renew certificates with 32 days remaining (instead of 30) to avoid issues with monthl...

diff --git a/CHANGELOG b/CHANGELOG
index 47092e14f51ef7dc57d08a29c0340bafc4c4a087..9a7ec5d9ac5bae8cac4b3f2ebaaa0943c67d27ad 100644 (file)
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -3,6 +3,8 @@ This file contains a log of major changes in dehydrated
 
 ## [x.x.x] - xxxx-xx-xx
 ...
+## Changed
+- Renew certificates with 32 days remaining (instead of 30) to avoid issues with monthly cronjobs (`RENEW_DAYS=32`)
 
 ## [0.7.1] - 2022-10-31
 ## Changed

diff --git a/dehydrated b/dehydrated
index a15fb048fc4d10910629f06b787b6f5a7aa78d74..0c7de592caeaf430d8f30fb69924701726df9368 100755 (executable)
--- a/dehydrated
+++ b/dehydrated
@@ -372,7 +372,7 @@ load_config() {
   HOOK=
   PREFERRED_CHAIN=
   HOOK_CHAIN="no"
-  RENEW_DAYS="30"
+  RENEW_DAYS="32"
   KEYSIZE="4096"
   WELLKNOWN=
   PRIVATE_KEY_RENEW="yes"

diff --git a/docs/examples/config b/docs/examples/config
index 51e38de365d1d64a555d34578bd1373f2cb65ddc..9368d34aec6e68922fc000d7bb01eb80fcc9d3b3 100644 (file)
--- a/docs/examples/config
+++ b/docs/examples/config
@@ -92,8 +92,8 @@
 # Chain clean_challenge|deploy_challenge arguments together into one hook call per certificate (default: no)
 #HOOK_CHAIN="no"
 
-# Minimum days before expiration to automatically renew certificate (default: 30)
-#RENEW_DAYS="30"
+# Minimum days before expiration to automatically renew certificate (default: 32)
+#RENEW_DAYS="32"
 
 # Regenerate private keys instead of just signing new certificates on renewal (default: yes)
 #PRIVATE_KEY_RENEW="yes"