search

evermind / docker-froxlor

Froxlor based webhosting on docker
5 stars 4 forks source link

LetsEncrypt certificates don´t get renewed #7

Open tgruenert opened 3 years ago

tgruenert commented 3 years ago

LE certificates get created correct. But renew before or after expiring don´t work.

Tracking down the problem According to https://forum.froxlor.org/index.php?/topic/19536-ssl-le-difference-between-acmesh-and-froxlor-crons/&do=findComment&comment=42474 renewing is independent from creation.

Renew should work only based on acme.sh. This will be triggered from crontab. Crontab looks like

root@server:/.acme.sh# crontab -l
23 0 * * * "//.acme.sh"/acme.sh --cron --home "//.acme.sh" > /dev/null

But: at directory /.acme.sh/ there are no certs already. The used acme.sh installation is located under /root/.acme.sh/

Question: What component creates the wrong crontab? And how can this get fixed?

tgruenert commented 3 years ago

running "/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh" renew all outstanding certificates. after a while these certificates get shown in froxlor. because of a slow file sync mechanic there is a huge delay (not a problem on production).

tgruenert commented 3 years ago

Set up a new installation based on docker-compose don´t show this issue.

tgruenert commented 3 years ago

looked out for reason of wrong crontab entry without any success. changed crontab by hand to see if this kind of solution would fix the issue.