Differences

This shows you the differences between two versions of the page.

--- servers:linux:nginx:lets_encrypt [2026/07/10 22:35] – [Timer] Sean Rhone
+++ servers:linux:nginx:lets_encrypt [2026/10/22 06:58] (current) – Sean Rhone
@@ Line 42: / Line 42: @@
 key-type = 'ecdsa'
 elliptic-curve = 'secp384r1'
-pre-hook = systemctl stop 'nginx'
-post-hook = systemctl start 'nginx'
 domains = 'realmofespionage.xyz, wiki.realmofespionage.xyz, media.realmofespionage.xyz, blog.realmofespionage.xyz, social.realmofespionage.xyz, forums.realmofespionage.xyz, status.realmofespionage.xyz, files.realmofespionage.xyz, test.realmofespionage.xyz, chat.realmofespionage.xyz'
@@ Line 58: / Line 55: @@
   sudo systemctl stop 'nginx'
-====== Automatic Cert Renewal ======
+====== Scripts ======
-===== Service =====
+===== Renewal =====
-  sudo -e '/etc/systemd/system/certbot-renew-custom.service'
+  mkdir -p ~/'.local/scripts/www/certbot' && nano ~/'.local/scripts/www/certbot/certbot-renewal.sh' && chmod +x ~/'.local/scripts/www/certbot/certbot-renewal.sh'
 <code>
-[Service]
+#!/bin/sh
-Type=oneshot
-WorkingDirectory=/tmp
+cd '/tmp'
-ExecStart='/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet
+'/usr/bin/systemctl' stop 'nginx'
+'/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet
+'/usr/bin/systemctl' start 'nginx'
 # End</code>
-===== Timer =====
+  ~/'.local/scripts/www/certbot/certbot-renewal.sh'
+====== cron ======
+===== Renewal =====
   * Weekly (Sunday) ''07:00:00 AM''
-  sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now
+  sudo mkdir -p '/etc/cron.d' && sudo -e '/etc/cron.d/certbot-renewal'
 <code>
-[Unit]
+#
-Description=Let's Encrypt Certificate Renewal
+SHELL=/bin/sh
-After=network-online.target
-Wants=network-online.target
-[Timer]
+7 * * sun root '/home/espionage724/.local/scripts/www/certbot/certbot-renewal.sh'
-OnCalendar=Sun *-*-* 07:00:00
-Persistent=true
-[Install]
-WantedBy=timers.target
 # End</code>
-  sudo systemctl start 'certbot-renew-custom' && sudo systemctl status 'certbot-renew-custom' -l