46
edits
Changes
Jump to navigation
Jump to search
Line 53:
Line 53: − # export EDITOR=nano+ − # crontab -e+ + − + + + + +
→Renew of the certs
You may want to set this up as a cron job to run every two months, to make sure your certificate doesn't expire. Please see '''[[Crontab_Manager]]''' contrib for an easy way to achieve this. Or, to set this from the command line, do the following:
You may want to set this up as a cron job to run every two months, to make sure your certificate doesn't expire. Please see '''[[Crontab_Manager]]''' contrib for an easy way to achieve this. Or, to set this from the command line, do the following:
mkdir -p /etc/e-smith/templates-custom/etc/crontab
nano /etc/e-smith/templates-custom/etc/crontab/sslrenew
The following example will run the renewal script at 22:48 on the third of every other month (Feb, Apr, Jun, etc.):
The following example will run the renewal script at 22:48 on the third of every other month (Feb, Apr, Jun, etc.):
48 22 3 */2 * /opt/letsencrypt-renew.sh
48 22 3 */2 * root /opt/letsencrypt-renew.sh
expand-template /etc/crontab
service crond restart
The time and day of the month can be chosen at your discretion--I've deliberately chosen a time that isn't at the top or bottom of the hour, or on the first of the month, in the hope of reducing load on letsencrypt's servers. Since the certificates are good for 90 days, this will renew your certificate in plenty of time.
The time and day of the month can be chosen at your discretion--I've deliberately chosen a time that isn't at the top or bottom of the hour, or on the first of the month, in the hope of reducing load on letsencrypt's servers. Since the certificates are good for 90 days, this will renew your certificate in plenty of time.