actcur-ansible/role-certbot
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

improved logging

Browse source
This commit is contained in:
Beth Parker 2025-03-22 19:40:20 -05:00
parent c36ae7f6a4
commit 23fb4cec18
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
files/certbot-renewal.sh
View file

@ -1,14 +1,16 @@
#! /bin/bash #! /bin/bash
dom=`date +%d` dom=`date +%d`
today=`date +%Y%m%d` today=`date +%Y%m%d`
log=/var/log/certbot-renewal.log
echo Renewal attempt for $today >> $log
for f in `ls /etc/letsencrypt/live/ --ignore "README"` for f in `ls /etc/letsencrypt/live/ --ignore "README"`
do do
echo Checking $f echo Checking $f >> $log
#check if cert has already expired or will expire within the next two days and renew if applicable #check if cert has already expired or will expire within the next two days and renew if applicable
expires=`echo `openssl x509 -enddate -noout -in /etc/letsencrypt/live/$f/cert.pem` " - 2 day" | grep -Po "(?<=notAfter=).*" | date +%Y%m%d -f -` expires=`echo `openssl x509 -enddate -noout -in /etc/letsencrypt/live/$f/cert.pem` " - 2 day" | grep -Po "(?<=notAfter=).*" | date +%Y%m%d -f -`
if [[ $today > $expires ]] if [[ $today > $expires ]]
then then
echo Certificate for $f is expired, renewing echo Certificate for $f is expired, renewing >> $log
certbot renew --cert-name $f --dry-run >> /var/log/certbot-renewal.log certbot renew --cert-name $f --dry-run >> /var/log/certbot-renewal.log
fi fi
#convert hostname into day of month between 0 and 28 to renew on specific day of month (reduce chance of running out of cert renewals) #convert hostname into day of month between 0 and 28 to renew on specific day of month (reduce chance of running out of cert renewals)
@ -19,8 +21,8 @@ do
rdate=$(((${num#-}+$d)%28+1)) rdate=$(((${num#-}+$d)%28+1))
if [[ $dom -eq $rdate ]] if [[ $dom -eq $rdate ]]
then then
echo Date falls within renewal window for $f, attempting renewal echo Date falls within renewal window for $f, attempting renewal >> $log
certbot renew --cert-name $f --dry-run >> /var/log/certbot-renewal.log certbot renew --cert-name $f --dry-run >> $log
break break
fi fi
done done