Automated Certificate Renewal - Revision history

108.27.135.4 at 17:33, 29 March 2026

2026-03-29T17:33:20Z

← Older revision		Revision as of 12:33, 29 March 2026
Line 5:		Line 5:

	===Script Contents===		===Script Contents===
	<syntaxhighlight>		<syntaxhighlight lang="bash">
	#!/bin/bash		#!/bin/bash

Line 26:		Line 26:

	===Task Scheduler Configuration===		===Task Scheduler Configuration===
			'''Control Panel > Task Scheduler'''

	~~Control Panel > Task Scheduler~~		{\| class="wikitable"
			\|-
	\| Setting \| Value \|		! Setting !! Value
	\|-~~--------\|-------\|~~		\|-
	\| Task name \| Auto-renew SSL and Update Navidrome \|		\| Task name \|\| Auto-renew SSL and Update Navidrome
	\| User \| root \|		\|-
	\| Schedule \| Weekly (Sunday, 3:00 AM) \|		\| User \|\| root
	\| Script \| `/usr/local/bin/renew-and-update-certs.sh` \|		\|-
			\| Schedule \|\| Weekly (Sunday, 3:00 AM)
			\|-
			\| Script \|\| <code>/usr/local/bin/renew-and-update-certs.sh</code>
			\|}

	===How It Works===		===How It Works===
			# Script runs weekly
	1. Script runs weekly		# Checks all certificates for renewal (30 days before expiry)
	2. Checks all certificates for renewal (30 days before expiry)		# Renews any expiring certificates via Let's Encrypt
	3. Renews any expiring certificates via Let's Encrypt		# If successful, copies new certs to Navidrome
	4. If successful, copies new certs to Navidrome		# Restarts Navidrome container with fresh certificates
	5. Restarts Navidrome container with fresh certificates

108.27.135.4 at 17:32, 29 March 2026

2026-03-29T17:32:37Z

← Older revision		Revision as of 12:32, 29 March 2026
Line 1:		Line 1:
	## Automated Certificate Renewal		=Automated Certificate Renewal=

	~~###~~ Script Location		===Script Location===
	<code>/usr/local/bin/renew-and-update-certs.sh</code>		<code>/usr/local/bin/renew-and-update-certs.sh</code>

	~~###~~ Script Contents		===Script Contents===
	<syntaxhighlight>		<syntaxhighlight>
	#!/bin/bash		#!/bin/bash
Line 25:		Line 25:
	</syntaxhighlight>		</syntaxhighlight>

	~~###~~ Task Scheduler Configuration		===Task Scheduler Configuration===

	Control Panel > Task Scheduler		Control Panel > Task Scheduler
Line 36:		Line 36:
	\| Script \| `/usr/local/bin/renew-and-update-certs.sh` \|		\| Script \| `/usr/local/bin/renew-and-update-certs.sh` \|

	~~###~~ How It Works		===How It Works===

	1. Script runs weekly		1. Script runs weekly

108.27.135.4 at 17:32, 29 March 2026

2026-03-29T17:32:06Z

← Older revision		Revision as of 12:32, 29 March 2026
Line 2:		Line 2:

	### Script Location		### Script Location
	`/usr/local/bin/renew-and-update-certs.sh`		<code>/usr/local/bin/renew-and-update-certs.sh</code>

	### Script Contents		### Script Contents
	~~```bash~~		<syntaxhighlight>
	#!/bin/bash		#!/bin/bash

Line 23:		Line 23:
	echo "Certificate renewal failed, skipping Navidrome update"		echo "Certificate renewal failed, skipping Navidrome update"
	fi		fi
	~~```~~		</syntaxhighlight>

	### Task Scheduler Configuration		### Task Scheduler Configuration

108.27.135.4: Created page with "## Automated Certificate Renewal ### Script Location `/usr/local/bin/renew-and-update-certs.sh` ### Script Contents ```bash #!/bin/bash # Renew certificates /usr/syno/sbin/syno-letsencrypt renew-all -v # Check if renewal was successful (exit code 0) if [ $? -eq 0 ]; then # Update Navidrome certificates cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt cp /usr/syno/etc/certificate/system/default/RSA-priv..."

2026-03-29T17:31:39Z

Created page with "## Automated Certificate Renewal ### Script Location `/usr/local/bin/renew-and-update-certs.sh` ### Script Contents ```bash #!/bin/bash # Renew certificates /usr/syno/sbin/syno-letsencrypt renew-all -v # Check if renewal was successful (exit code 0) if [ $? -eq 0 ]; then # Update Navidrome certificates cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt cp /usr/syno/etc/certificate/system/default/RSA-priv..."

New page

## Automated Certificate Renewal

### Script Location
`/usr/local/bin/renew-and-update-certs.sh`

### Script Contents
```bash
#!/bin/bash

# Renew certificates
/usr/syno/sbin/syno-letsencrypt renew-all -v

# Check if renewal was successful (exit code 0)
if [ $? -eq 0 ]; then
# Update Navidrome certificates
cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt
cp /usr/syno/etc/certificate/system/default/RSA-privkey.pem /volume2/docker/navidrome/ssl/private.key
chmod 644 /volume2/docker/navidrome/ssl/certificate.crt
chmod 600 /volume2/docker/navidrome/ssl/private.key
docker restart navidrome
echo "Certificates renewed and Navidrome updated"
else
echo "Certificate renewal failed, skipping Navidrome update"
fi
```

### Task Scheduler Configuration

**Control Panel > Task Scheduler**

| Setting | Value |
|---------|-------|
| Task name | Auto-renew SSL and Update Navidrome |
| User | root |
| Schedule | Weekly (Sunday, 3:00 AM) |
| Script | `/usr/local/bin/renew-and-update-certs.sh` |

### How It Works

1. Script runs weekly
2. Checks all certificates for renewal (30 days before expiry)
3. Renews any expiring certificates via Let's Encrypt
4. If successful, copies new certs to Navidrome
5. Restarts Navidrome container with fresh certificates