staging endpoint while we're developing
-		certmagic.DefaultACME.CA = certmagic.LetsEncryptStagingCA
+		certmagic.DefaultACME.CA = certmagic.LetsEncryptProductionCA
 		e.Logger.Fatal(certmagic.HTTPS(tls.AutoTlsDomains, e))
 	} else {
 		addr := fmt.Sprintf(":%d", conf.Server.Port)