Asceds default (overwritten by upgrades): /usr/lib/asceds/etc
Local setup (preserved between upgrades): /etc/asceds/

Executed in the following order:
local --> variables for asceds setup on the local computer 
site --> config variables common to the site, distributed by the certificate manager
hostconf --> config variables describing the host OS and services
certbot --> config variables for certbot management

First all the default config files are sourced,
then the local setup to overwrite the default values.

Scripts set sourcing order in ${ASCEDSCONF.
Refreshing is done through asceds-utils/asceds-source-etcconf

****************************************************************
asceds-site.conf:

# alarm email address
ALARM=""
# certificate manager hostname 
ASCEDSCRTMGR=""
# wget -> for self signed certificates on the certificate manager,
# add `--no-check-certificate' to wget 
WGET='/usr/bin/wget'
# asceds ssh public key
ASCEDSSSHPUBKEY=''
# list of encryption algorithms (rsa,ecc)
ASCEDSENCLIST="rsa"

