From 4ea508164058b451c8adba802c895d936dd1b451 Mon Sep 17 00:00:00 2001 From: Lukas Schauer Date: Fri, 11 Apr 2025 10:33:03 +0200 Subject: [PATCH] renew certificates with 32 days remaining (instead of 30) to avoid issues with monthly cronjobs (fixes #963) --- CHANGELOG | 2 ++ dehydrated | 2 +- docs/examples/config | 4 ++-- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 47092e1..9a7ec5d 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -3,6 +3,8 @@ This file contains a log of major changes in dehydrated ## [x.x.x] - xxxx-xx-xx ... +## Changed +- Renew certificates with 32 days remaining (instead of 30) to avoid issues with monthly cronjobs (`RENEW_DAYS=32`) ## [0.7.1] - 2022-10-31 ## Changed diff --git a/dehydrated b/dehydrated index a15fb04..0c7de59 100755 --- a/dehydrated +++ b/dehydrated @@ -372,7 +372,7 @@ load_config() { HOOK= PREFERRED_CHAIN= HOOK_CHAIN="no" - RENEW_DAYS="30" + RENEW_DAYS="32" KEYSIZE="4096" WELLKNOWN= PRIVATE_KEY_RENEW="yes" diff --git a/docs/examples/config b/docs/examples/config index 51e38de..9368d34 100644 --- a/docs/examples/config +++ b/docs/examples/config @@ -92,8 +92,8 @@ # Chain clean_challenge|deploy_challenge arguments together into one hook call per certificate (default: no) #HOOK_CHAIN="no" -# Minimum days before expiration to automatically renew certificate (default: 30) -#RENEW_DAYS="30" +# Minimum days before expiration to automatically renew certificate (default: 32) +#RENEW_DAYS="32" # Regenerate private keys instead of just signing new certificates on renewal (default: yes) #PRIVATE_KEY_RENEW="yes" -- 2.47.3