Nihimia
commented
8 months ago Hi,
A little update on this one. I got ride of the nginx reload hourly by editing certificate.js like this :
const cmd = certbotCommand + ' renew ' +
'--config "' + certbotConfig + '" ' +
'--preferred-challenges "dns,http" ' +
'--no-random-sleep-on-renew';
return utils.exec(cmd)
.then((result) => {
if (result.includes('No renewals were attempted.')) {
logger.info('No renewals were attempted');
} else {
logger.info('Renew Result: ' + result);
return internalNginx.reload()
.then(() => {
logger.info('Renew Complete');
return result;
});
}
})I removed the --quiet flag, and I look if the result includes the string 'No renewals were attempted.'.
If the the string 'No renewals were attempted.' is met :
[SSL ] › ℹ info Renewing TLS certs close to expiry...
[SSL ] › ℹ info No renewals were attemptedIf the the string 'No renewals were attempted.' is not met : :
[SSL ] › ℹ info Renewing TLS certs close to expiry...
[SSL ] › ℹ info Renew Result:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /data/tls/certbot/renewal/npm-1.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate not yet due for renewal
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /data/tls/certbot/renewal/npm-2.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate not yet due for renewal
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certificates are not due for renewal yet:
/data/tls/certbot/live/npm-1/fullchain.pem expires on 2024-05-13 (skipped)
/data/tls/certbot/live/npm-2/fullchain.pem expires on 2024-05-13 (skipped)
No renewals were attempted.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[Nginx ] › ℹ info Reloading Nginx
[SSL ] › ℹ info Renew CompleteClearly, I don't know if it's the best approach, but hope it can help ! I don't have any certificate to renew before a moment, so I can't test further.
Zoey2936
HVR88
Hello,
I've seen that nginx is reloading each hour :
I think it's related to the cert renewal tasks :
Even if there's no certificate to renew, nginx is still reloaded each hour. Is that normal ? Should nginx be reloaded only when a certificate is renewed ?
Again, thank you !