Commit da2795d3 authored by Ondřej Nový's avatar Ondřej Nový

Renew certificate 30 days before expiration

According to https://community.letsencrypt.org/t/quick-start-guide/1631
Renewals and Lifetimes:
Certificates from Let's Encrypt are valid for 90 days. We recommend
renewing them every 60 days to provide a nice margin of error.
parent 1573b688
...@@ -46,8 +46,8 @@ ...@@ -46,8 +46,8 @@
# default: <unset> # default: <unset>
#HOOK= #HOOK=
# Minimum days before expiration to automatically renew certificate (default: 14) # Minimum days before expiration to automatically renew certificate (default: 30)
#RENEW_DAYS="14" #RENEW_DAYS="30"
# Regenerate private keys instead of just signing new certificates on renewal (default: no) # Regenerate private keys instead of just signing new certificates on renewal (default: no)
#PRIVATE_KEY_RENEW="no" #PRIVATE_KEY_RENEW="no"
......
...@@ -15,7 +15,7 @@ BASEDIR="${SCRIPTDIR}" ...@@ -15,7 +15,7 @@ BASEDIR="${SCRIPTDIR}"
CA="https://acme-v01.api.letsencrypt.org/directory" CA="https://acme-v01.api.letsencrypt.org/directory"
LICENSE="https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf" LICENSE="https://letsencrypt.org/documents/LE-SA-v1.0.1-July-27-2015.pdf"
HOOK= HOOK=
RENEW_DAYS="14" RENEW_DAYS="30"
PRIVATE_KEY= PRIVATE_KEY=
KEYSIZE="4096" KEYSIZE="4096"
WELLKNOWN= WELLKNOWN=
......
...@@ -100,6 +100,7 @@ mkdir -p .acme-challenges/.well-known/acme-challenge ...@@ -100,6 +100,7 @@ mkdir -p .acme-challenges/.well-known/acme-challenge
echo 'CA="https://testca.kurz.pw/directory"' > config.sh echo 'CA="https://testca.kurz.pw/directory"' > config.sh
echo 'LICENSE="https://testca.kurz.pw/terms/v1"' >> config.sh echo 'LICENSE="https://testca.kurz.pw/terms/v1"' >> config.sh
echo 'WELLKNOWN=".acme-challenges/.well-known/acme-challenge"' >> config.sh echo 'WELLKNOWN=".acme-challenges/.well-known/acme-challenge"' >> config.sh
echo 'RENEW_DAYS="14"' >> config.sh
touch domains.txt touch domains.txt
# Check if help command is working # Check if help command is working
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment