prune old keys and certificates
This commit is contained in:
parent
6b72006d65
commit
ff742db293
2 changed files with 10 additions and 0 deletions
|
@ -63,6 +63,10 @@ case $1 in
|
||||||
touch "${updated}"
|
touch "${updated}"
|
||||||
done
|
done
|
||||||
|
|
||||||
|
;;
|
||||||
|
prune)
|
||||||
|
comm -13 <(realpath /etc/letsencrypt/live/*/*.pem | sort) <(find /etc/letsencrypt/archive/ -name "*.pem" | sort) | xargs rm -v
|
||||||
|
touch "${updated}"
|
||||||
;;
|
;;
|
||||||
# Generate certificates
|
# Generate certificates
|
||||||
*)
|
*)
|
||||||
|
|
|
@ -10,6 +10,12 @@ check program certbot_renew
|
||||||
every "13 5 * * *"
|
every "13 5 * * *"
|
||||||
if status != 0 then alert
|
if status != 0 then alert
|
||||||
|
|
||||||
|
# Prune old keys
|
||||||
|
check program certbot_prune
|
||||||
|
with path "/usr/local/bin/certbotd prune"
|
||||||
|
every "13 1 2 * *"
|
||||||
|
if status != 0 then alert
|
||||||
|
|
||||||
# Get missing certificates for every cycle.
|
# Get missing certificates for every cycle.
|
||||||
check program certbot
|
check program certbot
|
||||||
with path "/usr/local/bin/certbotd"
|
with path "/usr/local/bin/certbotd"
|
||||||
|
|
Loading…
Reference in a new issue