search

purescript / pursuit

Website for hosting and searching PureScript API documentation
https://pursuit.purescript.org/
Other
170 stars 47 forks source link

SSL certificate expired #419

Closed ford-prefect closed 3 years ago

ford-prefect commented 3 years ago

Seems like the LetsEncrypt certificate for https://pursuit.purescript.org/ is expiring or expired (depending on whether it is currently Sep 19th for you or not).

hdgarrood commented 3 years ago

Thanks for the report. It’s supposed to automatically renew but I guess that hasn’t happened, I’ll take a look.

hdgarrood commented 3 years ago

It seems like the SSL certificate was successfully auto-renewed, it just hadn't been picked up by nginx.

hdgarrood commented 3 years ago

For future reference: there is a periodic cron job to reload nginx so that any renewed SSL certificates are picked up, but it hadn't been running successfully because the nginx binary is located in /usr/sbin, and for some reason /usr/sbin wasn't in the PATH when the cron job was run.

Previous crontab entry:

0 0 * * * nginx -s reload

Current crontab entry:

0 0 * * * (/usr/sbin/nginx -s reload && echo "$(date): reloaded nginx") >> /var/log/nginx/periodic-reloads.log 2>&1   # reload nginx in order to pick up renewed letsencrypt certificates