Skip to content

Commit

Permalink
Set renewal cron job to daily (#147)
Browse files Browse the repository at this point in the history
Let's Encrypt recommend that the `certbot renew` be run daily, or even twice daily.  There's no danger of hitting the rate limits with a properly-configured system, as certbot checks your existing cert first and only attempts renewal if it's valid for less than 30 more days at the time the command runs.
  • Loading branch information
danb35 authored and markjcrane committed Nov 9, 2018
1 parent c7d2318 commit 4ce6784
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions source/getting_started/lets_encrypt.rst
Original file line number Diff line number Diff line change
Expand Up @@ -285,10 +285,10 @@ Crontab can be used to renew let's encrypt.

Create crontab -e
0 0 9 JAN-DEC * /usr/bin/certbot renew &>/var/log/fusionpbx_certbot.cronlog
2 3 * * * /usr/bin/certbot renew &>/var/log/fusionpbx_certbot.cronlog

This executes every month on the 9th at midnight
This executes daily at 3:02 AM (local time). Certbot will check your existing certificate. If it has less than 30 days' validity remaining, it will attempt to renew the certificate. It runs daily in case a renewal attempt fails, it will just try again the next day.


**List crontabs**
Expand Down

0 comments on commit 4ce6784

Please sign in to comment.