From 21cb56f4ffb4e21db09b4ffd88b217bdc5e5ff4d Mon Sep 17 00:00:00 2001
From: Jacob Coffee <jacob@z7x.org>
Date: Wed, 22 Oct 2025 12:08:33 -0400
Subject: [PATCH] renew certs before certspotter alerts us

---
 salt/tls/init.sls | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/tls/init.sls b/salt/tls/init.sls
index 40299be7..59071af4 100644
--- a/salt/tls/init.sls
+++ b/salt/tls/init.sls
@@ -65,7 +65,7 @@ certbot:
   acme.cert:
     - email: infrastructure-staff@python.org
     - webroot: /etc/lego
-    - renew: 14
+    - renew: 21
     {% if domain_config.get('aliases') %}
     - aliases:
       {% for alias in domain_config.get('aliases', []) %}