From d2d64fed66dfd6b4682bea118323315879bc30a5 Mon Sep 17 00:00:00 2001 From: Jan Tuomi Date: Wed, 17 Dec 2025 10:00:59 +0200 Subject: Use DNS-01 challenge with certbot --- templates/ingress/etc_crontab.j2 | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'templates/ingress/etc_crontab.j2') diff --git a/templates/ingress/etc_crontab.j2 b/templates/ingress/etc_crontab.j2 index 3aa39e1..6879766 100644 --- a/templates/ingress/etc_crontab.j2 +++ b/templates/ingress/etc_crontab.j2 @@ -7,9 +7,7 @@ PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin #minute hour mday month wday who command # Update LetsEncrypt certificates every day after 2:00 AM -{% for host in tls_hosts %} -{{ loop.index0 }} 2 * * * root certbot certonly --nginx -n -m jan@jantuomi.fi --agree-tos -d {{ host }} -{% endfor %} +0 2 * * * root certbot certonly -n -m {{ contact_email }} --agree-tos --manual --manual-auth-hook /usr/local/bin/acme-dns-auth.py --preferred-challenges dns --debug-challenges {% for domain in cert_domains %}-d '{{ domain }}' {% endfor %} || echo "ERROR: Failed to renew certs" >&2 # Update dynamic DNS (Hetzner) {% for elem in hetzner_zone_record_ids %} -- cgit v1.3