3 ms·
Not at all. Let's say you manage 100 machines, possibly for different domains, and each generates their own certs. Now you probably want monitoring that alerts
by perlgeek 9y ago
Not at all. Let's say you manage 100 machines, possibly for different domains, and each generates their own certs. Now you probably want monitoring that alerts you when the certificate is about to expire in the next 20 days (you can renew them 30 days before they expire, without running into rate limit shenanigans).
With 100 servers, you'll have on average about two calendar entries per day, most of which are no-ops, because the certificate renewal worked fine.
- lkerrekfjk 9y agoYou certainly do not need "infinite scaling" to do that. Just a queue of workers running on a dumb server or even just a crontab... Yes it is the very definition of over engineering.
- perlgeek 9y agoNo, you don't need "infinite scaling" for just that. But if you have a FaaS-Setup anyway, you might as well reuse it for such relatively simple (but still useful) tasks.
- icebraining 9y agoA full Linux kernel and cron daemon for that? You could run it on an ESP32!
- stephenr 9y agoYou know that LE will email you if a cert isn't automatically renewed, right?
- detaro 9y agoAnecdotally, the case of "certificate renewed, but setup not properly configured to reload all services afterwards" happens quite a bit.
- inopinatus 9y agoSee also: updating vulnerable library packages but not restarting dependent daemons.