How about add a systemd service like certbot? A modified version from certbot package:
/lib/systemd/system/letsencrypt.sh.service [Unit] Description=letsencrypt.sh Documentation=file:///usr/share/doc/letsencrypt.sh/README.Debian [Service] Type=oneshot ExecStart=/usr/bin/letsencrypt.sh -c PrivateTmp=true /lib/systemd/system/letsencrypt.sh.timer [Unit] Description=Run letsencrypt.sh twice daily [Timer] OnCalendar=*-*-* 00,12:00:00 RandomizedDelaySec=3600 Persistent=true [Install] WantedBy=timers.target On Fri, 13 May 2016 22:28:30 +0200 Cord Beermann <c...@debian.org> wrote: > Package: letsencrypt.sh > Version: 0.1.0-2 > Severity: wishlist > > I continue the discussion from Bug#822493 here: > > Please provide a cron based automatism for refreshing certificates. > > It would be nice that users only need to provide the hostname(s) they > want to get a certificate for in /etc/letsencrypt.sh/ and a cronjob > that runs letsencrypt.sh -c takes care for refreshing it before it expires. > > That script would also need hooks to reload daemons that need to know > about a certificate-change. > > Debconf could ask if automatic refresh is activated. > > Cord > >
