ohadschn
commented
3 years ago You could probably write a PowerShell script that updates all your sites. You could also connect the WebJobs to Zapier notifications which should let you know if anything went wrong (possibly using a script too, not familiar with Zapier APIs).
Alternatively, I've written a WebJob over this extension's core code that addresses most of your concerns I believe (some similar ones I had led me to build it): https://github.com/ohadschn/letsencrypt-webapp-renewer. Haven't had time to update it in a while but I'm still using it personally for my websites...
sjkp
vinsuz
Mainly just commenting with some honest feedback here. I've been using this extension for the last couple years, and I feel like it's more trouble than it's worth. Back when we manually renewed certs, we'd do it once every 2 years, and that was it, whereas I constantly have to babysit this extension.
Issue #1: It constantly requires updates.
We have about 20 websites, each with at least 2 slots, so whenever there's an update, we have to open every single slot for every single website and manually update the extension. This alone takes more time than renewing the certs the old way every 2 years.
Issue #2: It constantly fails.
Every 3 months I need to go out and manually check each website to ensure an update actually took place because I can't trust the auto renew functionality. I don't find the automated emails helpful. I don't need to know that "the certificate will expire in 20 days." What I do need is an email explicitly telling me that a renewal has failed (if the "cert will expire in X days" is meant to serve as a failure, then that's not clear - if it's meant to be a failure email, then make it a failure email). For a cert that just expired, I received a "cert will expire in 10 days" email, but then nothing else. So it creates a situation where I don't ever know what's going on without going out and checking (i.e., I don't know if it auto renewed after the 10 day email was sent). Nothing was ever sent to tell me it expired. The time it takes to check 20 different websites 4 times a year isn't even the biggest issue - it's that occasionally, one will slip through the cracks, and then I wake up one morning with complaint emails from a dozen different people in my company telling me a website is broken. Also, since multiple people need access to these emails, we are forced to send them to a shared mailbox, where they can get lost. It would be helpful to be able to have them sent to multiple mailboxes.
This extension would be great if it was reliable and could be trusted, but over the past two years, I haven't been able to use it for any meaningful length of time without experiencing failures.