Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions tutorials/creating_ssl_certificates.md
Original file line number Diff line number Diff line change
Expand Up @@ -53,16 +53,17 @@ certbot -d example.com --manual --preferred-challenges dns certonly

### Auto Renewal

You'll also probably want to configure the automatic renewal of certificates to prevent unexpected certificate expirations.
You can open crontab with `sudo crontab -e` and add the line from below to the bottom of it for attempting renewal every day at 23 (11 PM).
Certbot installs a systemd timer (certbot.timer) by default.
Verify it is enabled:

Deploy hook would restart the Nginx service to apply a new certificate when it's renewed successfully. Change `nginx` in the restart command to suit your own needs, such as to `apache` or `wings`.
```bash
systemctl status certbot.timer
```

For advanced users, we suggest installing and using [acme.sh](https://acme.sh)
which provides more options, and is much more powerful than certbot.
If it is not enabled:

``` text
0 23 * * * certbot renew --quiet --deploy-hook "systemctl restart nginx"
```bash
systemctl enable --now certbot.timer
```

### Troubleshooting
Expand Down