prune old keys and certificates

This commit is contained in:
f 2022-09-10 16:53:29 -03:00
parent 6b72006d65
commit ff742db293
2 changed files with 10 additions and 0 deletions

View file

@ -63,6 +63,10 @@ case $1 in
touch "${updated}" touch "${updated}"
done done
;;
prune)
comm -13 <(realpath /etc/letsencrypt/live/*/*.pem | sort) <(find /etc/letsencrypt/archive/ -name "*.pem" | sort) | xargs rm -v
touch "${updated}"
;; ;;
# Generate certificates # Generate certificates
*) *)

View file

@ -10,6 +10,12 @@ check program certbot_renew
every "13 5 * * *" every "13 5 * * *"
if status != 0 then alert if status != 0 then alert
# Prune old keys
check program certbot_prune
with path "/usr/local/bin/certbotd prune"
every "13 1 2 * *"
if status != 0 then alert
# Get missing certificates for every cycle. # Get missing certificates for every cycle.
check program certbot check program certbot
with path "/usr/local/bin/certbotd" with path "/usr/local/bin/certbotd"