diff --git a/tutorials/creating_ssl_certificates.md b/tutorials/creating_ssl_certificates.md index dddc1a8a8..c4408639a 100644 --- a/tutorials/creating_ssl_certificates.md +++ b/tutorials/creating_ssl_certificates.md @@ -53,16 +53,17 @@ certbot -d example.com --manual --preferred-challenges dns certonly ### Auto Renewal -You'll also probably want to configure the automatic renewal of certificates to prevent unexpected certificate expirations. -You can open crontab with `sudo crontab -e` and add the line from below to the bottom of it for attempting renewal every day at 23 (11 PM). +Certbot installs a systemd timer (certbot.timer) by default. +Verify it is enabled: -Deploy hook would restart the Nginx service to apply a new certificate when it's renewed successfully. Change `nginx` in the restart command to suit your own needs, such as to `apache` or `wings`. +```bash +systemctl status certbot.timer +``` -For advanced users, we suggest installing and using [acme.sh](https://acme.sh) -which provides more options, and is much more powerful than certbot. +If it is not enabled: -``` text -0 23 * * * certbot renew --quiet --deploy-hook "systemctl restart nginx" +```bash +systemctl enable --now certbot.timer ``` ### Troubleshooting