From: Lukas Schauer <lukas@schauer.dev>
Date: Fri, 11 Apr 2025 08:33:03 +0000 (+0200)
Subject: renew certificates with 32 days remaining (instead of 30) to avoid issues with monthl... 
X-Git-Tag: v0.7.2~13
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4ea508164058b451c8adba802c895d936dd1b451;p=thirdparty%2Fdehydrated.git

renew certificates with 32 days remaining (instead of 30) to avoid issues with monthly cronjobs (fixes #963)
---

diff --git a/CHANGELOG b/CHANGELOG
index 47092e1..9a7ec5d 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -3,6 +3,8 @@ This file contains a log of major changes in dehydrated
 
 ## [x.x.x] - xxxx-xx-xx
 ...
+## Changed
+- Renew certificates with 32 days remaining (instead of 30) to avoid issues with monthly cronjobs (`RENEW_DAYS=32`)
 
 ## [0.7.1] - 2022-10-31
 ## Changed
diff --git a/dehydrated b/dehydrated
index a15fb04..0c7de59 100755
--- a/dehydrated
+++ b/dehydrated
@@ -372,7 +372,7 @@ load_config() {
   HOOK=
   PREFERRED_CHAIN=
   HOOK_CHAIN="no"
-  RENEW_DAYS="30"
+  RENEW_DAYS="32"
   KEYSIZE="4096"
   WELLKNOWN=
   PRIVATE_KEY_RENEW="yes"
diff --git a/docs/examples/config b/docs/examples/config
index 51e38de..9368d34 100644
--- a/docs/examples/config
+++ b/docs/examples/config
@@ -92,8 +92,8 @@
 # Chain clean_challenge|deploy_challenge arguments together into one hook call per certificate (default: no)
 #HOOK_CHAIN="no"
 
-# Minimum days before expiration to automatically renew certificate (default: 30)
-#RENEW_DAYS="30"
+# Minimum days before expiration to automatically renew certificate (default: 32)
+#RENEW_DAYS="32"
 
 # Regenerate private keys instead of just signing new certificates on renewal (default: yes)
 #PRIVATE_KEY_RENEW="yes"