Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure certbot: user email and auto-renew #39

Open
eskombro opened this issue Dec 17, 2020 · 4 comments
Open

Configure certbot: user email and auto-renew #39

eskombro opened this issue Dec 17, 2020 · 4 comments
Labels
good first issue Good for newcomers

Comments

@eskombro
Copy link
Member

Currently, certbot is used to create automatic SSL certificates if the user selects this option. This process needs to specify a user email address and creates a temporary certificate. The way it is handled now raises two main problems:

  • This script is using a MeiliSearch email address, so the user doesn't get notifications.
  • The auto-renew process is not handled

When these certificates expire, not only they probably won't be renewed automatically, but the user won't be notified about it.

@curquiza
Copy link
Member

Really well explained!
How can we solve this? Can we use the user email address for this?

@eskombro
Copy link
Member Author

  1. I think we should ask indeed for their user email address, and use it.
  2. Need to check if the certbot certificate auto-renew is actually working

@fharper
Copy link

fharper commented Dec 17, 2020

I think DO have auto-renew as default from their images (like it checked twice a day!), not sure if it applies to our own image. Anyway, you can add sudo certbot renew in a cron job. If you want to be sure it's setup for doing it correctly, you can do a dry run sudo certbot renew --dry-run

@eskombro eskombro transferred this issue from meilisearch/meilisearch-digitalocean Jan 13, 2021
@curquiza curquiza added the good first issue Good for newcomers label Sep 28, 2021
@alallema
Copy link
Contributor

alallema commented May 9, 2023

Transfer of this issue to the cloud-provider project due to its depreciation

@alallema alallema transferred this issue from meilisearch/cloud-scripts May 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

4 participants