https://wiki.ho.stna.me/index.php?action=history&feed=atom&title=Hosting 2026-07-01T07:43:04Z Revision history for this page on the wiki MediaWiki 1.36.2 https://wiki.ho.stna.me/index.php?title=Hosting&diff=109&oldid=prev 2022-04-17T19:48:12Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 19:48, 17 April 2022</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l54">Line 54:</td> <td colspan="2" class="diff-lineno">Line 54:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  [Service]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  [Service]</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Type=oneshot</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Type=oneshot</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>  ExecStart=/usr/bin/certbot -q renew</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>  <ins style="font-weight: bold; text-decoration: none;">#</ins>ExecStart=/usr/bin/certbot -q renew</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>  PrivateTmp=true</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>  <ins style="font-weight: bold; text-decoration: none;">ExecStart=/usr/bin/certbot -q renew --post-hook &quot;service postfix reload; service dovecot r </ins>PrivateTmp=true</div></td></tr> </table>

172.17.0.1 https://wiki.ho.stna.me/index.php?title=Hosting&diff=108&oldid=prev 2022-04-17T19:47:29Z

<p>Created page with &quot;==certbot== https://community.letsencrypt.org/t/cerbot-cron-job/23895/5 ===cronjob=== You should have it here /etc/cron.d/certbot The content of this file: # Eventually, t...&quot;</p> <p><b>New page</b></p><div>==certbot==<br /> https://community.letsencrypt.org/t/cerbot-cron-job/23895/5<br /> <br /> ===cronjob===<br /> You should have it here /etc/cron.d/certbot<br /> <br /> The content of this file:<br /> <br /> # Eventually, this will be an opportunity to validate certificates<br /> # haven't been revoked, etc. Renewal will only occur if expiration<br /> # is within 30 days.<br /> SHELL=/bin/sh<br /> PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin<br /> <br /> 0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system &amp;&amp; perl -e 'sleep int(rand(3600))' &amp;&amp; certbot -q renew<br /> <br /> This cron job will be executed every 12 hours. If the file /usr/bin/certbot has the exe perms… AND there is no dir /run/systemd/system it will execute the renew command but If it detects this dir /run/systemd/system/ exists is because you are running systemd so it won’t execute the renew command. It won’t run the renew command because there is a systemd timer (a kind of cron job used by systemd) that was configured when you installed the certbot package.<br /> <br /> ===systemd timer===<br /> <br /> You can check your systemd timers using command systemctl list-timers or systemctl list-timers --all if you also want to show inactive timers. Something like this:<br /> <br /> # systemctl list-timers --all<br /> NEXT LEFT LAST PASSED UNIT ACTIVATES<br /> Sun 2016-12-11 00:00:00 CET 9h left Sat 2016-12-10 13:48:13 CET 38min ago certbot.timer <br /> certbot.service<br /> Sun 2016-12-11 14:03:12 CET 23h left Sat 2016-12-10 14:03:12 CET 23min ago systemd-tmpfiles-clean.timer systemd- tmpfiles-clean.service <br /> n/a n/a n/a n/a systemd-readahead-done.timer systemd- readahead-done.service<br /> 3 timers listed.<br /> <br /> The certbot timer should be here /lib/systemd/system/certbot.timer and it will execute the command specified here /lib/systemd/system/certbot.service<br /> <br /> certbot.timer will execute the certbot.service at 12 am and 12 pm.<br /> <br /> # cat /lib/systemd/system/certbot.timer<br /> [Unit]<br /> Description=Run certbot twice daily<br /> <br /> [Timer]<br /> OnCalendar=*-*-* 00,12:00:00<br /> RandomizedDelaySec=3600<br /> Persistent=true<br /> <br /> [Install]<br /> WantedBy=timers.target<br /> <br /> and certbot.service will execute the renew command.<br /> <br /> # cat /lib/systemd/system/certbot.service<br /> [Unit]<br /> Description=Certbot<br /> Documentation=file:///usr/share/doc/python-certbot-doc/html/index.html<br /> Documentation=https://letsencrypt.readthedocs.io/en/latest/<br /> [Service]<br /> Type=oneshot<br /> ExecStart=/usr/bin/certbot -q renew<br /> PrivateTmp=true</div>

172.17.0.1