reloading daemons after ssl cert renewals

dehydrated | dehydrated-dns | dehydrated-http | dehydrated-reload

introduction

simply run the thing in a cron job once a week and DON’T FORGET TO RELOAD THE DAEMONS

warning // lessons learned

it’s important to have the time in sync before talking to LE – assuming either an NTP daemon –or– the DAILY script has been run before

we could otherwise consider reloading only if there’s a new cert with hooks but this doesn’t harm much and we are cleaning up old certs only thereafter

weekly cron job

vi /root/WEEKLY

here’s a sample incl. postfix & dovecot https://pub.nethence,com/system/ansible/playbooks/dehydrated/templates/WEEKLY.mx

chmod +x /root/WEEKLY

enable

see https://pub.nethence,com/system/ansible/playbooks/dehydrated/tasks-dehydrated.yml

resources

What is this openvt command doing? https://unix.stackexchange.com/questions/356790/what-is-this-openvt-command-doing