Wreckroom - User contributions [en]

Automated Certificate Renewal

2026-03-29T17:33:20Z

108.27.135.4:

=Automated Certificate Renewal=

===Script Location===
<code>/usr/local/bin/renew-and-update-certs.sh</code>

===Script Contents===
<syntaxhighlight lang="bash">
#!/bin/bash

# Renew certificates
/usr/syno/sbin/syno-letsencrypt renew-all -v

# Check if renewal was successful (exit code 0)
if [ $? -eq 0 ]; then
# Update Navidrome certificates
cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt
cp /usr/syno/etc/certificate/system/default/RSA-privkey.pem /volume2/docker/navidrome/ssl/private.key
chmod 644 /volume2/docker/navidrome/ssl/certificate.crt
chmod 600 /volume2/docker/navidrome/ssl/private.key
docker restart navidrome
echo "Certificates renewed and Navidrome updated"
else
echo "Certificate renewal failed, skipping Navidrome update"
fi
</syntaxhighlight>

===Task Scheduler Configuration===
'''Control Panel > Task Scheduler'''

{| class="wikitable"
|-
! Setting !! Value
|-
| Task name || Auto-renew SSL and Update Navidrome
|-
| User || root
|-
| Schedule || Weekly (Sunday, 3:00 AM)
|-
| Script || <code>/usr/local/bin/renew-and-update-certs.sh</code>
|}

===How It Works===
# Script runs weekly
# Checks all certificates for renewal (30 days before expiry)
# Renews any expiring certificates via Let's Encrypt
# If successful, copies new certs to Navidrome
# Restarts Navidrome container with fresh certificates

Automated Certificate Renewal

2026-03-29T17:32:37Z

108.27.135.4:

=Automated Certificate Renewal=

===Script Location===
<code>/usr/local/bin/renew-and-update-certs.sh</code>

===Script Contents===
<syntaxhighlight>
#!/bin/bash

# Renew certificates
/usr/syno/sbin/syno-letsencrypt renew-all -v

# Check if renewal was successful (exit code 0)
if [ $? -eq 0 ]; then
# Update Navidrome certificates
cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt
cp /usr/syno/etc/certificate/system/default/RSA-privkey.pem /volume2/docker/navidrome/ssl/private.key
chmod 644 /volume2/docker/navidrome/ssl/certificate.crt
chmod 600 /volume2/docker/navidrome/ssl/private.key
docker restart navidrome
echo "Certificates renewed and Navidrome updated"
else
echo "Certificate renewal failed, skipping Navidrome update"
fi
</syntaxhighlight>

===Task Scheduler Configuration===

**Control Panel > Task Scheduler**

| Setting | Value |
|---------|-------|
| Task name | Auto-renew SSL and Update Navidrome |
| User | root |
| Schedule | Weekly (Sunday, 3:00 AM) |
| Script | `/usr/local/bin/renew-and-update-certs.sh` |

===How It Works===

1. Script runs weekly
2. Checks all certificates for renewal (30 days before expiry)
3. Renews any expiring certificates via Let's Encrypt
4. If successful, copies new certs to Navidrome
5. Restarts Navidrome container with fresh certificates

Automated Certificate Renewal

2026-03-29T17:32:06Z

108.27.135.4:

## Automated Certificate Renewal

### Script Location
<code>/usr/local/bin/renew-and-update-certs.sh</code>

### Script Contents
<syntaxhighlight>
#!/bin/bash

# Renew certificates
/usr/syno/sbin/syno-letsencrypt renew-all -v

# Check if renewal was successful (exit code 0)
if [ $? -eq 0 ]; then
# Update Navidrome certificates
cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt
cp /usr/syno/etc/certificate/system/default/RSA-privkey.pem /volume2/docker/navidrome/ssl/private.key
chmod 644 /volume2/docker/navidrome/ssl/certificate.crt
chmod 600 /volume2/docker/navidrome/ssl/private.key
docker restart navidrome
echo "Certificates renewed and Navidrome updated"
else
echo "Certificate renewal failed, skipping Navidrome update"
fi
</syntaxhighlight>

### Task Scheduler Configuration

**Control Panel > Task Scheduler**

| Setting | Value |
|---------|-------|
| Task name | Auto-renew SSL and Update Navidrome |
| User | root |
| Schedule | Weekly (Sunday, 3:00 AM) |
| Script | `/usr/local/bin/renew-and-update-certs.sh` |

### How It Works

1. Script runs weekly
2. Checks all certificates for renewal (30 days before expiry)
3. Renews any expiring certificates via Let's Encrypt
4. If successful, copies new certs to Navidrome
5. Restarts Navidrome container with fresh certificates

Automated Certificate Renewal

2026-03-29T17:31:39Z

108.27.135.4: Created page with "## Automated Certificate Renewal ### Script Location `/usr/local/bin/renew-and-update-certs.sh` ### Script Contents ```bash #!/bin/bash # Renew certificates /usr/syno/sbin/syno-letsencrypt renew-all -v # Check if renewal was successful (exit code 0) if [ $? -eq 0 ]; then # Update Navidrome certificates cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt cp /usr/syno/etc/certificate/system/default/RSA-priv..."

## Automated Certificate Renewal

### Script Location
`/usr/local/bin/renew-and-update-certs.sh`

### Script Contents
```bash
#!/bin/bash

# Renew certificates
/usr/syno/sbin/syno-letsencrypt renew-all -v

# Check if renewal was successful (exit code 0)
if [ $? -eq 0 ]; then
# Update Navidrome certificates
cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt
cp /usr/syno/etc/certificate/system/default/RSA-privkey.pem /volume2/docker/navidrome/ssl/private.key
chmod 644 /volume2/docker/navidrome/ssl/certificate.crt
chmod 600 /volume2/docker/navidrome/ssl/private.key
docker restart navidrome
echo "Certificates renewed and Navidrome updated"
else
echo "Certificate renewal failed, skipping Navidrome update"
fi
```

### Task Scheduler Configuration

**Control Panel > Task Scheduler**

| Setting | Value |
|---------|-------|
| Task name | Auto-renew SSL and Update Navidrome |
| User | root |
| Schedule | Weekly (Sunday, 3:00 AM) |
| Script | `/usr/local/bin/renew-and-update-certs.sh` |

### How It Works

1. Script runs weekly
2. Checks all certificates for renewal (30 days before expiry)
3. Renews any expiring certificates via Let's Encrypt
4. If successful, copies new certs to Navidrome
5. Restarts Navidrome container with fresh certificates

Synology

2026-03-29T17:31:25Z

108.27.135.4:

The Synology is a Network Attached Storage (NAS) and Linux Server that runs many different processes that are essential to [[Wreckroom]].

=Public=

===[[MediaWiki]]===
Uses MariaDB 10 and MediaWiki applications.

===[[Web Server]]===
NGINX reverse proxy runs wreckroom.nyc over 443/3000.

==Private==
===[[Media Server]]===
Serves files behind the [[VPN]].

===[[Navidrome]]===
Serves FLAC library

= Certs =

===[[Automated Certificate Renewal]]===
March 29, 2026