Running certbot nightly is excessive.  You can't renew until you get near
the end if the current expiration period.  Also, there are other things you
may need to do as part of the cert replacement on a qmailtoaster box.  I
have this cronjob:

1 1 1 * * /root/migration/certbot.sh

That runs this script: (/root/migration/certbot.sh)

#!/bin/sh

qmailctl stop
systemctl stop dovecot
systemctl stop httpd

TIMESTAMP=`date +"%Y%m%d-%H%M%S"`
cp -a /var/qmail/control/servercert.pem
/var/qmail/control/servercert.pem-$TIMESTAMP
certbot renew --agree-tos  --standalone
cat
/etc/letsencrypt/live/[SERVERNAME-REDACTED]/{cert,chain,fullchain,privkey}.pem
> /var/qmail/control/servercert.pem
chmod 640 /var/qmail/control/servercert.pem
chown vpopmail.vchkpw /var/qmail/control/servercert.pem


qmailctl start
systemctl start dovecot
systemctl start httpd

On Tue, Dec 3, 2019 at 9:03 PM ChandranManikandan <kand...@gmail.com> wrote:

> Hi Friends,
>
> I have installed letsencrypt on COS7 and i try to make cron job as per the
> below steps, but the cert renew and certbot folder are not there in /opt.
>
> 0 0 * * * /root /opt/certbot renew
>
> Is any other way is there or did i made any mistake?
> Anyone had the same problem?
>
> --
>
>
> *Regards,Manikandan.C*
>

Reply via email to