Sample Header Ad - 728x90

About Let’s Encrypt's certification renew and nginx

0 votes
1 answer
179 views
I'm doing the Let’s Encrypt *for the firs time* and this *101 question* might quite possibly have been answered somewhere, but anyway, from https://eff-certbot.readthedocs.io/en/latest/using.html#setting-up-automated-renewal > Most Certbot installations come with automatic renewals preconfigured. This is done by means of a scheduled task which runs certbot renew periodically. So, to simplify things, I'm using the Certbot docker container to get certificate, and that container does not come with automatic renewals preconfigured, thus I need to enable that functionality myself. The scheduled cron task is pretty straightforward: 0 0,12 * * * root sleep $SLEEPTIME && certbot renew -q My question is, Let's Encrypt certificates is good for **three months**, but this official recommendation from the Certbot document says that we need to try renewal **every 12 hours**. This looks really excessive to me. Anyone know how soon we can do the renewal? (As from https://unix.stackexchange.com/questions/760300/update-lets-encrypt-certificate-from-command-line I know that there is no --force-renewal option) I meant, if the renewal can happen 10 days ahead, then my cron job can be set every 5 days, if 6 days ahead, I'll use 3. Also anyone knows if certbot renew's return code can be used to notify my script to trigger my nginx config reload after the renewal indeed happens? Thanks
Asked by xpt (1858 rep)
Aug 2, 2024, 12:17 PM
Last activity: Aug 5, 2024, 09:30 AM