6 ms·
The system is intended to be automated. If you're manually renewing your cert every 60-90 days you're doing it wrong.
by dopamean 10y ago
The system is intended to be automated. If you're manually renewing your cert every 60-90 days you're doing it wrong.
- gardenforce 10y agoIt's third party validation just in case the certs don't auto-renew for whatever reason. We have 40+ domains and I sleep better with multiple levels of monitoring.
- Karunamon 10y agoUntil they get nginx support working (the letsencrypt-auto tool still bangs on about its support being buggy and experimental), I don't have many options.
- icebraining 10y agoI can't recommend acme-tiny enough. I have cron calling a very short script every month that uses openssl & acme-tiny to renew the cert, and by adding a 'location' block to my nginx configs, they don't need to be touched during renovation.