4 ms·
And this is the reason why Debian (and its derivs) ship a cron and systemd timer for you with certbot. You shouldn't have to think about or worry about this st
by hlieberman 7y ago
And this is the reason why Debian (and its derivs) ship a cron and systemd timer for you with certbot. You shouldn't have to think about or worry about this stuff. Certbot handles it for you.
- copperx 7y agoFor some reason my cron task always fails to renew, and I have to manually renew at the last minute, when I notice the certificate has expired. This is for a personal site, so it doesn't matter. I tried many things, and can verify the cron task renews when I test it, but months later it always fails.
- laggyluke 7y agoIs your cron, by any chance, configured to run on every first day of month at midnight?
- hlieberman 7y agoIs this on Debian? There should be a log file created in /var/log/letsencrypt on each attempt; if you could send me one at my username @debian.org, or ping me on Freenode IRC, I may be able to help you debug. I'm guessing it's because your renew.conf's trying to use the "simple" authentication method which won't work if you've got a webserver running.
- mrighele 7y agoNot a solution to your problem, but if you supply an email when creating a certificate, you will receive a notification plenty in advance (three or four weeks, I think)
- schoen 7y agoYou're welcome to join us on https://community.letsencrypt.org/ https://community.letsencrypt.org/ and we can help you debug this.
- johnchristopher 7y agoI receive a mail when certs are soon expired. I also set up traefik with auto renewal so it's a setup and forget thing now.
- WrtCdEvrydy 7y agoTry CapRover? It does your auto renews in the background.
- dimino 7y agoHey, it might be a bug that a "real" user could encounter, if you need any kind of motivation to actually look into it!