Differences

This shows you the differences between two versions of the page.

--- servers:linux:nginx:lets_encrypt [2026/10/22 06:58] – Sean Rhone
+++ servers:linux:nginx:lets_encrypt [2026/10/24 20:39] (current) – [Settings] Sean Rhone
@@ Line 42: / Line 42: @@
 key-type = 'ecdsa'
 elliptic-curve = 'secp384r1'
+pre-hook = '/usr/bin/systemctl stop nginx'
+post-hook = '/usr/bin/systemctl start nginx'
 domains = 'realmofespionage.xyz, wiki.realmofespionage.xyz, media.realmofespionage.xyz, blog.realmofespionage.xyz, social.realmofespionage.xyz, forums.realmofespionage.xyz, status.realmofespionage.xyz, files.realmofespionage.xyz, test.realmofespionage.xyz, chat.realmofespionage.xyz'
@@ Line 55: / Line 58: @@
   sudo systemctl stop 'nginx'
-====== Scripts ======
+====== Automatic Cert Renewal ======
-===== Renewal =====
+===== Service =====
-  mkdir -p ~/'.local/scripts/www/certbot' && nano ~/'.local/scripts/www/certbot/certbot-renewal.sh' && chmod +x ~/'.local/scripts/www/certbot/certbot-renewal.sh'
+  sudo -e '/etc/systemd/system/certbot-renew-custom.service'
 <code>
-#!/bin/sh
+[Service]
+Type=oneshot
-cd '/tmp'
+WorkingDirectory=/tmp
-'/usr/bin/systemctl' stop 'nginx'
+ExecStart='/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet
-'/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet
-'/usr/bin/systemctl' start 'nginx'
 # End</code>
-  ~/'.local/scripts/www/certbot/certbot-renewal.sh'
+===== Timer =====
-====== cron ======
-===== Renewal =====
   * Weekly (Sunday) ''07:00:00 AM''
-  sudo mkdir -p '/etc/cron.d' && sudo -e '/etc/cron.d/certbot-renewal'
+  sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now
 <code>
-#
+[Unit]
-SHELL=/bin/sh
+Description=Let's Encrypt Certificate Renewal
+After=network-online.target
+Wants=network-online.target
-7 * * sun root '/home/espionage724/.local/scripts/www/certbot/certbot-renewal.sh'
+[Timer]
+OnCalendar=Sun *-*-* 07:00:00
+Persistent=true
+[Install]
+WantedBy=multi-user.target
 # End</code>
+  sudo systemctl start 'certbot-renew-custom' && sudo systemctl status 'certbot-renew-custom' -l